System, method and computer-accessible medium for blocking malicious emv transaction

Abstract

To provide a method, a system and a non-contact card, for preventing a startup of undesired applications and execution of illegal transactions.SOLUTION: A method includes: storing an applet for generating a digital tag in a first device; receiving a request for information by the first device; configuring the digital tag to be associated with at least one of an application or input in a second device so that the application starts up in the second device by receiving the digital tag with the second device; and issuing the digital tag from the first device.SELECTED DRAWING: Figure 3

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

[0001] This application claims priority to U.S. Patent Application No. 16 / 653,305, filed October 15, 2019, which was allowed August 25, 2020, now U.S. Patent No. 10,755,262, the disclosure of which is incorporated herein by reference in its entirety. [Technical Field]

[0002] The present disclosure relates generally to preventing the launch of unwanted applications and the execution of fraudulent transactions, and more particularly to hindering application activity by blocking user data received via near field communication. [Background technology]

[0003] Portable electronic devices such as smartphones, tablets, and laptop computers are ubiquitous. These devices often support multiple means of wireless communication, including near field communication (NFC), which involves data communication established within a short-range communication field.

[0004] Europay, Mastercard, and Visa ("EMV") standard-based cards are smart cards that store information on a magnetic strip (for backward compatibility with older machines) and additionally on an integrated circuit. EMV cards are smart cards, also known as chip cards or IC cards. They include cards that must be physically inserted into a reader. They also include contactless cards that can be read at close range using Near Field Communication (NFC) technology. EMV is a payment method based on an industry standard for smart payment cards and the payment terminals and automated teller machines that accept them.

[0005] A typical credit card consists of a contactless chip that allows a user to make a credit card transaction without swiping the credit card or physically engaging it in a credit card reader. The contactless chip allows wireless and contactless communication with appropriate devices to facilitate use of the credit card. For example, NFC can be used to make payments wirelessly.

[0006] However, many credit cards are configured to allow access to the encoded credit card information by any suitable receiving device. This can lead to security issues, especially in the context of mobile devices that can read data from contactless chips. For example, a mobile device equipped with an NFC reader can read credit card information from the card chip. This allows the mobile device to read the information on the card whenever the credit card is within range of the mobile device's NFC field.

[0007] Malicious software exists that can be installed on a mobile device without the mobile device user being aware of its existence. This malicious software can be used to access information on a smart card. This software may also be embedded as part of an otherwise legitimate application. In this case, the malicious software could cause the mobile device to read information from a credit card whenever the credit card is brought (intentionally or inadvertently) into close proximity with the mobile device. Certain mobile device operating systems, such as the Android operating system, may initiate or open specific applications in the presence of an NFC field generated by certain cards, such as smart cards, bank cards, ID cards, membership cards, credit cards, debit cards, and gift cards. For example, when the Android operating system detects an NFC field, an application can use the detection of the field to launch itself (in the background or otherwise, without the user's knowledge) and communicate with the card to obtain specific information. Thus, malicious software configured to listen for and wait for the NFC field generated by certain smart cards to obtain information from a credit card (or other device) can potentially steal a user's sensitive credit card information. Once stolen, this information is stored on the user's device by the malicious software. This information can then be sent by malicious software to a server without the user's knowledge and used for nefarious purposes, such as to commit fraud and unauthorized transactions.

[0008] Therefore, it would be beneficial to provide an exemplary system, method, and computer-accessible medium that prevents malicious applications from conducting EMV transactions. Summary of the Invention

[0009] Exemplary embodiments of the present disclosure provide systems, methods, and computer-accessible media that can facilitate preventing malicious activity and malicious software from taking action based on received or intercepted data.

[0010] An embodiment of the present disclosure provides a method that includes storing on a first device an applet configured to generate a digital tag; receiving a request for information at the first device; configuring the digital tag to be associated with at least one of (i) an application or (ii) an input on the second device such that receipt of the digital tag by the second device launches the application on the second device; and issuing the digital tag from the first device.

