US20130017784A1 - Ota provisioning to a secure element used for nfc transacations - Google Patents

Abstract

A method for configuring a mobile communication device to perform transactions using a second communication channel that is different from a first communication channel through which the mobile communication device sends voice data. The method includes attaching a secure element to the mobile communication device. The secure element includes a memory storing an application, a processor configured to execute the application stored in the memory; and a wireless transceiver configured to send transaction data associated with the executed application through the second communication channel to a terminal that is remote from the mobile communication device.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS
• This application is a continuation of application Ser. No. 11/933,321, filed Oct. 31, 2007, which is a continuation-in-part of application Ser. No. 11/467,441, filed Aug. 25, 2006, now abandoned, which claims priority to U.S. Provisional Patent Application No. 60/766,171 and U.S. Provisional Patent Application No. 60/766,172, both filed on Dec. 31, 2005, all of which are incorporated by reference herein in their entireties.
FIELD OF INVENTION
• The present invention relates to data communications and wireless devices.
BACKGROUND OF THE INVENTION
• Online transactions—e.g., for purchasing goods, receiving downloads, and so on—which involve personal computers and the Internet are well known. Further, wireless mobile communication devices, such as cell phones, blackberries or other personal digital assistants, are also being used for making transactions. For example, U.S. Patent Application No. US/2003/0172028 provides a description of a personal payment system that utilizes a wireless enabled device such as a cell phone. As described, the personal payment system interacts using a Bluetooth protocol with a terminal located nearby the wireless enabled device. In another example, U.S. Pat. No. 7,031,945 describes a system and method that provides an electronic ticket to a smart card or standard wireless device that is identified with a user's account.
• Further, wireless mobile devices that include a near field communication (NFC) device and a smart card (that uses an RFID for identification purposes) allow a person to securely make a simple transaction, such as for example, purchasing a bus ticket. In such an example, the person typically waves the wireless mobile device near a reader installed in a bus, and a price of the bus ticket is deducted from a total amount that is available and stored on the smart card of the wireless mobile device. Optionally, the amount of the bus ticket can be forwarded to a server that can identify the identification code of the particular RFID and then subsequently charge the person for the purchase of the bus ticket.
• While the references discussed above illustrate that certain transactions are possible using wireless mobile devices, one problem associated with the references are is that implementations described in the references are not useful in a wide variety of different platforms, but rather are typically tied to a specific platform. For example, NFC devices are only usable with NFC readers. Another problem is that conventional wireless mobile devices generally have a very limited ability to be used in transactions.
BRIEF SUMMARY OF THE INVENTION
• In general, in one aspect, this specification describes a method and system for configuring a mobile communication device to perform transactions using a second communication channel that is different from a first communication channel through which the mobile communication device sends voice data. The method includes attaching a secure element to the mobile communication device. The secure element includes a memory storing an application, a processor configured to execute the application stored in the memory; and a wireless transceiver configured to send transaction data associated with the executed application through the second communication channel to a terminal that is remote from the mobile communication device.
• The details of one or more implementations are set forth in the accompanying drawings and the description below. Other features and advantages will be apparent from the description and drawings, and from the claims.
BRIEF DESCRIPTION OF THE DRAWINGS
• FIG. 1 illustrates one implementation of a block diagram of a communication system including a wireless mobile communication device.
• FIG. 2 illustrates one implementation of radio element in the wireless mobile communication device ofFIG. 1.
• FIG. 3 illustrates one implementation of a wireless mobile communication device.
• FIGS. 4A-4C respectively illustrate an implementation of a secure element in the wireless mobile communication device ofFIG. 1.
• FIG. 5 illustrates one implementation of a point of sale terminal.
• FIGS. 6A-6D illustrate a flowchart for conducting a transaction according to one implementation.
• FIG. 7 illustrates one implementation of a secure element that is attachable to a wireless communication device.
• FIG. 8 illustrates a communication system in accordance with one implementation.
• FIG. 9 illustrates a communication system in accordance with one implementation.
• FIGS. 10A-10B illustrate example client user interfaces that are displayable on a display of the mobile communication device ofFIG. 9.
• Like reference symbols in the various drawings indicate like elements.
DETAILED DESCRIPTION OF THE INVENTION
• This disclosure describes a communication system and method for assisting a user to complete a transaction.FIG. 1 illustrates one implementation of acommunication system100. Thecommunication system100 includes a hand-held, wirelessmobile communication device110 that (in one implementation) includes aradio element120 and asecure element130. Adisplay124 is shown associated with theradio element120, and antennas (not labeled) are shown as associated with each of theradio element120 and thesecure element130. Each antenna can physically be implemented in a manner that is different from the wireless antennas shown inFIG. 1. For example, an antenna can comprise a stripe that is passed along a reader, or comprise some suitable transmission mechanism. Althoughelements120 and130 are shown as distinct and separate, anddisplay124 is shown as connected to theradio element120, other configurations are possible. In particular, a combination in which a single processor is used to execute the functions that are currently performed and described herein as being provided by both theradio element120 and thesecure element130. Further as illustrated inFIG. 1, both theradio element120 and thesecure element130 are internal to themobile communication device110, although in other implementations thesecure element130 can be external to themobile communication device110, as described below. Also, various different functionalities can be included within theradio element120 and thesecure element130.
