Method for providing digital representation of transaction card in mobile device

Abstract

According to a first aspect of the present disclosure, a method for providing a digital representation of a transaction card in a mobile device is contemplated, comprising: detecting, via a near field communication unit of the mobile device, the presence of the transaction card in proximity to the mobile device; upon or after the detection, executing, by a processing unit of the mobile device, the following steps: retrieving the digital representation of the transaction card from a digitization server; loading the digital representation of the transaction card into a memory of the mobile device; activating the digital representation of the transaction card for a predefined validity period; and deactivating the digital representation of the transaction card if no successful near field communication transaction is performed within the validity period. According to other aspects of the present disclosure, corresponding computer programs and corresponding mobile devices are provided.

Description

Technical Field

[0001] The present disclosure relates to a method for providing a digital representation of a transaction card in a mobile device. Furthermore, the present disclosure relates to a corresponding computer program and a corresponding mobile device. Background Art

[0002] Near Field Communication (NFC) refers to a set of communication protocols that enables two electronic devices to establish communication by bringing them close to each other. The communication range of NFC is typically in the order of centimeters (e.g., 10 cm or less). NFC technology can be used to carry out various transactions, such as transactions for accessing buildings, transactions for accessing public transportation stations or vehicles, and payment transactions. For these purposes, physical transaction cards with NFC capabilities are often used. Such transaction cards are commonly referred to as smart cards. Therefore, there are different types of transaction cards, such as access cards, transportation cards, and payment cards. Now, mobile devices with NFC capabilities, such as smart phones, can be used to carry out similar transactions. For this purpose, a digital representation of the physical transaction card is loaded into the mobile device. Summary of the Invention

[0003] According to a first aspect of the present disclosure, a method for providing a digital representation of a transaction card in a mobile device is conceived, comprising: detecting, by a near field communication unit of the mobile device, that a transaction card is in proximity to the mobile device; upon or after the detection, performing, by a processing unit of the mobile device, the following steps: retrieving the digital representation of the transaction card from a digitization server; loading the digital representation of the transaction card into a memory of the mobile device; activating the digital representation of the transaction card for a predefined validity period; and deactivating the digital representation of the transaction card if no successful near field communication transaction is performed within the validity period.

[0004] In an embodiment, invalidating the digital representation of the transaction card includes deactivating the digital representation of the transaction card.

[0005] In an embodiment, invalidating the digital representation of the transaction card includes removing the digital representation of the transaction card from a memory.

[0006] In an embodiment, the digital representation comprises data indicative of said validity period.

[0007] In an embodiment, retrieving the digital representation of the transaction card from the digitization server is performed by a further communication unit of the mobile device.

[0008] In an embodiment, the further communication unit is a cellular communication unit or a Wi-Fi communication unit.

[0009] In an embodiment, the memory is included in a secure element of the mobile device.

[0010] In an embodiment, the processing unit is comprised in said secure element.

[0011] In an embodiment, the digital representation of the transaction card is retrieved through a secure channel established between the secure element and a digitization server.

[0012] In an embodiment, the transaction card is an access card, a transportation card, or a payment card.

[0013] According to a second aspect of the present disclosure, there is provided a computer program comprising executable instructions which, when executed, carry out the method according to any one of the preceding claims.

[0014] According to a third aspect of the present disclosure, there is provided a mobile device comprising a near field communication unit and a processing unit, wherein the near field communication unit is configured to detect that a transaction card is in proximity to the mobile device, and wherein the processing unit is configured to: retrieve a digital representation of the transaction card from a digitization server; load the digital representation of the transaction card into a memory of the mobile device; activate the digital representation of the transaction card for a predefined validity period; and invalidate the digital representation of the transaction card if no successful near field communication transaction is performed within the validity period.

[0015] In an embodiment, the processing unit is configured to invalidate the digital representation of the transaction card by deactivating the digital representation of the transaction card.

[0016] In an embodiment, the processing unit is configured to invalidate the digital representation of the transaction card by removing the digital representation of the transaction card from the memory.