[0011] An embodiment of the present disclosure provides a system including a contactless smart card and a user device configured to automatically request user information from the contactless smart card when brought into physical proximity with the contactless smart card, receive a digital tag from the contactless smart card, and, in response to the tag, launch an application associated with the received tag.

[0012] An embodiment of the present disclosure provides a contactless card comprising a processor, a communications interface, and a non-transitory computer-accessible medium having computer-executable instructions stored thereon. When the instructions are executed by the processor, the contactless card is configured to perform a procedure including receiving a request for information via the communications interface and issuing an NFC Data Exchange Format (NDEF) tag, where the tag is configured as an Android Application Record (AAR) tag. The tag is associated with an applet stored on the contactless credit card. The tag is associated with at least one of (i) an application or (ii) an input on a first device and configured to launch the application when received by the first device.

[0013] Further features of the disclosed design and advantages offered thereby are described in more detail below with reference to specific exemplary embodiments that are illustrated in the accompanying drawings. [Brief explanation of the drawings]

[0014] [Figure 1] FIG. 1 is a diagram illustrating a first device according to an exemplary embodiment of the present disclosure. [Figure 2] FIG. 2 is a diagram illustrating a user device according to an exemplary embodiment of the present disclosure. [Figure 3] FIG. 3 is a flowchart of a method according to an exemplary embodiment of the present disclosure. [Figure 4] FIG. 4 is a flowchart of a method according to an exemplary embodiment of the present disclosure. [Figure 5] FIG. 5 is a flowchart of a method according to an exemplary embodiment of the present disclosure. [Figure 6] FIG. 6 is a flowchart of a method according to an exemplary embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram of a system according to an exemplary embodiment of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0015] The following description of the embodiments provides non-limiting representative examples that refer to numerals to particularly explain the features and teachings of different aspects of the present invention. It should be recognized from the description of the embodiments that the described embodiments can be implemented separately or in combination with other embodiments. Those skilled in the art who review the description of the embodiments should be able to learn and understand the different aspects of the invention described. The description of the embodiments should facilitate understanding of the present invention to the extent that other embodiments not specifically covered but within the knowledge of those skilled in the art who read the description of the embodiments will be understood to be consistent with the application of the present invention.

[0016] Exemplary systems, methods, and computer-accessible media may be provided that can facilitate blocking of malicious transactions based on data received from any NFC-enabled data source. For example, information encoded on a user's EMV standard-based credit card may be read by a mobile device or other similar device when the credit card is brought into physical proximity to the device. Credit cards are often coded to provide digital information to the device out of the box, so that the information on the card can be read by any software installed on the digital device. However, credit cards may be coded to include, for example, a digital tag. When the credit card is brought into proximity to the device, the digital tag may first be read by the mobile device.

[0017] The digital tag can be configured such that, when read by a mobile device, an application identified by the digital tag is launched on the mobile device. The launched application can, for example, prevent unauthorized access to the requested information. The launched application can, for example, be configured to prevent other applications on the mobile device from accessing the requested information. An application associated with the digital tag can be installed on the mobile device by a user. The tag can be generated according to the NFC Data Exchange Format (NDEF) specification. The NDEF tag can further be configured as an Android Application Record (AAR) launch tag. The AAR launch tag can be associated with or registered to a particular application (e.g., an authorized or intended application) by an operating system installed on the mobile device. When the AAR launch tag is received by the mobile device, the mobile device can prioritize the associated application for launch. In some examples, the launch of the associated application can prevent the launch of other applications in response to the mobile device receiving the AAR launch tag.

[0018] The application associated with the digital tag can be further configured to perform various functions. For example, the application can send a notification to the user when the application is launched more than a predetermined number of times within a predetermined period of time. The application can also create a list of other applications installed on the device. Any other functionality commonly associated with applications on an operating system, such as applications on the Android operating system, can be programmed into the device. Additionally, the digital tag can provide association, timing, and interference parameters for the association, sequencing, time control, and interaction of a specified application with other applications. Implementing and customizing these parameters can improve customization, operation, data protection, device security, and user experience.