• In one implementation, themobile communication device110 has the functionality to communicate with one of many different a point of sale (POS) terminals150-1 to150-n—e.g., in a contactless manner using a wireless protocol. Themobile communication device110 can also similarly communicate with one or more point of entry (POE) terminals190-1 to190-n. The point-of-sale terminal150 receives one of the transaction request signals from themobile communication device110 and transmits the one transaction request signal to atransaction server170, typically using acommunication channel160 such as the Internet. Thetransaction server170 verifies the transaction, and forwards a transaction verification signal to the management server180. The management server180 identifies the user corresponding to the transaction verification signal, and provides a first transaction response signal back to themobile communication device110 as one of the transaction signals.
• In one implementation, the first transaction response signal is communicated back to themobile communication device110 using a communication channel that is different from the communication channel used to initiate the transaction. In one implementation, different transaction response signals can be communicated back to themobile communication device110 using communication channels from the management server180 to theradio element120 associated with thedevice110, as well as from the management server180 to thesecure element130 through thePOS terminal150 or thePOE terminal190. Further detailed descriptions of these implementations are discussed in greater detail below.
• FIG. 2 illustrates one implementation of theradio element120 associated with themobile communication device110, and illustrates theradio element120 connected to thedisplay124 of themobile communication device110. In one implementation, theradio element120 includes aradio transceiver122 that is adapted to send outgoing voice and data signals and receive incoming voice and data signals over a radio communication channel. The radio communication channel can be a digital radio communication channel, such as CDMA or GSM. Such a radio communication channel has the capacity to communicate both voice and data messages using conventional techniques. Theradio transceiver122 communicates with aradio processor123, which processor has the capability to perform not only the radio communication services necessary to allow for phone and data communications, but can also execute various programs that are stored in thememory126, which programs can receive inputs from the user via thedisplay124 and/or akeypad125 associated with themobile communication device110.
• In one implementation, application programs running on theradio processor123 are, e.g., BREW or J2ME applications and can encompass a broad array of application types. For example, current applications include games, enterprise applications, and multimedia applications. In one implementation, theradio processor123 runs an application that provides movie and event information. Such an application can comprise ticketing applications, content, item and service purchase applications, and/or payment management applications (referred to herein also as “wallet applications”). In one implementation, theradio processor123 also has the capability of recognizing secure communications, and transmits data which must be stored in a secure environment to thesecure element driver128 for transmission to thesecure element130. In one implementation, in which both theradio element120 and thesecure element130 are internal to themobile communication device110, transmissions to thesecure element130 can take place using an internal wired communication channel. In one implementation, theradio processor123 also has the capability of receiving data from thesecure element130, e.g., using the internal wired communication channel. In one implementation, thesecure element130 and theradio element120 communicate using signals described in the Java Card 2.1 Platform API Specification.
• In one implementation, both theradio element120 and thesecure element130 are disposed internally within a body of themobile communication device110. For example, referring toFIG. 3, themobile communication device110 is shown including aslot400, which allows for the insertion of asecure element130 into theslot400. In this configuration, thesecure element130 can be purchased independently of themobile communication device110. Thesecure element130 can also be disposed into a slot that only provides for physical insertion and mechanical connection to the body of themobile communication device110. In such an implementation, the secure element can include a transceiver that allows for the communication with theradio element130 through a wireless local communication channel. Theradio element120 also is illustrated as optionally including anothertransceiver129, such as a Bluetooth or WIFI transceiver, which can transmit and receive signals with an external device and then communicate signals to and from theradio processor123. This additional communication channel allows for communications between other external devices, such as an external Bluetooth enabled smartcard, and provides an additional communication channel that is useful for certain transactions, as described further herein.
• FIG. 4A illustrates one implementation of thesecure element130 associated with themobile communication device110. Thesecure element130 can be a smart card. In one implementation, thesecure element130 includes asecure processor132, asecure memory133, and aPOS transceiver134 adapted to send transaction request signals and receive transaction response signals over a first communication channel. In one implementation, thesecure processor132 communicates via thesecure element driver128 with theradio processor123 using signals as described in the Java Card 2.1 Platform API Specification. The transaction request signals and the transaction response signals associated with the transaction can include an identification code associated with the user, as well as information relative to the transaction, such as item, quantity, vendor, and so on. In one implementation, thePOS transceiver134 is an NFC device, which uses an NFC modem. ThePOS transceiver134 can also be a Bluetooth, WIFI or other transceiver. In an implementation in which the POS transceiver is an NFC modem, such an NFC modem will typically have a set of registers that can be read/written by thesecure processor132. These registers are in turn available for reading and writing over the RFID communications channel and serve as a shared memory between thesecure processor123 within thesecure element130 and the RFID reader that is associated with thePOS terminal150. This communication is specified, for example, in the ISO 14443A/B standard. The secure element can optionally include a radio/Bluetooth/WIFI transceiver136, which can communicate with other devices, such as a transceiver associated with theradio processor120 or for other external devices having those communication capabilities, thus allowing for more flexibility.