[0017] In an embodiment, the mobile device is a mobile phone. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Embodiments will be described in more detail with reference to the accompanying drawings, in which:

[0019] Figure 1 An illustrative embodiment of a method for providing a digital representation of a transaction card in a mobile device is shown;

[0020] Figure 2 An illustrative embodiment of a mobile device is shown;

[0021] Figure 3 Another illustrative embodiment of a mobile device is shown;

[0022] Figure 4 An illustrative embodiment of a system for providing a digital representation of a transaction card in a mobile device is shown. DETAILED DESCRIPTION

[0023] Near Field Communication (NFC) refers to a set of communication protocols that enables two electronic devices to establish communication by bringing them close to each other. The communication range of NFC is typically in the order of centimeters (e.g., 10 cm or less). NFC technology can be used to carry out various transactions, such as transactions for accessing buildings, transactions for accessing public transportation stations or vehicles, and payment transactions. For these purposes, physical transaction cards with NFC capabilities are often used. Such transaction cards are commonly referred to as smart cards. Therefore, there are different types of transaction cards, such as access cards, transportation cards, and payment cards. Now, mobile devices with NFC capabilities, such as smart phones, can be used to carry out similar transactions. For this purpose, a digital representation of the physical transaction card is loaded into the mobile device.

[0024] However, the market for contactless plastic access control cards, for example, is highly fragmented, with numerous small service providers and potentially many system integrators for small infrastructures (e.g., residential buildings). This makes creating NFC-based mobile digitization versions of these plastic cards very difficult. While the card issuer may be able to transfer some keys (e.g., master keys) to the digitization service, other information, such as card data or the exact mapping of the card's rights holders, may not always be available in the digitization service backend. For example, in an infrastructure where ten users have cards that allow them to access an apartment building's garage, the service provider may be unable or unwilling to provide the names of all ten users to the digitization service, and a real-time connection may not be established. This means that robust risk management, combined with risk-limiting procedures, is required during the actual onboarding process for the digitization process. Specifically, loading a digital version of a contactless card (e.g., for access control) into an NFC phone requires risk management procedures, as the backend does not always have the ability to perform all the required verifications. One potential abuse scenario is for the card to be downloaded to someone else's phone without the card owner noticing.

[0025] In this example, the following steps are performed to create a mobile version of the contactless (access control) card:

[0026] The user brings the card near their phone's NFC reader.

[0027] Starting a communication session between the digital service backend implemented on the digital server and the card via a computer program (the so-called "application");

[0028] The backend performs some checks and prepares the data to be downloaded to the phone.

[0029] Download data to the phone;

[0030] A digital version of the card can be used as a so-called "NFC card" on a phone.

[0031] However, due to the nature of contactless cards, communication with them can be performed without the owner's involvement, for example, by holding a contactless reader in the owner's pocket containing the contactless card. This means that in this scenario, an attacker could attempt to digitize the victim's contactless card "on the fly" by holding their phone to the contactless card and requesting a digital copy from a digitization backend. Clearly, this presents a security risk. Methods, computer programs, and devices for mitigating this security risk are now discussed.

[0032] Figure 1 An illustrative embodiment of a method 100 for providing a digital representation of a transaction card in a mobile device is shown. Method 100 includes the following steps. At 102, a transaction card is detected in proximity to the mobile device by an NFC unit of the mobile device. At 104, upon or after the detection, a processing unit of the mobile device retrieves the digital representation of the transaction card from a digitization server. At 106, the processing unit loads the digital representation of the transaction card into the memory of the mobile device. At 108, the processing unit activates the digital representation of the transaction card for a predefined validity period (e.g., using a timer). Activation can be done explicitly, for example, by setting a flag indicating the activation status of the digital representation—which can be read by an application processing a given transaction—or implicitly, for example, by simply making the digital representation available in an accessible portion of memory. At 110, if a successful NFC transaction is not performed within the validity period (e.g., if a successful NFC transaction is not performed before the timer expires), the processing unit deactivates the digital representation of the transaction card.

[0033] Thus, a test is implemented that involves conducting an NFC transaction with a reader to confirm that a valid user has initiated the download of the digital representation of the transaction card. In this way, security risks are reduced. More specifically, one way to reduce this risk is by introducing a request for proof of local transaction. This increases the likelihood that the contactless card can only be downloaded on a phone by a person standing near the reader belonging to the card. The disclosed method can be used as part of or in conjunction with a risk management program for contactless card digitization. When digitizing a card, the following steps can be performed:

[0034] 1. The server downloads a temporary digitisation card to the phone. The digitisation card is given a time-limited validity (e.g. 30 seconds).

[0035] 2. If no successful transaction is performed with the phone (using the digitized card) on the reader during the validity period of the temporary digitized card, the digitized card is automatically invalidated.