[0019] Exemplary embodiments of the present disclosure provide numerous advantages. Malicious and otherwise unauthorized applications can be installed on a device and configured to launch whenever a communication signal, such as a contactless communication field (e.g., an NFC field), is detected. Using digital tags described herein, malicious and other unauthorized applications can be prevented from launching and execution can be restricted to only one or more authorized applications. For example, using digital tags described herein can prevent malicious applications from reading or querying information (e.g., account information or other sensitive information) upon detection of an NFC signal. This improves security and provides users with increased control over applications running on their devices. User control can be further improved through execution prioritization and association, time, and interference parameters, as described by exemplary embodiments of the present disclosure.

[0020] FIG. 1 illustrates a first device 100. The first device may be any device capable of storing information such that the stored information can be accessed. The first device 100 may be capable of storing a record 101. The first device may also have a processor 102. The processor 102 may be any suitable, commercially available, or custom-designed processing circuit. The first device may have a communication interface 103 capable of generating a first device communication field 104. The first device may also have memory 105, which may contain one or more applications or applets capable of performing the functions described herein. Examples of the first device 100 include any device capable of containing the record 101 and communicating via the communication interface 103. Examples include any NFC device, such as a payment card, credit card, debit card, user ID card, mobile phone, smartphone, RFID card, tablet, or computer.

[0021] Additionally, the first device 100 may be a smart card having any suitable smart card operating system stored thereon. For example, the operating system may be stored in memory 105. The card operating system may be executed using the processor 102 of the first device 100. Two examples of operating systems available for smart cards include JavaCard and MULTOS card operating systems. Card operating systems enable on-card application development of programs that need to run within the secure environment of the smart card chip, such as chip activation, issuance, file control, and data load management. Installing a specific application on the card operating system may, for example, generate NDEF tags according to certain parameters. These generated tags may be stored in record 101.

[0022] The record 101 may include any information accessible by a suitable computing device. The record 101 may be stored in the memory 105. The record 101 may be stored in any suitable data type, including Boolean, byte, c-byte, date, decimal, integer, long, numeric, string, or any combination of these data types. The record 101 may also be stored as delimited data, fixed data, or mixed data. The record 101 may include multiple pieces of data, all of which may include corresponding metadata. The record may also include custom data types or data fields. Non-limiting examples of data may include information such as a first device identifier number, a credit card number, a personal account number (PAN), a username associated with the first device, an expiration date for the first device, a card verification value (CVV) code, a text string, and a phone number.

[0023] Record 101 can also be stored in a manner that allows data to be exchanged via the NFC Data Exchange Format (NDEF), which enables information exchange between any compatible NFC device and another NFC device or tag. NDEF is strictly a message format. It is a binary message encapsulation format that enables exchange between NFC-enabled devices. NDEF messages can contain payloads of any type and size. The NDEF data format can be used to store and exchange information, such as Uniform Resource Identifiers (URIs), plain text, etc., using a commonly understood format. The NDEF data format can further support the exchange of NDEF messages as a mechanism that enables the exchange of NDEF records. Each NDEF record can contain a structure that identifies the record's contents, as well as the record's size. At a basic level, an NDEF record can contain two components: a record type, which is used to provide context for the payload data, and payload data. These two components together represent the action to be taken by the device upon receiving the NDEF record. A single NDEF message can contain multiple NDEF records. NDEF tags themselves can be created dynamically. For example, the NDEF tag can be generated at runtime by an applet stored in memory 105 of the first device 100. For example, the NDEF tag can be based on a random number generator or externally introduced data. The NDEF tag is read when the card, or a chip contained in the card, is exposed to a properly aligned magnetic field and a request for a specific NDEF message is issued.