• FIG. 4B shows another implementation of asecure element130, in which theradio element120 does not communicate with thesecure element130 through asecure element driver128. In this case, for example, thesecure element130 may be external to themobile communication device110 and as such is not connected to the radio element through thesecure element driver128. In such an implementation, however, if thetransceiver136 as described above is included, and asimilar transceiver129 associated with theradio element130 as described previously with respect toFIG. 2 is included, then this communication channel can be used to wirelessly obtain direct communications between theradio element120 and thesecure element130. This implementation allows for certain bidirectional communications with other devices, as well as with theradio element120, and as such more functionality and flexibility is achieved. This implementation is particularly useful since it establishes a direct local communication path with theradio element120, since there is not communications with theradio element120 via the path ofdriver128.
• This implementation allows for certain bidirectional communications with other devices, as well as with theradio element120, and as such more functionality and flexibility is achieved. This implementation is particularly useful for establishing a direct local communication path with theradio element120, since there are no communications with theradio element120 via the path ofdriver128. If either of thetransceivers129 or136 are not associated with therespective radio element120 orsecure element130, and there is no direct connection between theradio element120 and thesecure element130, then a direct communication link between theradio element120 an thesecure element130 will not exist. As such, while ticketing and many transactions can still exist, data from a real-time transaction performed using thesecure element130 cannot be made directly available to the radio processor and the applications stored thereon. In such an implementation, certain redundancy checks may not occur. For example, a ticketing application can be programmed to provide an alert if a ticket receipt has not been received within a certain period of time. Such an alert would not be possible to program directly (although it could be programmed indirectly via the button panel on the phone).
• FIG. 7 illustrates one implementation of asecure element130 that can be attached (or affixed) externally to a wireless communication device (e.g., mobile communication device110). In one implementation, thesecure element130 has circular shape. Thesecure element130 can have other suitable shapes—e.g., rectangular, triangular, and so on. In one implementation, thesecure element130 includes an embeddedsmart chip702 that is capable of executing proximity services (e.g., services related to payments, ticketing, identification, sending coupons, etc.). In one implementation, thesmart chip702 is capable of 2-way wireless communication (e.g., RFID, NFC, Bluetooth, etc.) with a supporting 3rdParty terminal. In one implementation, the 2-way communication is performed using a communication protocol that is different from a communication protocol through which the mobile communication device sends or receives voice and/or data signals. Multiple application protocols (NFC, MiFare, etc.) can be supported. In one implementation, thesmart chip702 is programmable. Accordingly, different application (for payments, ticketing, identification, coupons, etc.) can be developed, downloaded to the smart chip, and commissioned. Thus in operation, in response to thesecure element130 being placed in close proximity with a suitable terminal, the terminal will trigger (via application protocol) an appropriate application stored in the smart chip, and the smart chip will respond appropriately with the terminal.
• In one implementation, the smart chip uses a low-power RF transmitter/receiver to communicate with a terminal. The low-power output of the smart chip makes it susceptible to RF interference from neighboring devices. Specifically problematic are components associated with the mobile communication device, e.g., battery, antennae (internal or external), to which thesecure element130 is affixed. Thus, in one implementation, thesecure element130 includes an RF shield to insulate the smart chip from external interference. In one implementation, a lining of thesecure element130 is composed of an RF absorbent material/lining. In general, each phone has different levels of interference, and a material, size and thickness of the RF lining can determine an effectiveness of the RF shield. In one implementation, an RF shield can be placed between thesecure element130 and themobile communication device110.
• Given the abuse a mobile communication device can take, components that are affixed externally to a mobile communication device need to be able to withstand some abuse. Thus, in one implementation, the secure element includes aruggedized shell704 that encases a smart chip (with antennae). In one implementation, theshell704 is formed from a composite plastic or polymer. The shell70 can be hard (and substantially inflexible) or be soft (and pliable). In one implementation, theshell704 provides a protective membrane for the smart chip which prevents damage to internal circuitry, a surface to adhere to an RF lining and/or a mobile communication device with appropriate adhesive, and a surface to print branding and advertising. Types of adhesives that can be used to affix thesecure element130 to a mobile communication device include, for example, paper glue, super glue, polymers, and the like. In one implementation, theshell704 has a maximum width (or diameter) of 25 mm, and has a maximum thickness (or depth) of 5 mm.
• FIG. 4C shows another implementation of asecure element130, in which thesecure element130 does not include a processor that is capable of bidirectional communications, but instead includes apassive device138. Thepassive device138 can be an RFID sticker or suitable tag that allows for uniquely identifying a user, such that a transaction that is initiated with thepassive device138 will cause the management server180 to perform transaction details. In this implementation, the code received from the POS terminal150 (or the POE terminal190) is transmitted from the POS terminal150 (or the POE terminal190) to themanagement server190, which then takes over the transaction. Thispassive device138, with the identification code stored thereon, can thus be associated with amobile communication device110 not otherwise equipped for such communications, and themanagement server190 can provide transactional information to themobile communication device110 using available channels on the mobile communication device (such as audio, SMS, or other known data transmission methods). While bidirectional communications do not occur with other devices, transactions are possible, because themanagement server190 is involved.
SMS (Short Messaging Service) as a Data Transmission Method