[0036] 3. If a successful transaction is performed with a phone (using the digitized card) on a reader during the validity period of the temporary digitized card, the digitized card automatically becomes a permanent card.

[0037] Referring to the previous example, in this way, the card is prevented from being digitized somewhere during the walk, because it would be impossible to perform an NFC transaction quickly enough to make the card permanent. It should be noted that this mechanism can be used in conjunction with other measures in the risk management process, such as determining the location of the requester through the Global Positioning System (GPS).

[0038] In one embodiment, deactivating the digital representation of a transaction card includes deactivating the digital representation of the transaction card. Depending on how the digital representation was activated, deactivation can be performed in different ways, for example, by changing the value of a flag or by moving the digital representation to a protected or inaccessible portion of memory. In this way, the digital representation can be easily deactivated. In another embodiment, deactivating the digital representation of a transaction card includes removing the digital representation of the transaction card from memory. In this way, the digital representation is ensured to be unusable, thereby achieving a higher level of security. However, in this case, a new attempt to load the digital representation into the mobile device requires re-downloading the digital representation from the digitization server.

[0039] In one embodiment, the digital representation includes data indicating the validity period. In other words, the digital representation retrieved from the digitization server contains information about the validity period of the digital representation (e.g., 30 seconds). This creates a practical and efficient implementation of a temporary digitization card. In other implementations, the data indicating the validity period can be provided separately to the processing unit of the mobile device. For example, the validity period can be a parameter of the implementation itself, for example, any loaded digital representation is only valid for the amount of time indicated by the value of the parameter. In another example, an additional step can be added to load the validity period.

[0040] In an embodiment, retrieving the digital representation of the transaction card from the digitization server is performed by an additional communication unit of the mobile device. This facilitates retrieving the digital representation. In a practical and efficient implementation, the additional communication unit is a cellular communication unit or a communication unit capable of connecting to the Internet, such as a Wi-Fi communication unit.

[0041] In an embodiment, the memory is included in a security element of the mobile device. The security element can be, for example, an embedded chip, more specifically, a tamper-resistant integrated circuit with an installed or pre-installed smart card-level application, such as a payment application, which has specified functions and a specified security level. In addition, the security element can implement security functions, such as cryptographic functions and authentication functions. In this way, the digital representation of the transaction card is stored in a protected environment. In addition, in an embodiment, the processing unit is included in the security element. In this way, the processing of the digital representation of the transaction card is also carried out in a protected environment, which further increases the security level. In order to further increase the security level, the digital representation of the transaction card can be retrieved through a secure channel established between the security element and the digitization server. Such a secure channel can be established, for example, by generating and using a cryptographic session key, which is used to encrypt and decrypt data to be communicated between the security element and the digitization server.

[0042] Figure 2 An illustrative embodiment of a mobile device 200 is shown. Mobile device 200 includes an NFC unit 202. Furthermore, mobile device 200 includes a processing unit 204 operably coupled to NFC unit 202. Furthermore, mobile device 200 includes a memory 206 operably coupled to processing unit 204. NFC unit 202 is configured to detect the presence of an external transaction card (not shown) in the vicinity of mobile device 200. Furthermore, processing unit 204 is configured, in response to detection of the transaction card, to: retrieve a digital representation of the transaction card from an external digitization server (not shown); load the digital representation of the transaction card into memory 206; activate the digital representation of the transaction card for a predefined validity period; and deactivate the digital representation of the transaction card if a successful NFC transaction is not performed within the validity period. For example, such a NFC transaction can be performed between mobile device 200 and an external NFC reader (not shown) via the same NFC unit 202. The transaction to be performed can be, for example, access to a building, access to a public transportation station or vehicle, or payment.

[0043] Figure 3 Another illustrative embodiment of a mobile device 300 is shown. In this embodiment, both the processing unit 204 and the memory 206 are included in a secure element 302 of the mobile device 300. As described above, in this way, the security level is increased.

[0044] Figure 4An illustrative embodiment of a system 400 for providing a digital representation of a transaction card 418 in a mobile device 402 is shown. In this example, the mobile device 402 is a mobile phone. The mobile device 402 includes a central processing unit (CPU) 404, a secure element (SE) 408, and an NFC unit 412. The mobile device 402 is configured to communicate with an external transaction card 418 and an external NFC reader 414 via the NFC unit 412. In addition, the mobile device 402 is configured to communicate with a digitization service 416 implemented in the cloud, such as on a digitization server.