[0024] Record 101 may also be configured and stored as an Android Application Record (AAR) launch tag. An AAR launch tag is a type of NDEF record used by Google's Android operating system to indicate to an NFC device that it should use an explicitly defined application to handle the NFC tag. The AAR launch tag includes a package attribute, which may identify an Android application that handles or processes the NFC tag. The package attribute may identify an Android application to be launched in response to the tag.

[0025] The memory 105 may be read-only memory, write-once / read multiple memory, or read / write memory, such as RAM, ROM, and EEPROM, and the first device 100 may include one or more of these memories. Read-only memory may be programmable as read-only at the factory or may be programmable only once. One-time programmable memory can be written once and then read many times. Write-once / read multiple memory can be programmed at some point after the memory chip leaves the factory. Once the memory is programmed, it cannot be rewritten, but it can be read many times. Read / write memory can be programmed and reprogrammed many times after leaving the factory, and read / write memory can be read many times after leaving the factory. The memory of the first device 100 can be programmed with instructions to generate the record 101. The record 101 can further include a digital tag that can be generated based on instructions contained in the memory 105. The memory of the first device 200 can also include instructions stored as a special applet, such as a JavaCard applet. For example, memory 105 can include one or more applets configured to generate one or more NDEF tags, one or more of which can be further configured to be one or more AAR launch tags associated with one or more Android applications. Thus, memory 105 can be advantageously modified as needed to change which Android applications on an Android device are launched in response to receiving a tag, as needed. In another example, memory 105 can be configured to generate digital tags configured to be compatible with different operating systems or different applications.

[0026] Memory 105 can store other information, such as a user identifier. Record 101 can also be included in memory 105. Other information, such as a user identifier, algorithms, and encryption keys, can also be stored in memory 105. Memory 105 can be divided into several zones, each zone having a different security level. Processor 102 can track which memory addresses belong to which zone and the accessibility of each zone. In an exemplary embodiment, memory 105 can be divided into four zones: a secret zone (e.g., a secure element), a confidential zone, a use zone, and a public zone.

[0027] The communication interface 103 may be any suitable technology capable of transmitting or receiving data over long distances. Examples of such technologies include, for example, Wi-Fi, WLAN, RF, wireless, IR, Bluetooth, RFID, Near Field Communication (NFC), or any combination thereof, or any other suitable architecture or system that facilitates communication of signals, data, and / or messages. Similarly, any suitable hardware-level and software-level algorithms may be selected to enable data transfer over the first device communication field 104. The first device communication field may be generated by the communication interface 103. Examples of algorithms include an asynchronous connectionless protocol, a synchronous connection-oriented link, a link management protocol, a host controller interface, or a low energy link layer. Information may be communicated using the NDEF data exchange format. This format allows for the exchange of both NDEF messages and NDEF records. The NDEF data format enables the exchange of NDEF records. Each NDEF record may include a structure that identifies the contents and size of the record. An NDEF record essentially includes two components: a record type, which is used to provide context for the payload data, and payload data. Together, these two components represent the action that the device will take upon receiving the NDEF record.

[0028] 2 is a diagram illustrating a user device 200. Non-limiting examples of the user device 200 include a personal computer, a laptop, a tablet, an electronic reader, a mobile phone, an NFC reader, or a smartphone. The user device 200 may include a display 201, a user interface 202, a memory 203, a processor 204, and a user device communication interface 205 having a user device communication field 206. The user device 200 may further be configured to include one or more operating systems, such as the Android operating system, and one or more applications or applets capable of performing the functions described herein.

[0029] The memory 203 may be read-only memory, write-once / read multiple memory, or read / write memory, such as RAM, ROM, and EEPROM, and the user device 200 may include one or more of these memories. Read-only memory may be programmable as read-only at the factory or may be programmable only once. If programmable only once, it can be written once and then read many times. Write-once / read multiple memory may be programmed at some point after the memory chip leaves the factory. Once the memory is programmed, it cannot be rewritten, but it can be read many times. Read / write memory can be programmed and reprogrammed many times after leaving the factory. Read / write memory can also be read many times.

