# US 2019/0172037 A1 · Privacy protection in financial transactions conducted on mobile platforms > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0172037 A1 - Document ID: US20190172037A1 - Status: Published application - Kind: A1 - Application number: 15/829,858 - Filed: 2017-12-01 - Published: 2019-06-06 - Earliest claimed: 2017-12-01 - Assignees: QUALCOMM Incorporated - Applicants: QUALCOMM Incorporated - Inventors: Jeremy Robin Christopher O'DONOGHUE - Web page: https://patentgrep.com/patent/US20190172037A1 ## CPC - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR} - G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/352: {Contactless payments by cards} - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/088: using filters or firewalls - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods for protecting privacy and security of information transmitted from a card device to a Point of Sale (POS) device during a financial transaction. The POS device may obtain payment information comprising private information from the card device and implement one or more filtering rules to prevent the private information from being accessed by unauthorized applications on the POS device. For a Near Field Communication (NFC) based transfer of payment information from the card device to the POS device, the one or more filtering rules may be implemented in an NFC Controller Interface (NCI) Filter Application having one or more Privacy Management Gates to prevent the private information from being transferred out of the NFC Controller to an unauthorized reader. ## Claims ### Claim 1 A method of protecting private information in a Point of Sale (POS) device, the method comprising: obtaining, at the POS device, payment information comprising private information from a card device; and implementing one or more filtering rules at the POS device to prevent the private information from being accessed by unauthorized applications on the POS device. ### Claim 2 (depends on 1) The method of claim 1, wherein obtaining the payment information at the POS device comprises: providing a SELECT command to the card device, the SELECT command to access a Proximity Payment Service Environment (PPSE) application on the card device for determining an Application Identifier (AID) of the payment information; and receiving a File Control Information (FCI) Template from the PPSE application on the card device, the FCI Template comprising the private information. ### Claim 3 (depends on 2) The method of claim 2, wherein implementing the one or more filtering rules comprises filtering the private information when the SELECT command is initiated by an unauthorized reader application on the POS device. ### Claim 4 (depends on 2) The method of claim 2, wherein implementing the one or more filtering rules comprises, for a SELECT command issued by an unauthorized reader, blocking one or more AIDs to be returned to the unauthorized reader. ### Claim 5 (depends on 4) The method of claim 4, wherein the one or more AIDs comprise Registered Application Provider Identifier (RID)s for which there are greater than a threshold number of Proprietary Application Identifier Extensions (PIX). ### Claim 6 (depends on 5) The method of claim 5, wherein the one or more AIDs comprise one or more specified Registered Application Provider Identifier (RID)s of a set of one or more RIDs. ### Claim 7 (depends on 2) The method of claim 2, wherein implementing the one or more filtering rules comprises, filtering contents of a “Track 2 Equivalent Data” Tag Length Value (TLV) issued from an unauthorized reader application. ### Claim 8 (depends on 1) The method of claim 1, comprising obtaining the payment information by Near Field Communication (NFC) with the card device. ### Claim 9 (depends on 8) The method of claim 8, comprising implementing the one or more filtering rules in a NFC Controller Interface (NCI) Filter Application on a NFC Controller of the POS device. ### Claim 10 (depends on 9) The method of claim 9, further comprising configuring one or more Privacy Management Gates of the NCI Filter Application to prevent the private information from being transferred out of the NFC Controller to an unauthorized reader. ### Claim 11 An apparatus comprising: a Point of Sale (POS) device in communication with a card device, wherein the POS device is configured to: obtain payment information comprising private information from the card device; and implement one or more filtering rules to prevent the private information from being accessed by unauthorized applications on the POS device. