Security token for mobile near field communication transactions

• US 9,280,772 B2
• Filed: 08/25/2014
• Issued: 03/08/2016
• Est. Priority Date: 11/14/2011
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Baldwin, Christopher F., Barnes, Bruce, Kenny, Patrick J., Khoshaba, Shadi I., Mallian, Dolores J., Marathe, Nikhil S., Stahulak, Charles M.
• Primary Examiner(s): ZARE, SCOTT A
• Application Number:
  US14/467,280
• Publication Number:
  US 20140365374A1
• Time in Patent Office: 561 Days
• Field of Search: 705/16
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05

Abstract

Devices, systems, and methods are disclosed which relate to an NFC-enabled security token that is removably coupled to a mobile device. The security token may be provisioned with the information by the mobile device, then decoupled from the mobile device and used to authenticate the user or perform a transaction at a POS terminal equipped with an NFC reader. The security token includes logic for user-controlled restrictions on allowable purchases, such as payment limits, timeouts, vendor identifiers, allowed purchases, and location-based restrictions. The security token is further equipped with “self-destruct” security features, such as deactivating itself or erasing any sensitive information upon being unable to contact the mobile device for a specified duration, or being subject to an unauthorized or restricted transaction, until such time as it is re-coupled to the mobile device.

Claims

1. A method comprising:

detecting, at a mobile device comprising a processor, a security token in communication with the mobile device, the security token comprising a transceiver and a token memory that stores a token logic;

obtaining, at the mobile device, transaction information associated with a transaction;

obtaining, at the mobile device, a restriction to be imposed on the transaction; and

transmitting, by the mobile device, the transaction information and the restriction to the security token for storage on the token logic, wherein the token logic, when executed by the security token, enables a point-of-sale terminal to access the transaction information and to complete the transaction if the restriction is not triggered during the transaction.

2. The method of claim 1, wherein obtaining the transaction information comprises presenting a display via which the transaction information is obtained.

3. The method of claim 2, wherein obtaining the restriction comprises obtaining, via the display, the restriction, and wherein the restriction comprises a purchase amount and a time limit.

4. The method of claim 1, further comprising:

transmitting a status inquiry to the security token; and

receiving a response status from the security token.

5. The method of claim 1, wherein the restriction comprises a point-of-sale identifier.

6. The method of claim 1, wherein the restriction comprises a location-based restriction, and wherein the restriction is enforced by obtaining location information using a global positioning system receiver.

7. A non-transitory computer storage medium comprising computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

detecting a security token in communication with a mobile device, the security token comprising a transceiver and a token memory that stores a token logic;

obtaining transaction information associated with a transaction;

obtaining a restriction to be imposed on the transaction; and

transmitting the transaction information and the restriction to the security token for storage on the token logic, wherein the token logic, when executed by the security token, enables a point-of-sale terminal to access the transaction information and to complete the transaction if the restriction is not triggered during the transaction.

8. The non-transitory computer storage medium of claim 7, wherein obtaining the transaction information comprises presenting a display via which the transaction information is obtained.

9. The non-transitory computer storage medium of claim 8, wherein obtaining the restriction comprises obtaining, via the display, the restriction, and wherein the restriction comprises a purchase amount and a time limit.

10. The non-transitory computer storage medium of claim 7, wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising:

transmitting a status inquiry to the security token; and

in response to not receiving a response status from the security token, transmitting, to the security token, an instruction to erase the transaction information.

11. The non-transitory computer storage medium of claim 7, wherein the transaction information comprises personal information associated with a user of the mobile device and payment information associated with a payment to be used for the transaction.

12. The non-transitory computer storage medium of claim 7, wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising:

detecting the security token in communication with the mobile device; and

obtaining, from the security token, a transaction report.

13. The non-transitory computer storage medium of claim 12, wherein the transaction report comprises a list of items purchased during the transaction, an amount of the transaction, and a point-of-sale terminal identifier.

14. The non-transitory computer storage medium of claim 7, wherein the restriction comprises a location-based restriction, and wherein the restriction is enforced by obtaining location information using a global positioning system receiver.

15. A device comprising:

a processor; and

a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising;

detecting a security token in communication with a mobile device, the security token comprising a transceiver and a token memory that stores a token logic;

obtaining transaction information associated with a transaction;

obtaining a restriction to be imposed on the transaction; and

transmitting the transaction information and the restriction to the security token for storage on the token logic, wherein the token logic, when executed by the security token, enables a point-of-sale terminal to access the transaction information and to complete the transaction if the restriction is not triggered during the transaction.

16. The device of claim 15, wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising:

transmitting a status inquiry to the security token; and

in response to not receiving a response status from the security token, transmitting, to the security token, an instruction to erase the transaction information.

17. The device of claim 15, wherein the transaction information comprises personal information associated with a user of the mobile device and payment information associated with a payment to be used for the transaction.

18. The device of claim 15, wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising:

detecting the security token in communication with the mobile device; and

obtaining, from the security token, a transaction report.

19. The device of claim 18, wherein the transaction report comprises a list of items purchased during the transaction, an amount of the transaction, and a point-of-sale terminal identifier.

20. The device of claim 15, wherein the restriction comprises a location-based restriction, and wherein the restriction is enforced by obtaining location information using a global positioning system receiver.