[0030] Memory 203 may be further configured to have an operating system or special instructions installed. The installed operating system may be further configured to install additional compatible software, such as applications or programs. Examples of commercial operating systems include, for example, the Android operating system, iOS, Windows, Debian, Linux, and Linux variations such as Ubuntu. Special purpose operating systems may also be installed in memory 203. As another example, multiple operating systems may be installed in memory 203, allowing a user of user device 200 to select the operating system they wish to use.

[0031] Display 201 can be selected from any suitable two-dimensional or three-dimensional display, such as a light emitting diode, liquid crystal display, digital light processing display, or organic light emitting diode display. User interface 202 can be selected from any suitable user input device, such as a touchpad, touch screen, mechanical switches, a natural language user interface, a click wheel, a QWERTY keyboard, a mouse, gesture recognition, or a capacitive touch screen.

[0032] The user device communication interface 205 can be any suitable technology capable of transmitting or receiving data over long distances. Examples of such technologies include, for example, Wi-Fi, WLAN, RF, wireless, IR, Bluetooth, RFID, near field communication (NFC), or any combination thereof, or any other suitable architecture or system that facilitates communication of signals, data, and / or messages. Similarly, any suitable hardware-level and software-level algorithms can be selected to enable data transfer over the user device communication field 206. The user device communication field 206 can be generated by the user device communication interface 205. Example algorithms include an asynchronous connectionless protocol, a synchronous connection-oriented link, a link management protocol, a host controller interface, or a low energy link layer. Information can be communicated using the NDEF data exchange format. Using this format, both NDEF messages and NDEF records can be exchanged. NDEF messages are an additional mechanism for the exchange of NDEF records.

[0033] The first device 100 and the user device 200 may also communicate with each other using a network. A network may be any means, mechanism, protocol, or pathway that allows for the transfer of information between the first device 100 and the user device 200, including, but not limited to, Wi-Fi, WLAN, RF, wireless, IR, Bluetooth, cellular, near field communication, SMS, MMS, telephone, any combination thereof, or any other suitable architecture or system that facilitates communication of signals, data, and / or messages. The first device and the user device may communicate over a single network or multiple networks.

[0034] In an exemplary embodiment, the first device 100 may be energized when it is brought into proximity with an NFC reader, which may be included in the user device 200. The NFC reader may emit a magnetic field that can energize the first device 100 (e.g., a smart card) via inductance. The first device may emit an NFC signal when powered by this or another method. Upon detecting the NFC signal emitted by the first device 100, the user device 200 may automatically attempt to read an NDEF message by sending an NDEF request to the first device 100. The first device 100 may accept the request from the user device 200 and respond with an NDEF message. The NDEF message may further include at least one record that is an AAR activation tag.

[0035] When the first device 100 and the user device 200 are in physical proximity to each other, the user device can request information from the first device. In response to the request, the first device can transmit an NDEF tag to the user device 200, which may include one or more records including an AAR activation tag. The first device can also be configured to automatically broadcast information to any user device 200 that can receive information from the first device 100. This can be done, for example, when the first device communication field 104 overlaps with the user device communication field 206. This transfer of information between the first device and the user device can be accomplished by the means described above.

[0036] The first device 100 may be configured to include, for example, a credit card number and associated information such as a CVV number, username, and expiration date. The first device 100 may be further configured to transfer this information to the user device 200 using NFC or a similar medium. This information may be accessed by any second device when the two devices are in physical proximity. As discussed above, malicious software that may be installed on the user device 200 may wait for or listen to the first device 100's NFC signals and access information transmitted via the NFC signals from the first device 100. In some instances where malicious software is installed on the user device 200, information may be obtained in the background without the user's knowledge and used by the malicious software on the user device 200 to facilitate and execute fraudulent activities or transactions.

