Method and system for authorizing execution of an application in an NFC device

A system for executing a secure application in a Near Field Communication (NFC) device, the system comprising:

• a first NFC device including:
• an NFC component configured to establish contactless communication with another NFC device;
• and
• a secure processor coupled with the NFC component;
• a second NFC device coupled with an application server and configured to execute an application with the first NFC device;
• and
• an authentication server accessible to the application server and to the first NFC device, the system being configured to:
• establish a contactless communication link between the first NFC device and the second NFC device;
• transmit, from the first NFC device through the contactless link, an identifier of the first NFC device to the second NFC device;
• transmit, from the second NFC device through the contactless communication link, an application identifier to the first NFC device;
• transmit, from the second NFC device to the application server, the identifier of the first NFC device and the application identifier;
• and
• transmit, from the application server to the authentication server, the identifier of the first NFC device and the application identifier,
• the authentication server being configured to:
• verify whether the identifier of the first NFC device is stored in association with the application identifier;
• and
• if the identifier of the first NFC device is stored in association with the application identifier, authorize a transaction during the execution of the application by transmitting, to the application server, an identifier of a user of the first NFC device, the identifier of the user corresponding to the identifier of the first NFC device.

An apparatus comprising:

• a Near Field Communication (NFC) component configured to establish a contactless communication with an NFC device;
• and
• a secure processor coupled with the NFC component,
• wherein the secure processor includes a software component associated with an identifier of the software component that is distinct from an identifier of a user of the secure processor, the software component being configured to:
• establish a contactless communication link with an NFC device through the NFC component;
• transmit the identifier of the software component through the contactless link;
• receive, through the contactless link, an application identifier;
• compute authentication data using the identifier of the software component;
• and
• transmit, through the contactless link, the authentication data, the secure processor being authorized to execute an application corresponding to the application identifier only if the identifier of the software component is linked to the application identifier in an authentication server.