• As discussed above SMS (Short Message Service) can be used as a data transmission method between themanagement server190 and themobile communication device110. SMS is generally unstructured. Thus, when messages arrive in an inbox of a user inbox, the user cannot easily search, retrieve, or organize the messages. In addition, due to SMS's send-and-forget characteristics, it cannot be assumed that messages are received by the terminating point, or if received, received in a particular sequence.FIG. 8 illustrates acommunication system800 in accordance with one implementation. The communication system800 includes amobile communication device802 that communicates with a remote server804 (e.g., a transaction server) via SMS. Themobile communication device802 includes amobile application806 that receives SMS messages from theremote server804 and organizes the SMS messages (including linking corresponding messages into a pre-determined order) so that data can be stored and displayed to a user in an organized and easily retrievable fashion, unlike a conventional application that implements SMS as a data transmission method in which SMS messages remain in an unstructured format and are unlinked. Such an unstructured format does not allow the user to retrieve, organize, or manage the display of messages. Themobile application806 can be, for example, a J2ME, BREW, Windows Mobile, or other type of application.
• In one implementation, themobile application806 is a rich client application (also commonly referred to as a fat client application or thick client application). A rich client application is a client application that performs the bulk of any data processing operations itself, and does not necessarily rely on a server (e.g., remote server804). Themobile application806 can also be a thin client application or hybrid client application. In one implementation, themobile application806 is the Blaze Mobile Wallet Lite application available from Mobile Candy Dish Inc. or Berkeley, Calif. In one implementation, themobile application806 provides banking and money management transaction services, and transmits data from thewireless communication device802 via SMS in accordance with a connectionless protocol.
• FIG. 9 illustrates acommunication system900 in accordance with one implementation. Thecommunication system900 includes a mobile communication device902, amanagement server904, a user/profile database906, and amoney management database908. In one implementation, themanagement server904 is a Blaze server. In one implementation, the mobile communication device902 stores amobile application910 that uses short message service (SMS) over a connectionless protocol to transmit data to themanagement server904. SMS permits themobile application910 to send messages of a fixed size, for example, up to 160 characters, to and from the wireless mobile communication device902. In one implementation, themanagement server904 includes anSMS aggregator912 to aggregate each message received from the wireless mobile communication device902 and keep track of the ordering of each message, and (in one implementation) also groups each message into a corresponding group. In one implementation, themobile application910 also includes an SMS aggregator (not shown).
• Thus, in one implementation, themobile application910 is not browser HTTP based, and delivers banking and money management services. Themobile application910 also leverages a low-end communication infrastructure (also referred to herein as a “bearer service”). A bearer service that is universal on all mobile devices is the Short Message Service (SMS). SMS is a means of sending short messages to and from mobile phones to the Application Service Provider (ASP) Server “Server”. It is inherently a connectionless communication protocol, i.e., send and forget. There is no acknowledgement to the Mobile Originating (MO) sender that the message sent was successfully received by the Mobile Terminating (MT) recipient. There is no concept of timeouts, message lost, message not received, etc. Leveraging SMS as a bearer service to support a ‘rich’ client application. The Client will listen to a specific incoming SMS port to be defined based on Network Operator/Carrier, Phone Vendor, etc.
• In one implementation, themobile application910 provides banking and money management service, which includes (but is not limited to):
• • Registration: User creates new MW Lite account with PIN (PIN and user info can be stored in user/profile database306)
  • Security & Encryption: Sensitive information may optionally by encrypted using 3rdParty or native phone tools (Bouncy Castle, etc.). Encryption (Public/Private) keys may be managed or proxy'd by Server which may additionally be out-sourced to 3rdparty Key Management vendor.
  • Install & Configuration (I&C): Refers to setting up proxies to
    • payment accounts (virtual, credit, debit & banking)
    • Payees (BillPay, PayAnyone, etc.) and associated rules
    • Specify default payment account to debit fund transfers/unloading
    • Specify default payment account to credit fund transfers/loading
    • Activation of 3rdParty Services (Account Balance, Bill Pay, Fund Transfer, Funds Loading, Funds Unloading)
    • It is assumed Client application is pre-installed or downloaded to mobile device.
    • I&C to be performed via Kiosk, ATM, 3rdParty/Carrier Web Portal, MCD Web Portal, on mobile device, or other suitable device.
  • Loading Funds
  • Banking or financial data
    • Account balance
    • Transaction history
    • Bill Pay-Biller Direct
    • Fund Transfer-Intra Bank; Me-2-Me
    • Fund Transfer-Inter Bank; Me-2-Me
    • Fund Transfer-Inter Bank; Me-2-You (based on Bank Routing/Account#)
    • Fund Transfer-Inter Bank; Me-2-You (based on WalletID)
    • Fund Transfer-Inter Bank; Me-2-You (based on ACH Check). A.k.a. Bill Pay Anyone
    • Load Fund
  • Unload Funds (ATM Withdrawal, etc.)
  • Sync: Ensures server-side objects are downloaded to client and locally cached. This includes payment accounts, payees, payment rules, server-side cached account info (account balance, Last-N transaction history), etc.
    • This info will be cached on Client.
    • Users can create transaction either in ONLINE or OFFLINE (no network connectivity) mode
  • Initiating/Triggering Banking Services:
  • Storage: Storage of Users MWLite info, User's payment account info (credentials, account balance, history, etc.); Banking Payment History (BillPay, Fund Transfer, Fund Loads, Fund Unloads, etc.)
Scenarios/Features
• 1. Overlaying connection protocol properties over SMS. This includes: segmenting complex command and control (C&C) messages into 1 or more SMS messages, and re-constructing one or more SMS messages into complex C&C resultset messages. Re-constructing the one or more messages into complex C&C resultset messages can include one or more of the following providing acknowledgement, handling out-of-sequence incoming messages, handling unexpected messages or messages considered lost (due to timeout, etc.), Managing encryption as needed, and so on.
• 2. User uses themobile application910 to initiate/trigger appropriate banking service. For example, referring toFIG. 10A a user can initiate a bill paying service through which a payee (e.g., PG&E) can be paid. In one implementation, the display of the bill pay screen can include an advertisement as shown inFIG. 10A.
• 3. Themobile application910 formulates appropriate banking services commands, for example:
• • “<command> <PaymentAccount> <Payee> <$amt> <tarnsferDate> <PIN> <sequenceID> <message> <messages>”
    • billpay MCC-2345 PG&E 110.23 20070328 1234 36 1 1
    • transfer bofa-1007 jdoe 25.00 20070328 1234 36 1 1#where jdoe is a walletID
