Method for using shared device in apparatus capable of operating two operating systems

Patent metadata

Field	Value
Publication number	US-9459937-B2
Application number	US-201414895087-A
Country	US
Kind code	B2
Filing date	May 30, 2014
Priority date	Jun 4, 2013
Publication date	Oct 4, 2016
Grant date	Oct 4, 2016

Abstract

The invention discloses a method for using a shared apparatus in a device capable of running two operating systems, which includes using a first application in a first operating system to communicate with the share apparatus, and when the first operating system is switched to a second operating system, sending associated information on the shared apparatus to a second application in the second operating system so that the second application can use the associated information to communicate with the shared apparatus.

First claim

The invention claimed is:

1. A method comprising:
obtaining, by a non-secure application executing in a non-secure operating system, information associated with a communication channel opened with a shared apparatus;
determining that a switch in operation from the non-secure operating system to a secure operating system is necessary; and
sending, based on the determining and by the non-secure application, the information associated with the communication channel to a secure application executing in the secure operating system, wherein the information associated with the communication channel is configured such that the secure application uses the information associated with the communication channel to communicate with the shared apparatus and with an external terminal via the communication channel.

2. The method according to claim 1 , wherein the secure application sends a result of communicating with the shared apparatus to an external terminal via the shared apparatus.

3. The method according to claim 1 , wherein the information associated with the communication channel includes one or more of a shared apparatus identifier, a shared apparatus transmission-reception data interface address, a shared apparatus configuration information, and a connection channel identifier.

4. The method according to claim 1 , wherein the shared apparatus comprises a near field communication (NFC) chip.

5. A method comprising:
receiving, by a mobile communication device, a command from a non-contact point of sale (POS) terminal, wherein the command comprises a channel number indicating a communication channel opened between the mobile communication device and the non-contact POS terminal via a shared apparatus;
responsive to the receiving of the command, switching, by a processor of the mobile communication device, an operation mode of the mobile communication device from a non-secure mode executing a non-secure application program to a secure mode executing a secure application program, wherein the switching comprises sending the channel number by the non-secure application program to the secure application program; and
transmitting, by the secure application program, transaction data to the shared apparatus using the communication channel.

6. The method of claim 5 , wherein the switching further comprises sending, by the non-secure application program to the secure application program, at least one of a shared apparatus identifier, a shared apparatus transmission-reception data interface address, and shared apparatus configuration information.

7. The method of claim 5 , wherein the shared apparatus comprises a near field communication (NFC) chip.

8. The method of claim 5 , wherein the transaction data comprises data indicative of a password.

9. The method of claim 5 , wherein the sending of the channel number by the non-secure application program to the secure application program comprises sending, from the non-secure application program to the secure application program, a data message comprising a predefined format.

10. The method of claim 5 , wherein the sending of the channel number by the non-secure application program to the secure application program comprises sharing a memory location between the non-secure application program and the secure application program.

11. The method of claim 5 , wherein the sending of the channel number by the non-secure application program to the secure application program comprises sending a data message via a communication framework interface layer.

12. The method of claim 5 , further comprising:
instantiating a first communication session using the shared apparatus by the non-secure application program prior to the switching of the operation mode of the mobile communication device from the non-secure mode executing the non-secure application program to the secure mode executing the secure application program;
performing, prior to completion of the first communication session, the switching of the operation mode of the mobile communication device from the non-secure mode executing the non-secure application program to the secure mode executing a secure application program;
pausing the first communication session responsive to the switching;
performing the transmitting by the secure application program of the transaction data to the shared apparatus; and
continuing the first communication session using the shared apparatus and using the transaction data.

13. The method of claim 5 , further comprising:
transmitting, by the secure application program, the transaction data to the non-contact POS terminal via the shared apparatus and using the communication channel.

14. The method of claim 5 , further comprising:
transmitting, by the secure application program, further transaction data to the non-contact POS terminal via the shared apparatus and using the communication channel.

15. A mobile communication device, comprising:
a processor;
a near field communication (NFC) chip; and
a non-transitory computer memory storing contents of a non-secure operating system and secure operating system and further storing instructions that, when executed by the processor, cause the processor to:
receive, into a working memory associated with a non-secure application program operating in the non-secure operating system, a command from a non-contact point of sale (POS) terminal remote from the mobile communication device, wherein the command comprises channel information associated with a communication channel opened between the mobile communication device and the non-contact POS terminal via the NFC chip;
switch an operation mode of the mobile communication device from the non-secure operating system to the secure operating system, wherein the switch comprises storing the channel information into a memory location accessible to both the non-secure application program and a secure application program operating in the secure operating system; and
transmit, from a working memory associated with the secure application program, transaction data to the NFC chip using the communication channel.

16. The mobile communication device of claim 15 , wherein the non-transitory computer memory stores further instructions that, when executed by the processor, cause the processor to:
transmit, from the working memory associated with the secure application program, the transaction data to the non-contact POS terminal via the NFC chip and using the communication channel.

17. The mobile communication device of claim 15 , wherein the non-transitory computer memory stores further instructions that, when executed by the processor, cause the processor to:
transmit, from the working memory associated with the secure application program, further transaction data to the non-contact POS terminal via the NFC chip and using the communication channel.

18. The mobile communication device of claim 15 , wherein the channel information comprises at least one of an identifier of the NFC chip, a transmission-reception data interface address of the NFC chip, configuration information associated with the NFC chip, and a channel number associated with the communication channel.

19. The mobile communication device of claim 15 , wherein the processor is configured to perform the switch responsive to receiving an instruction from the non-secure application program or the non-contact POS terminal indicating that entry of secure information by a user operating the mobile communication device is required.

20. The mobile communication devic

Assignees

• China Unionpay Co Ltd

Inventors

• Chai Hongfeng
• Lu Zhijun
• He Shuo
• Guo Wei
• Zhou Yu
• Chen Chengqian

Classifications

• G06F9/54 Primary

  Interprogram communication · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F21/74

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title