[0045] Furthermore, the CPU 404 includes an application 406 and is configured to execute the application 406 for communicating with the backend (i.e., digital services 416) and the SE 408. The communication with the backend may be performed by another communication unit (not shown) of the mobile device 402. The SE 408 includes an applet 410 and is configured to execute an application for running, for example, an access control application (e.g., The applet 410 of the NFC unit 412 (also referred to as an NFC controller) is configured to communicate with the transaction card 418 and the NFC reader 414.

[0046] In this example, the following steps are performed to provide a digital representation of the transaction card 418 in the mobile device 402:

[0047] 1. The application 406 is used to communicate with the digitization service 416 when or after the NFC unit 412 detects the transaction card 418.

[0048] 2. Establish a secure channel between the digitization service 416 and the applet 410 of the SE 408 .

[0049] 3. The digital representation of the transaction card 418 is loaded into the applet 410.

[0050] 4. The applet 410 initializes the digitized card, marks it as a temporary card, and starts a timer that will count up to a predefined validity period.

[0051] 5a. If the timer expires, the applet 410 deletes the digitized card or marks it invalid.

[0052] 5b. If the applet 410 detects a valid NFC transaction with the digitized card before the timer expires, the timer is stopped and the digitized card becomes permanent.

[0053] It should be noted that in an alternative but less secure implementation, the timer may run in the application 406 rather than in the SE applet 410. Furthermore, before performing step 3, the digitization service 416 may apply other additional risk management features.

[0054] The systems and methods described herein may be implemented, at least in part, by a computer program—i.e., a software application or simply an "application"—or multiple computer programs, which may exist in various forms, both active and inactive, within a single computer system or across multiple computer systems. For example, they may exist as software programs that include program instructions in source code, object code, executable code, or other formats for performing certain steps. Any of the foregoing may be implemented on a computer-readable medium, which may include storage devices and signals in compressed or uncompressed form.

[0055] As used herein, the term "computer" refers to any electronic device that includes a processor, such as a general-purpose central processing unit (CPU), a special-purpose processor, or a microcontroller. A computer is capable of receiving data (input), performing a series of predetermined operations thereon, and generating results (output) in the form of information or signals. Depending on the context, the term "computer" will refer specifically to a processor, or more generally to a processor associated with a collection of interrelated elements contained within a single housing or enclosure.

[0056] The term "processor" or "processing unit" refers to a data processing circuit, which may be a microprocessor, a coprocessor, a microcontroller, a microcomputer, a central processing unit, a field programmable gate array (FPGA), a programmable logic circuit, and / or any circuit that manipulates signals (analog or digital) based on operating instructions stored in a memory. The term "memory" refers to a storage circuit or multiple storage circuits, such as read-only memory, random access memory, volatile memory, non-volatile memory, static memory, dynamic memory, flash memory, cache memory, and / or any circuit that stores digital information.

[0057] As used herein, a "computer-readable medium" or "storage medium" can be any device that can contain, store, communicate, propagate, or transport a computer program for use by or in connection with an instruction execution system, apparatus, or device. A computer-readable medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation medium. More specific examples (a non-exhaustive list) of computer-readable media can include the following: an electrical connection having one or more wires, a portable computer disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disc read-only memory (CDROM), a digital versatile disc (DVD), a Blu-ray disc (BD), and a memory card.

[0058] It should be noted that the above embodiments have been described with reference to different subject matters. Specifically, some embodiments may have been described with reference to method claims, while other embodiments may have been described with reference to apparatus claims. However, those skilled in the art will appreciate from the foregoing that, unless otherwise indicated, in addition to any combination of features belonging to one type of subject matter, any combination of features relating to different subject matters, in particular, combinations of features from method claims with features from apparatus claims, are also considered to be disclosed with this document.

[0059] In addition, it should be noted that the accompanying drawings are schematic. In different drawings, similar or identical elements have the same reference numerals. In addition, it should be noted that, in an effort to provide a concise description of an illustrative embodiment, the implementation details that fall within the conventional practice of those skilled in the art may not be described. It should be understood that in the development of any such implementation, as in any engineering or design project, many implementation-specific decisions must be made in order to achieve the developer's specific goals, such as to meet system-related and business-related restrictions, which may vary from one implementation to another. In addition, it should be understood that such development work may be complex and time-consuming, but it remains a routine task for those of ordinary skill in the art to design, make, and manufacture.