    • transfer bofa-1007 8005550001 25.00 20070328 1234 36 1 1#where 8005550001 is the phoneNumber of unloading station.
    • fundstransfer bofa-1007 gwbush 30.00 20070328 1234 36 1 1#gwbush is a payee
  • “<command> <PaymentAccount> <PIN> <sequenceID> <message> <messages>”
    • Balance bofa-1007 1234 36 1 1
• 4. A Loading Station (Kiosk, etc.) can load funds by sending command to MCD's Loading Shortcode.
• • “<command> <PaymentAccount> <Payee> <$amt> <transferDate> <PIN> <sequenceID> <message> <messages>”
    • load CorpBankPayrollAccount-2007 8005550001 4000.00 20070328 0987 43 1 1 (#Debit account CorpBankPayrollAccount-2007 by $4000 and credit account held by user with phone Number 8005550001)
• 5. Receive multiple (in/out sequence, missing, lost, etc.) messages to reconstruct a complex messages.
• • <sequenceID>:<message>:<messages>; <body>
    • “36:1:6; acct:Bofa-1007 bal:40123.32 date:20071009”
    • “36:3:6; date:20071009 name:Merchant2 amt:123.81”
    • “36:6:6; date:20071009 name:Merchant5 amt:423.81”
    • “36:4:6; date:20071009 name:Merchant3 amt:223.81”
    • “36:2:6; date:20071009 name:Merchant1 amt:23.81”
    • “36:5:6; date:20071009 name:Merchant4 amt:323.81”
• In one implementation, post processing of these multiple messages results in the screen shown inFIG. 10B which displays the account balance and the last five transactions in a transaction history list. The list can be cached on the mobile communication device902 for later use.
• 6. Cashed data is refreshed upon user request. This in turn invokes a command similar to the following:
• • <command> <account> <PIN> <sequenceID> <message> <messages>
    • Balance Bofa-1007 1234 37 1 1 (# Where 37 is the next <sequenceID>)
Connection Protocol Properties
• The above description introduced the concept on <sequenceID> <message> <messages>. The sequenceID is a rotating pool per Client, issued by the Client, used as a callback mechanism, i.e., match outgoing command messages and incoming resultset messages. Since resultsets can be long and complex, the resultset is broken into pages, where each page can fit with the allowed payload size of an SMS message. Hence, “<message> <messages>” implies “Page 1 of 5”. The Client (or mobile application) then has to wait for all <messages> to arrive before re-constructing the original resultset. Due to characteristics of SMS, the client has to handle scenarios when a message with an un-expected sequenceID arrives. In addition, if a missing page within the expected sequenceID fails to arrive within a specified time interval, the client needs to request retransmission, e.g., “retransmit 36:4:6 1234” which will instruct server to retransmit resultset 36, part 4 of 6.
• The pool size (or range of valid sequenceID's) controls the asynchronous aspect of the application. The sequenceID is mapped to the command (at least until the sequenceID is re-used). Hence, the client will use the sequenceID to determine to command and associate the appropriate display style sheet to best display the resultset to the user. For example, if sequenceID=36 was issued by the command ‘balance’ which determines account balance, it makes sense to leverage the ‘Account Balance & History’ style sheet to present this information.
• SMS messages to and from the mobile communication device has to be acknowledged. A simple protocol is necessary, for example, as follows:
• • 1. # Mobile Originated (MO) command
    • <command> <body> <sequenceID> <message> <messages>
    • balance Bofa-1007 1234 37 1 1
  • 2. # Server, a.k.a., Mobile Terminating (MT) receives and acknowledges receipt of message ‘37 part 1 of 1.”
    • ack 37 1 1
  • 3. # MT responds with resultset
    • 36:1:2; acct:Bofa-1007 bal:40123.32 date:20071009
  • 4. # MO receives and acknowledges receipt of message ‘36 part 1 of 2.”
    • ack 37 1 2
  • 5. # MT responds with resultset (part 2 of 2)
    • “36:2:2; date:20071009 name:Merchant1 amt:23.81”
  • 6. # MO receives and acknowledges receipt of message ‘36 part 2 of 2.”
    • ack 37 2 2
  • 7. # MO has received all messages. Reconstruct & store message
  • 8. # Next time user view account balance, display cached (local store) information:
    • Bank Account: Bofa-1007
    • Balance: $40,123.32 as of Oct. 9, 2007
    • 10/9/2007 Merchant1 $23.81
Online/Offline Access
• In one implementation, a mobile communication device creates task/objects either while connected with a Server (online-mode) or when no connection is available (offline-mode). Tasks/objects are specific to mobile banking service and include for example: schedule (or cancel) a fund transfer transaction, schedule (or cancel) a bill pay transaction, and manage other banking transactions. In addition, digital artifacts (coupons, tickets, etc.) that possess a state (or status) (e.g., Assigned, Saves, Redeemed, Deleted, etc.) can undergo changes on the mobile communication device. Given these tasks/objects associated to Banking Services and Digital Artifacts has ‘states’ that can be changed in either an online-mode or offline-mode, the Server has to be refreshed/updated either in real-time (online-mode) or in batch (offline-mode).
• For example, given a situation in which a user is travelling in a region in which the user's mobile communication device does not have network access and the user needs to transfer funds into a checking account, the user can use the mobile communication device (with the Mobile Wallet Client application) to schedules a fund transfer in offline mode. Since the mobile communication device has no network connectivity, the Client (in OFFLINE mode) creates a ‘task’ to represent the fund transfer (or any other banking service) using banking information (Banks accounts, etc.) previously cached on mobile device. The task can have an initial state (e.g., “pending”). While the Client is enabled the Client will actively monitor network access. When the user travels into a region where network access is available, the client will identify the network and automatically re-connect to the network. The client will then negotiate with a server and any tasks having a “pending” state on the client are then uploaded to server (either in batch mode or one task at a time). The client (in ONLINE mode) will refresh states of all task from the server (including the recently added tasks) to present to the user the updated status of all tasks managed by the server. Other services possible include, for example: request schedule (or cancellation) of Bill Pay transaction, request schedule (or cancellation) of Fund Transfer transaction, request schedule (or cancellation) of Pay Anyone transaction, any other state-based banking transaction service.
