Non-transaction enabling data security

An electronic device for processing a wireless transaction, comprising:

• a wireless communication interface configured to communicate with a transaction terminal;
• a memory configured to store a first set of transaction enabling data for enabling a transaction between the electronic device and the transaction terminal, and a second set of non-transaction enabling data comprising at least one open-access data element and at least one controlled-access data element;
• and
• a processor configured to:
• select an applet from a plurality of applets based at least in part on a type of the transaction terminal;
• and
• execute the applet, wherein the applet is configured to:
• receive, from the transaction terminal, a request for retrieving at least part of the second set of non-transaction enabling data,
• determine whether the at least part of the second set of non-transaction enabling data corresponds to the at least one open-access data element or the at least one controlled-access data element,
• in response to determining that the at least part of the second set of non-transaction enabling data corresponds to the at least one open-access data element, transmit, to the transaction terminal, a first message based at least in part on the at least one open-access data element without prior authorization, and
• in response to determining that the at least part of the second set of non-transaction enabling data corresponds to the at least one controlled-access data element, request authorization to release the at least one controlled-access data element.

A method implemented on a wireless-enabled device, comprising:

• receiving, by the wireless-enabled device, a first request for access control from a terminal;
• in response to receiving the first request, launching an applet on the wireless-enabled device;
• generating, by the applet, a first message based at least in part on a first set of access control data stored on the wireless-enabled device;
• transmitting, by the wireless-enabled device, the first message to the terminal;
• receiving, by the wireless-enabled device, a second request for retrieving at least part of a second set of data stored on the wireless-enabled device, wherein the second set of data comprises controlled-access data elements of non-transaction enabling data;
• and
• in response to receiving the second request, initiating an action that calls for authorization relating to the second request.