Method for processing a transaction from a communications terminal

Patent metadata

Field	Value
Publication number	US-10970706-B2
Application number	US-201615542437-A
Country	US
Kind code	B2
Filing date	Jan 8, 2016
Priority date	Jan 9, 2015
Publication date	Apr 6, 2021
Grant date	Apr 6, 2021

Abstract

A secure element integrated within a mobile communications terminal. Such an element includes: at least one first application for processing transactions, having at least one interface for communications with a communications network in a secured manner; and at least one second application for processing secured data, having at least one communications interface for communications with an executing environment of said communications terminal. The first application is able to request at least one piece of data from the second application.

First claim

The invention claimed is:

1. A secure element integrated within a mobile communications terminal, the element comprising:
a processor; and
at least one non-transitory computer-readable medium comprising computer-implemented instructions executable by the processor, the instructions comprising:
at least one first application executed by the secure element for processing transactions, comprising at least one interface for communications with a communications network in a secured manner, the first application lacking a communication interface to exchange information with an executing environment of the mobile communications terminal outside of the secure element, and
at least one second application executed by the secure element for processing secured data while the first application processes a transaction, the at least one second application being distinct from the first application and comprising at least one communications interface for communications with the executing environment of said communications terminal that is outside of the secure element,
said first application being configured to request at least one piece of data from said second application of the secured element,
said second application comprising at least one list of identifiers of applications authorized to access said at least one piece of data, said second application being configured to:
verify that said first application is authorized to access said at least one piece of data, on the basis of said at least one list of identifiers of applications authorized to access said at least one piece of data;
in response to the first application being authorized to access said at least one piece of data, obtain said at least one piece of data; and
transmit the obtained at least one piece of data in a transmission addressed to the first application.

2. The secure element according to claim 1 , wherein said second application comprises at least one secured storage space.

3. The secure element according to claim 2 , wherein said second application comprises at least one list of identifiers of applications authorized to request storage of data within said secured storage space.

4. The secure element according to claim 1 , wherein said at least one piece of data belongs to the group consisting of:
a piece of data representing a payment card;
a piece of data representing an association between a merchant identifier on the one hand and an identifier of the user with said merchant on the other hand;
a piece of biometric identification or authentication data.

5. A method of communications between a first application for processing transactions and a second application for processing secured data, said applications being executed within a secure element of a communications terminal, the method comprises:
receiving, by said first application of the secure element, a request coming from a communications network during a processing of a transaction by the first application through the communications network, the first application lacking a communication interface to exchange information with an executing environment of the communications terminal outside of the secure element;
transmitting, by said first application, a request for obtaining a piece of secured data, addressed to said second application of the secure element, which is distinct from the first application, wherein the second application processes secured data while the first application processes the transaction, the second application comprising at least one communications interface for communications with the executing environment of said communications terminal that is outside of the secure element;
verifying, by said second application, that said first application is authorized to access said piece of requested secure data, comprising verifying that an identifier of the first application is present in a list of identifiers of applications authorized to access said piece of requested secure data, said list of identifiers being stored within said second application;
in response to the first application being authorized to access said piece of requested secure data, obtaining, by said second application, said piece of requested secure data;
transmitting, by said second application, said piece of requested secure data, to said first application in a transmission addressed to the first application; and
transmitting, by said first application, said piece of requested secure data, to said communications network.

6. The method according to claim 5 , wherein said obtaining, by said second application, of said piece of requested secure data comprises the following sub-acts:
transmitting a request for obtaining said piece of requested secure data addressed to the execution environment of said communications terminal outside of the secure element;
receiving said piece of requested secure data, coming from said execution environment of said communications terminal.

7. A non-transitory computer-readable medium comprising a computer program product stored thereon, which comprises program code instructions for executing a method of communications between a first application for processing transactions and a second application for processing secured data, when the instructions are executed by a processor of a secure element of a communications terminal, wherein said applications are executed within the secure element and wherein the instructions configure the secure element to:
receive, by said first application of the secure element, a request coming from a communications network during a processing of a transaction by the first application through the communications network, the first application lacking a communication interface to exchange information with an executing environment of the communications terminal outside of the secure element;
transmit, by said first application, a request for obtaining a piece of secured data, addressed to said second application of the secure element, which is distinct from the first application, wherein the second application processes secured data while the first application processes the transaction, the second application comprising at least one communications interface for communications with the executing environment of said communications terminal that is outside of the secure element;
verify, by said second application, that said first application is authorized to access said piece of requested secure data, comprising verifying that an identifier of the first application is present in a list of identifiers of applications authorized to access said piece of requested secure data, said list of identifiers being stored within said second application;
in response to the first application being authorized to access said piece of requested secure data, obtain, by said second application, said piece of requested secure data;
transmit, by said second application, said piece of requested secure data, to said first application in a transmission addressed to the first application; and
transmit, by said first application, said piece of requested secure data, to said communications network.

Assignees

• Ingenico Group

Inventors

• Quentin Pierre

Classifications

• G06Q20/3227 Primary

  using secure elements embedded in M-devices · CPC title

• G06Q20/401 Primary

  Transaction verification · CPC title

• H04L67/51

  Discovery or management thereof, e.g. service location protocol [SLP] or web services · CPC title

• G06Q20/40975

  using encryption therefor · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title