• Using the client (or mobile application), a user can store digital artifacts (e.g., coupons, tickets, etc.) on a mobile communication device. These digital artifacts are objects that are consumed by a 3rdParty, e.g., a ticket can be redeemed at a theater, and a coupon can be redeemed at the Point-Of-Sale of a retail merchant. Hence, this is a 3-way sync: 1) mobile communication device with server, 2. mobile communication device with 3rdParty Merchant, and 3) server with 3rdParty Merchant. For user's convenience, redemption of digital artifacts by a 3rdParty must be enabled in an environment with or without network access. For example, a user with an electronic ticket on a mobile communication device may wish to redeem an eTicket at a theater. However, if there is no network access inside the theater, the user will still need access the eTicket on the client. In ONLINE mode, the client will cache (local store) the eTicket (and any other digital artifact.) In the theater, the client (in OFFLINE mode) will be able to redeem the eTicket and update the state of the eTicket on the mobile communication device (e.g., change state from ‘valid’ to ‘redeemed’). This prevents the user from re-using the eTicket. At some point when the mobile communication device re-acquires network connectivity, the client will then negotiate with the server and any artifacts with a state change (e.g., ‘valid’ to ‘redeemed’, etc.) on the client are then uploaded to the server (e.g., either in batch mode or one task at a time).
• The client (in ONLINE mode) will manage and refresh states of all artifacts from the server (including the recently added tasks) to present to the user. In one implementation, the server is the master repository. In the process of redeeming the eTicket, the eTicket is uploaded to the merchant (via secondary out-of-band communication link, e.g., RFID/NFC, Bluetooth, etc.). This is necessary for theater to update their inventory systems. The 3rdParty may liaise (via an internet connection) with the server to validate eTicket and authenticate the user.
POS (Point of Sale) Terminal
• The point ofsale terminal150 illustrated inFIG. 5 is conventional, in that it has the capability of electronically reading information from a device equipped to transmit information in a format that it reads. Thus, thereader152 within the point ofsale terminal150 can be of one or many types. If the point ofsale terminal reader152 includes the provision for NFC communications, then simply bringing thesecure element130 with the NFC transceiver will cause initiation of a transaction and the transmission of the identification code associated with thesecure element130 and thus the user.
• In one implementation, various software that is downloaded into thememory126 of theradio element120 and thesecure memory132 of thesecure element130, along with software resident on the management server180, cooperate at a layer that is above the physical layer of the communications, in order for the desired transaction to occur. This software is implemented using based upon known knowledge ofmobile communication device110 internals and application platforms, NFC, smartcard internals and application platforms, payment protocols (e.g. PayPass), and the working/workflow associated with POS and POE terminals, and the transaction and management servers. In addition, the present invention provides for piggybacking a tunneling protocol on top of the payment protocol, so that thesecure elements130 can communicate with thetransaction server170 and/or the management server180, without modification to thePOS terminal150 or thePOE terminal190. As such, this includes software within thesecure element130 that embeds the required information in fields which will not adversely affect the performance of thePOS terminal150 and/or thePOE terminal190, and also software intransaction server170 that will extract the piggybacked payload, associate the payload with the management server180 if needed, and then authenticate, authorize, and execute transfers of transaction information to the management server180. In one implementation, the piggybacked payload is sent, instead of to thetransaction server170, to the management server180, which can then associate the transaction and notify thetransaction server170, thePOS terminal150 and/or the POE terminal as needed.
• In one implementation, the management server180 has the capability of storing codes that are from a variety of different mobile communication devices. Thus, codes that are associated with a smart card having an RFID can be stored, as can be codes stored from an RFID sticker, as well as codes that are associated with a smart card that communicates using a slide reader, Bluetooth, or an NFC channel, for example. As such, the management server180 can store user personal and credit and transactional information and history, including a code associated with the user, for a variety of different mobile communication devices, thereby allowing a system which can scale.
• FIGS. 6A-6D illustrate a flowchart of a transaction in accordance with one implementation, and the various steps that are included in the transaction, with reference to which of the various devices are implementing this step. Referring toFIG. 6A, a user first waves a mobile communication device530 (e.g., a NFC device or device having an attached sticker) across (or near) aPOS terminal540. ThePOS terminal540 identifies the technology associated with the mobile communication device, a payment method, user credentials, and payment credentials. Irrespective if t mobile communication device is a NFC-Phone or includes an attached sticker, the mobile communication device sends to thePOS Terminal540 payment credentials including optional credentials (e.g., WalletID). As shown inFIG. 6B, using optional credentials (e.g., WalletID), contact is made with atransaction server510 to request payment credentials. ThePOS terminal540 determines if a security code prompt (e.g., a PIN) is needed? If yes, a prompt is made for the security code (PIN) on thePOS terminal540 and the process continues with processing of the payment. Otherwise, thePOS terminal540 simply proceeds with processing of the payment. As an alternative, thePOS terminal540 can integrate via the back office to amanagement server510 and trigger a PIN prompt on the mobile communication device. In such a case, the user can enter the PIN on the mobile communication device (instead of through the POS terminal540). ThePOS terminal540 hands processing to a payment broker.
• Referring toFIG. 6C, assuming thePOS terminal540 was capable of 2-way communication, if thePOS terminal540 determines that the mobile communication device is a NFC Phone, thePOS terminal540 can write digital artifacts (e.g, eReceipts, eTickets, eCoupons, etc.) to the mobile communication device. Non-secure data is stored in the mobile communication device. Otherwise, thePOS terminal540 sends optional digital artifacts to themanagement server510. As part of an out-of-band sync between themanagement server510 and the mobile communication device, the non-secure digital artifacts are downloaded and stored in the mobile communication device. Secure digital artifacts are downloaded to the mobile communication device and stored on a secure element of the mobile communication device (if possible).
• InFIG. 6D, upon successful payment processing and assuming thePOS terminal540 was capable of 2-way communication, if thePOS terminal540 determines that the mobile communication device is not an NFC Phone, thePOS terminal540 triggers themanagement server510 of payment processing completion. Note, this can be time delayed due to a difference when a payment is posted and cleared. Themanagement server510 can send a notification to the mobile communication device (via SMS, etc.). Since the mobile communication device could be shutdown, the notification will wake-up the mobile application running on the mobile communication device, and initiate SYNC operations between themanagement server510 and the mobile application (or client). Any pending digital artifacts (including notifications, etc.) are displayed on the mobile communication device.
