Secure wireless communication apparatus

A method comprising:

• starting a timer in response to user input data;
• generating session initiation commands in response to at least one of a status of the timer, a power-based event, and receipt of a user input;
• generating and storing a session ID in a session ID module of a device, in response to each session initiation command, each session ID being different than other session IDs generated in response to the session initiation commands;
• assessing validity of the user input data;
• in response to the user input data being determined to be valid, accessing the stored session ID and locally storing the accessed session ID in a memory circuit of the device separate from the session ID module;
• after locally storing the accessed session ID, accessing and comparing a current version of the generated and stored session ID with the locally stored session ID;
• and
• communicating data to a wireless communication circuit in response to the comparison indicating that the current version of the session ID matches the locally stored session ID.

An apparatus comprising:

• a near-field communication circuit;
• and
• a plurality of circuit-based modules, including
• a master communication module configured and arranged to generate session initiation commands in response to event conditions including at least one of a timer event, a power event and a user input event,
• a slave module configured and arranged to carry out a contactless payment process by
• generating and storing a session ID in response to each session initiation command,
• validating received user-input data sets,
• for each validated user-input data set, accessing and locally storing the generated session ID,
• after locally storing the generated session ID, re-accessing the generated and stored session ID, and comparing the re-accessed session ID with the locally stored session ID,
• in response to the comparing indicating that the re-accessed session ID and the locally stored session ID match, facilitate near-field communication of proprietary payment data stored at the apparatus for access by a payment terminal in near-field communication with the apparatus, and
• in response to the comparing indicating that the re-accessed session ID and the locally stored session ID do not match, abort the contactless payment process.