[0037] In other examples, malicious software may be installed on a second user device (not shown in FIG. 2 ) that may be located in proximity to first device 100. If the second user device is located in sufficient proximity to first device 100 so as to be able to read NFC or other signals provided by the first user device, in these examples, the malicious software on the second user device, when unhindered by the AAR activation tag, may facilitate and execute fraudulent acts or transactions based on the read signals.

[0038] As described above, the AAR launch tag generated by one or more applets on the contactless card can be configured to launch one or more specified applications. In some embodiments, the AAR launch tag can be scanned or checked by a security server or security application to identify all applications specified by the tag. In some examples, the one or more applications specified to be launched by the AAR launch tag can be configured to retrieve all applications associated with the AAR launch tag. Once identified, the server can perform a security review of the application. In this review, the application can be scanned and checked for malicious elements (e.g., known software viruses) and capabilities that exceed system or security rules (e.g., unauthorized data access, unauthorized data export, unauthorized internal or external communication).

[0039] In some embodiments, the application can send a list of other applications installed on the operating system to a security server or security application. The security server or security application can use this information, potentially collected from multiple devices, to screen for malicious software. For example, the server can maintain a list of software known to be malicious. The server can, for example, simulate or emulate software from the list to replicate in software the process of transmitting information from the first device 100 in the manner described herein, and observe whether various applications listen for and transmit information received from the first device 100 to another source. The server can notify the user of the first device, either to or through the launched application or by any other means, that the device contains software that matches a list of suspected malicious software maintained on the server. If the security review is successfully completed, the application can be launched. If the security review identifies one or more security issues or potential security issues, the launch of the application can be prevented or suspended until the issues are resolved. In some examples, the client device can generate an alert or display to the user upon receiving the notification from the server. In other examples, the server may present a notification to the user via other means (e.g., a pop-up notification, a text message, an email, a phone call). The alerts and notifications may provide one or more messages indicating that the application will not be launched. In some examples, the alerts and notifications may provide security information related to the application that will not be launched.

[0040] In some embodiments, the first device 100 may be further configured to include in its record 101 a tag, such as an AAR tag, that is appended to information normally transmitted by the first device. The AAR tag, when received by the user device, may be configured to launch an application specified by the AAR tag. This tag may be configured to be sent to the user device 200 first before any other sensitive information contained in the first device 100 is transferred. Only the application specified by the AAR launch tag may be launched on the user device 200 (or any second device) upon receipt of the tag. The operating system of the user device 200 may be configured to allow only the launched application, or another specified application, to access the additional information transmitted by the first device 100. Launching this application first may prevent a second application from being launched in response to the presence of an NFC field. Thus, a malicious application (or other malicious software) may not be able to read the information being transmitted by the first device 100 because its launch or execution is prevented or stopped by the launch of the application specified in the AAR tag. The first device 100 may also be configured to include or generate tags so that this process of launching an application is compatible across operating systems and user devices, thus allowing for greater protection to be designed into the data contained in the first device 100.

[0041] As an example, a user may tap a payment card (e.g., first device 100) against the back of an Android phone (e.g., user device 200) or store the card in a phone wallet located right next to the phone's NFC reader. An application may be installed on the phone that is programmed to read the EMV applet on the card to read the credit card number, personal information, card verification value (CVV) code, and expiration date from the card. This application may be maliciously installed under the guise of another type of software, such as a game, a social networking application, or an entertainment application. Malicious applications may also be inserted into the code of otherwise legitimate applications. These malicious applications may run in the background, invisible to the user, and read the card's information. The read information may be uploaded to a backend server and collected for fraudulent use. To prevent this, as described in the illustrated embodiment, additional software may be installed on the card's chip to prevent other applications on the reading device, other than the card issuer's application, from reading the payment card. The protection software generates an NFC NDEF message containing one or more NDEF records. One of these NDEF records may be an AAR launch tag that causes the operating system on the reading device to launch the card issuer's application on the reading device and prevent the launch or further operation of other applications on the reading device. For example, the Android operating system is configured to allow only one application to read information from Android system memory at a time. Launching the card issuer's application prevents malicious third-party applications from secretly launching, rather than user-initiated, a card that reads data from an NFC-enabled Android device when the card is stored next to it.Thus, any information that can be contained on the smart card or transmitted from the smart card to the user device 200 is intercepted by the first party application.