• The present invention, as described previously, allows for various different programs to exist within thememory126 of theradio element120, as well as in thesecure memory132 of thesecure element130.
• Mobile Tickets (eTickets)
• In one implementation, a mobile ticket (also referred to herein as “electronic ticket” or “eTicket”) includes both a unique code that is sent to the consumer's cell phone and a database that allows for the validation of the consumer using their cell phone number and the unique code. The mobile ticket can be used at kiosks in addition to interfacing with a ticket agent. The mobile ticket may be used with or without cell phones equipped with radio technology (i.e., RFID or NFC). In operation, a mobile ticket works when the user is sent a unique code (alpha-numeric, numeric, etc.) to their cell phone. The user is validated as a customer by their cell phone number and their code. If these match the information stored in a central database, the user is allowed admission into a venue by either manual validation by a ticket agent or automatically using RFID or NFC technology.
• In general, an electronic ticket can be delivered to a mobile device and allow a consumer admission into a sports venue, entertainment venue (e.g. concert or movies), or other point of sale location either manually if the consumer displays the electronic ticket to an agent who may issue a paper ticket to the consumer or automatically if the consumer waves their cell phone (if equipped with a radio transmitter) over a POS device which contains a radio receiver. In one implementation, an electronic ticket (or tickets) is selected by viewing an image of the venue seating map. The seating map can be rendered on the mobile device. Users can zoom in/out of the seating map. As User zooms in, additional layers (details, info, etc.) is presented. For example, a user can view Venue->Quadrant->Level->Section->Row. The ability to zoom in/out and present additional levels of details can be processed either on the mobile device (Client) or on the Content Server, the end result is an updated image rendered on the mobile device. In one implementation, seats are color coded to represent availability and price. In this manner, seat inventory (what's available and at what price) can be illustrated graphically. Once user has navigated to lowest level, the image is granular enough to select individual seats. In one implementation, a seat selection will automatically cause a price to be calculated. Any service fee can be included in the ticket price. Once user confirms purchase, reservation request is sent to ticket inventory system. If reservation is successful, a valid electronic ticket is returned to the mobile device.
• The present invention can also be interfaced with certain known and implanted payment protocols, such as Paypass. For implementing these additional payment protocols, implementation of streaming communication protocols (in the full NFC case), protocols for session setup, and configuration of communications modules and secure data areas as needed is necessary, taking into account the communication protocol used (e.g. NFC, Bluetooth, WIFI, CDMA, 3.sup.rd Generation CDMA for example) as well as file transfer protocols and facilities access protocols. In particular, in implementing such protocols, the ability to extract transaction information from thePOS terminal150 to thesecure element130 can be provided during the course of the local interaction between thePOS terminal150 and thesecure element130. For instance, the implementation of PayPass within the invention will take note, and alert the application running on theradio processor123 that a purchase or purchase attempt has occurred, as noted above in the context of the alert discussion. In one implementation, a feature is provided that permits information passed via the PayPass protocol to the POS terminal150 (and thence to the transaction server170) to be augmented with additional fields containing the elements of the tunneling protocol, for subsequent processing by thetransaction server170, either directly, or through the management server180.
• The two transaction workflows that have been specifically discussed above are the credit card and ticketing workflows. Other transaction flows can also be implemented. Debit card and cash card transactions are similar to credit card transactions, with variations being implemented to account for the differences that exist in those types of transactions, which types of transactions are well understood. Coupons can be implemented with the invention, in much the same manner as tickets, though coupons can be transmitted without there being payment. Many of the transaction types noted herein will, as is apparent, require communication between thesecure element130 and theradio element120. As such, due to that requirement, a significant part of the preceding discussion has been directed to how to implement that communication, particularly formobile communication devices110 that are not manufactured to allow for such communications.
• An example of a typical transaction requiring such communication between thesecure element130 and theradio element120 is one in which thePOS terminal150 allows for the transfer of detailed purchase information from thePOS terminal150 to thesecure element130, as well as transactional information from thePOS terminal150 and/or thetransaction server170 to the management server180. The management server180 can then also communicate with theradio element120 via the radio channel. This allows for the matching and reconciliation of detailed purchase information and, if the transaction fails, failure details can be matched to the purchase information, and forwarded in real-time to the user via theradio element120. In one implementation, there is included the provision for different phones to communicate the results of a transaction, particularly using the POS transceiver or one of the Bluetooth/Wifi transceivers. In this implementation, after a transaction has been completed with one of the mobile communication devices110a, another mobile communication device110bcan receive information regarding the transaction completed. Thus, for instance, if mobile communication device110apurchases two tickets, one of the tickets can be transmitted to the mobile communication device110bby each using a POS transceiver or one of the Bluetooth/Wifi transceivers.
• Although the present invention has been particularly described with reference to implementations discussed above, various changes, modifications and substitutes are can be made. Accordingly, it will be appreciated that in numerous instances some features of the invention can be employed without a corresponding use of other features. Further, variations can be made in the number and arrangement of components illustrated in the figures discussed above.

