Virtual transportation point of sale

• US 9,473,295 B2
• Filed: 07/12/2013
• Issued: 10/18/2016
• Est. Priority Date: 09/26/2011
• Status: Expired due to Fees

• Current Assignee: Cubic Corporation
• Original Assignee: Cubic Corporation
• Inventors: Karsch, Boris, Lyne, Malcolm, deKozan, David, Mistry, Pradip
• Primary Examiner(s): LE, CHAU D
• Application Number:
  US13/940,455
• Publication Number:
  US 20130305035A1
• Time in Patent Office: 1,194 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Embodiments provided herein include techniques for enabling a mobile device to communicate with smart media in a manner that can sidestep the secure element of the mobile device—and the costs associated with it. The mobile device can communicate with the smart media using near-field communication (NFC) by creating an encrypted connection with a remote computer while bypassing a secure element of the mobile device. This allows the mobile device to provide point-of-sale (POS) functionality by reading and/or writing to the smart media, without compromising the security of the smart media.

Claims

1. A method of establishing a secure connection with a smart media, the method comprising:

receiving, from a card reader, unencrypted identifying information regarding the smart media;

determining, with a computer, an encryption key based on the unencrypted identifying information;

establishing a secure communications link between the computer and the card reader, wherein the secure communications link is established based on at least a portion of the unencrypted identifying information read from the smart media by the card reader; and

communicating encrypted data to be written to the smart media by the card reader without decryption to the card reader, via the secure communications link.

2. The method of establishing the secure connection with the smart media as recited in claim 1, further comprising communicating a transaction summary to a smart media system.

3. The method of establishing the secure connection with the smart media as recited in claim 2, wherein the smart media system comprises a parking system database.

4. The method of establishing the secure connection with the smart media as recited in claim 1, further comprising:

receiving, from the card reader, information indicative of a payment, and

communicating, to the card reader, value data to be written on the smart media.

5. The method of establishing the secure connection with the smart media as recited in claim 4, wherein the value data comprises data corresponding to at least one of:

a product,

a unique reference transaction,

an updated command,

a deducted value, or

validation of a pass.

6. The method of establishing the secure connection with the smart media as recited in claim 1, further comprising:

receiving, from the card reader, information indicative of usage of the smart media, and

debiting the smart media, via the card reader, a value associated with the usage of the smart media.

7. The method of establishing the secure connection with the smart media as recited in claim 1, wherein the smart media comprises at least one of:

a contactless smart card,

a virtual card residing on an electronic device,

a credit card,

a debit card, or

a radio-frequency identification (RFID) tag.

8. The method of establishing the secure connection with the smart media as recited in claim 1, further comprising receiving, from the card reader, information indicative of user input.

9. The method of establishing the secure connection with the smart media as recited in claim 8, wherein the information indicative of the user input includes at least one of:

login information,

payment source information,

payment amount information, or

an indication of a product or service for purchase.

10. A non-transitory computer-readable medium having instructions embedded thereon enabling a smart media to be used at a card reader, the instructions including computer-executable code for:

receiving, from a card reader, unencrypted identifying information regarding the smart media;

determining an encryption key based on the unencrypted identifying information;

establishing a secure communications link with the card reader, wherein the secure communications link is established based on at least a portion of the unencrypted identifying information read from the smart media by the card reader; and

communicating encrypted data to be written to the smart media by the card reader without decryption to the card reader, via the secure communications link.

11. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions further include computer-executable code for communicating a transaction summary to a smart media system.

12. The non-transitory computer-readable medium as recited in claim 11, wherein the instructions further include computer-executable code for communicating parking information to the smart media system.

13. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions further include computer-executable code for:

receiving, from the card reader, information indicative of a payment, and

communicating, to the card reader, value data to be written on the smart media, the value data corresponding to a value of the payment.

14. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions further include computer-executable code for:

receiving, from the card reader, information indicative of usage of the smart media, and

debiting the smart media, via the card reader, a value associated with the usage of the smart media.

15. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions comprise computer-executable code for communicating with a smart media comprising at least one of:

a contactless smart card,

a virtual card residing on an electronic device,

a credit card,

a debit card, or

a radio-frequency identification (RFID) tag.

16. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions further include computer-executable code for receiving, from the card reader, information indicative of user input.

17. The non-transitory computer-readable medium as recited in claim 10, wherein the instructions further include computer-executable code for receiving the information indicative of the user input comprising at least one of:

login information,

payment source information,

payment amount information, or

an indication of a product or service for purchase.

18. A computer server configured to establish a secure connection with a smart media via a card reader, computer server comprising:

a communications interface,

a processing unit coupled with the communications interface,

a memory coupled with the processing unit, and comprising instructions that, when executed by the processing unit, cause the computer server to;

receive, from a card reader, unencrypted identifying information regarding the smart media;

determine an encryption key based on the unencrypted identifying information;

establish, via the communications interface, a secure communications link with the card reader, wherein the secure communications link is established based on at least a portion of the unencrypted identifying information read from the smart media by the card reader; and

communicate encrypted data to be written to the smart media by the card reader without decryption to the card reader, via the secure communications link.

19. The computer server as recited in claim 18, wherein the memory further comprises instructions for causing the computer server to communicate a transaction summary to a smart media system.

20. The computer server as recited in claim 18, wherein the transaction summary comprises information regarding a parking transaction.

21. The computer server as recited in claim 18, wherein the memory further comprises instructions for causing the computer server to:

receive, from the card reader, information indicative of a payment, and

communicate, to the card reader, value data to be written on the smart media, the value data corresponding to a value of the payment.