US 8,850,527 B2Granted

Method of performing a secure application in an NFC device

AssigneeInside Secure

InventorsGary Chew, Charles Walton

Life of this patent

Estimating the term…

Loading patent…

Abstract

The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Claims22

Dependent claims

A method of executing a secure application in a Near Field Communication (NFC) device, the method comprising:

establishing a contactless link between a first NFC device and a second NFC device, the first NFC device comprising a secure processor,
transmitting a secure processor identifier identifying the secure processor of the first NFC device from the first NFC device to the second NFC device over the contactless link,
transmitting an application identifier from the second NFC device to the first NFC device over the contactless link,
transmitting secure processor authentication data for authenticating the secure processor of the first NFC device, from the secure processor to the second NFC device over the contactless link,
transmitting the secure processor authentication data from the second NFC device to an application server,
transmitting the secure processor authentication data and application authentication data for authenticating an application corresponding to the application identifier, from the application server to an authentication server, and
in the authentication server, verifying the secure processor authentication data and the application authentication data and authorizing the first and second NFC devices to execute the application only if the secure processor and the application are authenticated by way of the secure processor authentication data and the application authentication data.

4 more elements

A system for executing a secure application in a Near Field Communication NFC) device, comprising:

a first NFC device comprising an NFC component to establish a contactless communication with another NFC device, and a secure processor connected to the NFC component,
a second NFC device connected to an application server to execute an application with another NFC device, and
an authentication server accessible to the application server and to the first NFC device, the system being configured to:
establish a contactless link between the first NFC device and the second NFC device;
transmit an identifier of the secure processor of the first NFC device from the first NFC device to the second NFC device over the contactless link;
transmit an application identifier from the second NFC device to the first NFC device over the contactless link;
transmit secure processor authentication data for authenticating the secure processor of the first NFC device, from the first NFC device to the second NFC device over the contactless link;
transmit the secure processor authentication data from the second NFC device to an application server;
transmit the secure processor authentication data and application authentication data for authenticating an application corresponding to the application identifier from the application server to an authentication server;
and
in the authentication server, verify the secure processor authentication data and the application authentication data and authorize the first and second NFC devices to execute the application only if the secure processor and the application are authenticated by way of the secure processor authentication data and the application authentication data.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/178,043Filed 7 Jul 2011
Priority: FR 10 028698 Jul 2010
Published: US 2012/0011572 A112 Jan 2012
Granted: 30 Sep 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04W 4/00
Services specially adapted for wireless communication networks
H04W 4/80
Services specially adapted for wireless communication networks; Facilities therefor: services using short range communication, e.g. near-field…