Integrated mobile payment application with other mobile applications while preventing security exposures

Patent metadata

Field	Value
Publication number	US-10318949-B2
Application number	US-201414486880-A
Country	US
Kind code	B2
Filing date	Sep 15, 2014
Priority date	Jan 14, 2014
Publication date	Jun 11, 2019
Grant date	Jun 11, 2019

Abstract

A method, system and computer program product for integrating a mobile payment application with other mobile applications while preventing security exposures. A set of application programming interfaces of mobile applications that may possibly be utilized by a pass created by a mobile payment application is generated in response to receiving an indication that the pass was created. A “pass,” as used herein, refers to a form of mobile payment, such as a gift card. A selection of these application programming interfaces may then be received to interact with the created pass. In this manner, the existing mobile applications are seamlessly integrated with the features of passes. Furthermore, a virtual container is created for the created pass and the selected application programming interfaces to interface with the created pass. By creating such a container, the data to be exposed to the application layer can be controlled.

First claim

The invention claimed is:

1. A method for integrating a mobile payment application with other mobile applications while preventing security exposures, the method comprising:
receiving an indication that a pass was created by said mobile payment application, wherein said pass corresponds to a form of mobile payment;
generating a view of a set of application programming interfaces exposed to leverage said created pass;
receiving a selection of one or more of said set of application programming interfaces to interact with said created pass thereby allowing one or more existing mobile applications to seamlessly be integrated with features of said created pass; and
creating, by a processor, a virtual container for said created pass and said one or more of said set of application programming interfaces selected to interact with said created pass in order to control data to be exposed to an application layer.

2. The method as recited in claim 1 further comprising:
encrypting a file storage system for storing said virtual container in a mobile operating system.

3. The method as recited in claim 1 further comprising:
encrypting communications at a network transport layer.

4. The method as recited in claim 1 further comprising:
encrypting data of said pass when referenced outside of said virtual container.

5. The method as recited in claim 4 , wherein said form of mobile payment comprises a gift card.

6. The method as recited in claim 5 , wherein a barcode of said gift card is encrypted when referenced outside of said virtual container.

7. The method as recited in claim 1 , wherein said set of application programming interfaces comprises application programming interfaces for enterprise applications.

8. The method as recited in claim 1 , wherein said set of application programming interfaces comprises device application programming interfaces.

Assignees

• IBM

Inventors

• Kaplinger Todd E
• Shachor Gal
• Truty Gregory L

Classifications

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/3672

  initialising or reloading thereof · CPC title

• G06Q20/3227 Primary

  using secure elements embedded in M-devices · CPC title

• G06Q20/363

  with the personal data of a user · CPC title