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein, to obtain the payment information, the POS device is configured to: provide a SELECT command to the card device, the SELECT command to access a Proximity Payment Service Environment (PPSE) application on the card device to identify an Application Identifier (AID) of the payment information; and receive a File Control Information (FCI) Template from the PPSE application on the card device, wherein the FCI Template comprises the private information. ### Claim 13 (depends on 12) The apparatus of claim 12, wherein the one or more filtering rules comprise filtering the private information when the SELECT command is initiated by an unauthorized reader application on the POS device. ### Claim 14 (depends on 12) The apparatus of claim 12, wherein the one or more filtering rules comprises, for a SELECT command issued by an unauthorized reader, to block one or more AIDs to be returned to the unauthorized reader. ### Claim 15 (depends on 14) The apparatus of claim 14, wherein the one or more AIDs comprise Registered Application Provider Identifier (RID)s for which there are greater than a threshold number of Proprietary Application Identifier Extensions (PIX). ### Claim 16 (depends on 15) The apparatus of claim 15, wherein the one or more AIDs comprise one or more specified Registered Application Provider Identifier (RID)s of a set of one or more RIDs. ### Claim 17 (depends on 12) The apparatus of claim 12, wherein the one or more filtering rules comprises, filtering contents of a “Track 2 Equivalent Data” Tag Length Value (TLV) issued from an unauthorized reader application. ### Claim 18 (depends on 11) The apparatus of claim 11, the communication comprises a Near Field Communication (NFC) with the card device. ### Claim 19 (depends on 18) The apparatus of claim 18, wherein the POS device comprises a NFC Controller, wherein the NFC Controller comprises an NFC Controller Interface (NCI) Filter Application configured to implement the one or more filtering rules. ### Claim 20 (depends on 19) The apparatus of claim 19, wherein the NCI Filter Application further comprises one or more Privacy Management Gates configured to prevent the private information from being transferred out of the NFC Controller to an unauthorized reader. ### Claim 21 An apparatus comprising: means for performing a Point of Sale (POS) transaction, comprising means for obtaining payment information comprising private information from means for storing payment information; and means for implementing one or more filtering rules at the means for performing the POS transaction to prevent the private information from being accessed by unauthorized applications on the means for performing the POS transaction. ### Claim 22 A non-transitory computer-readable storage medium comprising code, which, when executed by a processor, causes the processor to perform operations for protecting private information in a Point of Sale (POS) device, the non-transitory computer-readable storage medium comprising: code for obtaining, at the POS device, payment information comprising private information from a card device; and code for implementing one or more filtering rules at the POS device to prevent the private information from being accessed by unauthorized applications on the POS device. ### Claim 23 (depends on 22) The non-transitory computer-readable storage medium of claim 22, wherein the code for obtaining the payment information at the POS device comprises: code for providing a SELECT command to the card device, the SELECT command to access a Proximity Payment Service Environment (PPSE) application on the card device for determining an Application Identifier (AID) of the payment information; and code for receiving a File Control Information (FCI) Template from the PPSE application on the card device, the FCI Template comprising the private information. ### Claim 24 (depends on 23) The non-transitory computer-readable storage medium of claim 23, wherein the code for implementing the one or more filtering rules comprises code for filtering the private information when the SELECT command is initiated by an unauthorized reader application on the POS device. ### Claim 25 (depends on 23) The non-transitory computer-readable storage medium of claim 23, wherein the code for implementing the one or more filtering rules comprises, for a SELECT command issued by an unauthorized reader, code for blocking one or more AIDs to be returned to the unauthorized reader. ### Claim 26 (depends on 25) The non-transitory computer-readable storage medium of claim 25, wherein the one or more AIDs comprise Registered Application Provider Identifier (RID)s for which there are greater than a threshold number of Proprietary Application Identifier Extensions (PIX). ### Claim 27 (depends on 26) The non-transitory computer-readable storage medium of claim 26, wherein the one or more AIDs comprise one or more specified Registered Application Provider Identifier (RID)s of a set of one or more RIDs. ### Claim 28 (depends on 23) The non-transitory computer-readable storage medium of claim 23, wherein the code for implementing the one or more filtering rules comprises, code for filtering contents of a “Track 2 Equivalent Data” Tag Length Value (TLV) issued from an unauthorized reader application. ### Claim 29 (depends on 22) The non-transitory computer-readable storage medium of claim 22, comprising code for obtaining the payment information by Near Field Communication (NFC) with the card device and code for implementing the one or more filtering rules in a NFC Controller Interface (NCI) Filter Application on a NFC Controller of the POS device. ### Claim 30 (depends on 29) The non-transitory computer-readable storage medium of claim 29, further comprising code for configuring one or more Privacy Management Gates of the NCI Filter Application to prevent the private information from being transferred out of the NFC Controller to an unauthorized reader.