[0042] Adding an NDEF record to the smart card may not prevent an application already launched by the user on the user device 200 from accessing or requesting information on the first device 100. Applications on the Android OS can be automatically launched in the presence of an event, such as the presence of an NFC signal. If no applications are open or otherwise active on the user device 200, an exemplary embodiment of the AAR launch tag of the present disclosure launches a specified application on the user device 200. Furthermore, the AAR launch tag can be configured to prevent applications other than the specified application from opening or otherwise becoming active. The AAR launch tag can be configured to prevent applications other than the specified application from opening or otherwise becoming active, regardless of the state of the specified application. This can be achieved, for example, through the operating system of the user device 200, such as the Android OS. For example, if the user device 200 is active and the NFC radio is active, the NFC radio of the user device 200 can be configured by the manufacturer of the user device 200 to be activated. For example, the NFC radio of user device 200 can be active when the screen of the user device is active and the user device is in an unlocked state. In some examples, user device 200 can be an Android device, and the NFC radio can be configured to be active only when the Android screen is on and the device is in an unlocked state. However, if an application is already launched, the user of user device 200 is not prohibited from accessing or using the application.

[0043] As an example, a user may carry their NFC-enabled credit card (e.g., first device 100) in their purse or wallet. Throughout the day, valid credit cards may come into proximity for NFC communication with the user's personal device or other NFC-enabled user devices. The user may have their device installed with the Android operating system. The NFC-enabled credit card may be further configured to include a tag in record 101, such as an AAR activation tag, configured to activate a specific application, e.g., a financial server provider (or other service provider) application associated with the credit card, on the user device. If the specific application is not already installed on the user device, the tag may be further configured to activate an Android device application store (e.g., Google Play Store) or other similar platform so that the specified application can be installed on the user device.

[0044] The NDEF tag or AAR record may consist of the package name of a specific Android application. Thus, upon receiving the specific AAR record or NDEF tag, the operating system or Android operating system will launch the specified application when the contactless card is tapped on the phone, or, if the specified application is not currently installed on the Android device, will launch the Google Play Store to a page where the specified application can be downloaded and installed on the Android device.

[0045] The digital tag in the first device 100 may further be configured to cause the user device 200 to access a server to download an application associated with the tag received from the first device 100. This may be accomplished by including information in the first device 100 that identifies the particular application. The server may be a standard, commercially available, well-known server for communicating with devices over a network. In one example, the tag in the first device may allow a dedicated application to interface with the server and download the application. One example of such a dedicated application is the Google Play Store on the Android® OS. Other examples of such applications include the App Store on the iOS® operating system and the Microsoft Store, which enables the download of Windows® applications. Another example is the Canonical Store and the Ubuntu Software Center on the Ubuntu® operating system. Other package managers exist that are specialized for various operating systems.

[0046] In an example where the dedicated application is the Google Play Store, the server may be hosted by Google®. If the application is not installed on the user device, receipt of the digital tag may launch the Google Play Store to a page associated with the application. One or more of these pages may display a button for downloading the application and installing it on the user device. When the user clicks the button, the application is downloaded, and the Google Play Store's user interface may display a "busy" status during the download and subsequent installation. Once complete, the "busy" status indication is removed, and the user interface may present another button for launching the application. Furthermore, this button may be presented by the user device in the form of an application icon displayed on the Android desktop so that the user can launch the application from the desktop.

