US 8,335,932 B2Granted

Local trusted services manager for a contactless smart card

AssigneeGoogle Inc.

InventorsRob von Behren, Jonathan Wall, Ismail Cem Paya

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems, methods, computer programs, and devices are disclosed herein for deploying a local trusted service manager within a secure element of a contactless smart card device. The secure element is a component of a contactless smart card incorporated into a contactless smart card device. An asymmetric cryptography algorithm is used to generate public-private key pairs. The private keys are stored in the secure element and are accessible by a trusted service manager (TSM) software application or a control software application in the secure element. A non-TSM computer with access to the public key encrypts and then transmits encrypted application data or software applications to the secure element, where the TSM software application decrypts and installs the software application to the secure element for transaction purposes.

Claims14

Dependent claims

A computer-implemented method for implementing a trusted service manager (TSM) locally within a secure element of a contactless smart card payment device, the method comprising:

installing, in the secure element of the contactless smart card payment device, a TSM software application, wherein the TSM software application comprises computer code for executing a transmitting function to request application data and a decrypting function to decrypt an encrypted form of received application data, the received application data received at the contactless smart card device in response to a request by the transmitting function;
storing, in the secure element, a private encryption key assigned to the TSM software application and a corresponding public encryption key;
transmitting, by the transmitting function of the TSM software application, the request for application data to a registered remote non-TSM computer configured to access the public key;
receiving, in the contactless smart card payment device from the remote non-TSM computer, the requested application data for installation in the secure element of the contactless smart card payment device, the requested application data comprising at least one of a software application, other than the TSM application, executable in the secure element or data to support an existing software application, other than the TSM application, in the secure element, the received requested application data having been encrypted by the remote non-TSM computer using the public encryption key;
and
decrypting, by the decrypting function of the TSM software application, the encrypted received application data using the private key.

3 more elements

A computer-implemented system for implementing a trusted service manager (TSM) locally within the secure element of a contactless smart card payment device, the system comprising:

a contactless smart card payment device;
a secure element resident on the device and storing a private encryption key assigned to the secure element and a corresponding public encryption key;
and
a TSM software application resident in the secure element, the TSM software application comprising computer code for executing a transmitting function to request application data and a decrypting function for decrypting an encrypted form of received application data, the received application data received at the contactless smart card device in response to a request by the transmitting function, the application data comprising at least one of a software application, other than the TSM application, executable in the secure element or data to support an existing software application, other than the application, in the secure element,
wherein the transmitting function of the TSM software application transmits, to a remote non-TSM computer, the request for application data, wherein the remote non-TSM computer is configured to access the public key,
wherein the device receives, from the remote non-TSM computer, the requested application data in response to the transmitted request for installation in the secure element of the device, the received application data having been encrypted by the remote non-TSM computer using the public encryption key, and
wherein the decrypting function of the TSM software application decrypts the encrypted received application data using the private key.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/244,715Filed 26 Sep 2011 · continuation
Priority: 17 Dec 2010
Published: US 2012/0159148 A121 Jun 2012
Granted: 18 Dec 2012
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06Q 20/3552
Personalisation of cards for use: downloading or loading of personalisation data
G06Q 20/3278
Short range or proximity payments by means of M-devices: rFID or NFC payments by means of M-devices
G06Q 20/35765
Multiple memory zones on card: access rights to memory zones
G06Q 20/3823
Insuring higher security of transaction: combining multiple encryption tools for a transaction

Family

Application61/424,604Us provisional application · filed 17 Dec 2010
Application13/235,375Parent of this continuation · filed 17 Sep 2011
US 2012/0159148 A1Pre-grant publication · published 21 Jun 2012
US 2012/0159163 A1Published application
US 8,352,749 B2Related patent
US 8,335,932 B2This patent

From the US filing history. Foreign family members aren’t listed.