US 11,444,770 B2 · Systems and methods for data access control of secure memory using a short-range transceiver

Abstract

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain create and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data. An exemplary system and method may include receiving from a client device of the user a user token and a request for a data storage key, the request generated in response to a tap action between a contactless card and the client device, the contactless card associated with the user, verifying that the user is authorized to create a secure memory data block on the client device, and transmitting to the client device the data storage key, such that the client device may create a secure memory data block in memory of the client device and encrypt the secure memory data block using the data storage key.

Claims20

Dependent claims

A data access control system, comprising:

a contactless card comprising a communications interface, a processor, and a memory, the memory storing a user token, wherein the user token comprises a user key;
and
a client application comprising instructions for execution on a client device, the client application configured to:
in response to a tap action between the contactless card and the client device, receive the user token from the contactless card, and transmit the user token and a request for a data storage key;
receive, in response to the request, the data storage key, wherein the data storage key is generated from the user key;
create a secure memory block in a memory of the client device;
store personal user data in the secure memory block;
encrypt the secure memory block using the data storage key;
and
permit a second application on the client device to access the personal user data.

7 more elements

A non-transitory machine-readable medium having stored thereon an application comprising program code for execution on a client device, the client device configured to communicate over a short-range communication field with a contactless card, the contactless card comprising memory storing a user token comprising a user key, the application configured to, when executed, perform procedures comprising:

in response to a tap action between the contactless card and the client device, receiving the user token from the contactless card, and transmitting the user token and a request for a data storage key;
receiving, in response to the request, the data storage key, wherein the data storage key is generated from the user key;
creating a secure memory block in a memory of the client device;
storing personal user data in the secure memory block;
encrypting the secure memory block using the data storage key;
generating a data access key based on the user key;
decrypting the secure memory block using the data access key;
and
re-encrypting the secure memory block using the data storage key.

6 more elements

Dependencies are inferred from the claim text.

Systems and methods for data access control of secure memory using a short-range transceiver

Life of this patent

Systems and methods for data access control of secure memory using a short-range transceiver

Life of this patent

Abstract

Claims20