Claims (20)

1. A method for provisioning applications configured for near field communication (NFC), the method comprising:

downloading an application configured for NFC transactions from a remote server to a secure element memory included in a secure element, the secure element coupled to a mobile device, wherein the secure element includes a first transceiver configured for NFC and communications with a point-of-sale (POS) or point-of-entry (POE) terminal and a second transceiver configured to communicate with the remote server, wherein the secure element memory is separate from a mobile device memory included in the mobile device;

executing the application included in the secure element memory in response to an NFC trigger by the POS or POE terminal.

2. The method ofclaim 1, wherein the NFC trigger is induction based.

3. The method ofclaim 1, wherein the second transceiver is a radio transceiver.

4. The method ofclaim 1, wherein the second transceiver is a Bluetooth™ transceiver.

5. The method ofclaim 1, wherein the second transceiver is a wireless fidelity (WiFi).

6. The method ofclaim 1, wherein the secure element is electrically coupled to the mobile device.

7. The method ofclaim 1, wherein the secure element is physically coupled to but electrically disconnected from the mobile device.

8. The method ofclaim 1, wherein the application is downloaded to the mobile device memory and transferred to the secure element memory using the second transceiver.

9. The method ofclaim 1, wherein the secure element memory stores an identifier that corresponds to a user of the mobile device, wherein transaction data includes the identifier.

10. The method ofclaim 1, wherein the application is executed during a ticketing, content, service, or payment management transaction.

11. The method ofclaim 10, wherein the application is executed using a secure element processor included in the secure element.

12. The method ofclaim 1, wherein the secure element includes a smart chip.

13. The method ofclaim 1, wherein the secure element is electrically coupled to the mobile device.

14. The method ofclaim 1, wherein the secure element is removably inserted into a slot electrically connected to the mobile device.

15. The method ofclaim 1, wherein the secure element is embedded within the mobile device.

16. The method ofclaim 1, wherein the secure element includes a radio frequency (RF) absorbent material in an outer shell housing the secure element to shield the secure element from interference generated by the interior components of the mobile device, wherein the outer shell has a maximum width of 25 mm and a maximum thickness of 5 mm.

17. A secure element comprising:

a first transceiver configured for near field communication (NFC) transactions with a point-of-sale (POS) or point-of-entry (POE) terminal;

a second transceiver configured to receive an application configured for NFC transactions from a remote server;

a secure element memory configured to maintain the application, wherein the secure element memory is separate from a mobile device memory in a mobile device coupled to the secure element;

a secure element processor configured to execute the application in response to an NFC trigger by the POS or POE terminal.

18. The secure element ofclaim 17, wherein the NFC trigger is induction based.

19. A system for provisioning applications configured for near field communication (NFC), the method comprising:

means for downloading an application configured for NFC transactions from a remote server to a secure element memory included in a secure element, the secure element coupled to a mobile device, wherein the secure element includes a first transceiver configured for NFC and communications with a point-of-sale (POS) or point-of-entry (POE) terminal and a second transceiver configured to communicate with the remote server, wherein the secure element memory is separate from a mobile device memory included in the mobile device;

means for executing the application included in the secure element memory in response to an NFC trigger by the POS or POE terminal.

20. The system ofclaim 19, wherein the NFC trigger is induction based.

Images