[0060] Finally, it should be pointed out that a person skilled in the art will be able to design many alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between brackets should not be construed as limiting the claim. The words "comprise(s)" or "comprising" do not exclude the presence of elements or steps other than those listed in the claim. The words "a" or "an" preceding an element do not exclude the presence of a plurality of such elements. The measures recited in the claims may be implemented by hardware comprising several different elements and / or by a suitably programmed processor. In a device claim enumerating several means, several of these means may be implemented by one and the same item of hardware. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.

[0061] Reference Signs List

[0062] 100 Method for providing a digital representation of a transaction card in a mobile device

[0063] 102 The NFC unit of the mobile device detects that the transaction card is near the mobile device.

[0064] 104 Upon or after said detection, retrieving the digital representation of the transaction card from the digitization server via the processing unit of the mobile device

[0065] 106 Loading the digital representation of the transaction card into the memory of the mobile device by the processing unit

[0066] 108 Activate the digital representation of the transaction card by the processing unit for a predefined validity period

[0067] 110 If no successful NFC transaction is performed within said validity period, invalidating the digital representation of the transaction card by the processing unit

[0068] 200 mobile devices

[0069] 202 NFC unit

[0070] 204 processing units

[0071] 206 Memory

[0072] 300 mobile devices

[0073] 302 Security Element

[0074] 400 System for providing digital representation of transaction card in mobile device

[0075] 402 Mobile Phone

[0076] 404 Central Processing Unit

[0077] 406 Application

[0078] 408 Security Element

[0079] 410 Applet

[0080] 412 NFC unit

[0081] 414 NFC Reader

[0082] 416 Digital Services

[0083] 418 Trading Cards.

Claims

1. A method for providing a digital representation of a transaction card in a mobile device, characterized in that include: detecting, by a near field communication unit of the mobile device, that the transaction card is in the vicinity of the mobile device; During or after the detection, the processing unit of the mobile device performs the following steps: retrieving said digital representation of said transaction card from a digitization server; loading the digital representation of the transaction card into a memory of the mobile device; activating the digital representation of the transaction card for a predefined validity period; invalidating the digital representation of the transaction card if a successful near field communication transaction is not performed with the mobile device on an external reader within the validity period; wherein if a successful near field communication transaction is performed with the mobile device on the external reader within the validity period, the processing unit, upon or after said detecting, further causes the digital representation of the transaction card to become a permanent digital representation of the transaction card, thereby preventing the card from being digitized by an attacker somewhere on the go due to the impossibility of performing an NFC transaction quickly enough to make the card permanent.

2. The method according to claim 1, characterized in that Invalidating the digital representation of the transaction card includes deactivating the digital representation of the transaction card.

3. The method according to claim 1, characterized in that Invalidating the digital representation of the transaction card includes removing the digital representation of the transaction card from the memory.

4. The method according to claim 1, wherein The digital representation includes data indicative of the expiration date.

5. The method according to claim 1, wherein Retrieving the digital representation of the transaction card from the digitization server is performed by a further communication unit of the mobile device.

6. The method according to claim 5, characterized in that The further communication unit is a cellular communication unit or a Wi-Fi communication unit.

7. The method according to claim 1, characterized in that The memory is included in a secure element of the mobile device.

8. The method according to claim 7, characterized in that The digital representation of the transaction card is retrieved through a secure channel established between the secure element and the digitization server.

9. A non-transitory computer-readable storage medium comprising a computer program of executable instructions, characterized in that When the executable instructions are executed, the method according to any one of the preceding claims is performed.

10. A mobile device comprising a near field communication unit and a processing unit, characterized in that: The near field communication unit is configured to detect a transaction card in proximity to the mobile device, and wherein the processing unit is configured to: retrieving a digital representation of the transaction card from a digitization server; loading the digital representation of the transaction card into a memory of the mobile device; activating the digital representation of the transaction card for a predefined validity period; invalidating the digital representation of the transaction card if a successful near field communication transaction is not performed with the mobile device on an external reader within the validity period; wherein if a successful near field communication transaction is performed with the mobile device on the external reader within the validity period, the processing unit, upon or after said detection, is further configured to cause the digital representation of the transaction card to become a permanent digital representation of the transaction card, thereby preventing the card from being digitized by an attacker somewhere on the go due to the impossibility of performing an NFC transaction quickly enough to make the card permanent.

Images