[0047] In some embodiments, record 101 can further specify additional parameters related to the launch of this application. These aspects can relate to association, time, and interference parameters. For example, the association parameters can include identifying one or more applications to launch in addition to the application specified by the AAR tag, and identifying a sequence for launching the one or more additional applications. Exemplary sequences include, but are not limited to, linear sequences (e.g., one application after another), simultaneous launches, and completion-triggered launches (e.g., launching a second application only after a previously launched first application has closed and / or completed an operation, launching an application only after all other previously launched applications have closed and / or performed a specific operation, launching an application only after one or more operations have completed, regardless of whether the one or more operations are performed by other related or launched applications, etc.).

[0048] As another example, the time parameters can specify time-related aspects of the launch of an application. For example, the time parameters can include a designated time to launch the application specified by the AAR launch tag, a designated time to launch one or more additional applications, a time interval between launching applications, and a time delay that prevents the launch of one or more additional applications following the launch of the application specified by the AAR launch tag. As another example, the application specified by the AAR launch tag can be launched only after a designated period of time has elapsed without the user device receiving user input, or upon receiving a specific, designated input (e.g., a specific keystroke or touchscreen input).

[0049] As another example, the interference parameters can specify the effect that the launched application has on one or more other applications. For example, the interference parameters can cause the application specified by the AAR launch tag to pause execution of one or more applications for a predetermined period of time, until a specific action is performed by the launched application, until the launched application signals that other applications can resume, or until the launched application closes. The interference parameters can also cause one or more applications to close completely.

[0050] Thus, by using association, time, and interference parameters, it is possible to control which applications can be executed, the timing and order of their execution, and the ability to interfere with the operation of other applications, particularly during critical periods of operation of a particular application, thereby improving the performance and operation of the first device 100 and the user device 200, as well as improving data security and the user experience.

[0051] FIG. 3 is a flowchart illustrating a method 300 for transferring information from a first device 100 to a user device 200 in an exemplary embodiment of the invention. The method begins at step 305, where an applet is stored on the first device 100 and configured to generate a collection of digital tags. The collection of tags may be as described above, and the collection may include at least one AAR activation tag. In some examples, these tags may be generated once in advance and may be static. In these examples, it is not necessary to use an applet to generate the digital tags. In other examples, the collection of tags may be dynamically created based on, for example, the current operating state of the first device 100, the user device 200, and any applets or applications running thereon.

[0052] In step 305, the communication field 104 of the first device 100 may enter a communication field generated by the user device 200, such as an NFC communication field or other contactless communication field. In step 310, the first device 100 may receive a request for information. In some examples, this step may occur when the first device communication field 104 overlaps with another communication field. For example, an NDEF file is read when the card / chip is exposed to a properly aligned magnetic field. As another example, this step may occur when the NFC device in the first device 100 is activated in the presence of an external field or device, such as the user device 200 or another device.

[0053] In step 315, the first device 100 can generate one or more digital tags. In this step, the first device 100 can further include additional information with the one or more digital tags. Examples of additional information transmitted with the digital tags can include user information or credit card information. In step 320, the one or more digital tags can be configured to be associated with at least one application such that, when the issued tag is received on the second device, the associated application is launched on the second device. The tag can also be configured in a manner compatible with the NDEF format. The tag can further be configured to be an AAR activation tag that can specify a specific action that the operating system of the user device 200 should take upon receiving the AAR tag. In step 325, the one or more digital tags can be configured to include one or more association parameters, one or more time parameters, and / or one or more interference parameters.

[0054] In step 330, one or more digital tags may be transmitted from the first device 100 to the user device 200. In step 335, upon receiving the one or more digital tags, the user device 200 may launch one or more specified applications as specified by the AAR activation tags. In examples where a collection of tags is transmitted, the AAR activation tag may be the first tag read by the user device 200. In step 340, if one or more association parameters, one or more time parameters, and / or one or more interference parameters are present, the AAR activation tag may be executed by the user device 200.

[0055] FIG. 4 illustrates a method for exchanging information. Method 400 begins in step 405, where information is requested from the first device 100 when the user device 200 is in physical proximity to the first device 100. This may occur when the user device 200 recognizes the presence of the first device 100 through overlapping communication fields between the first device 100 and the user device 200. This may also occur when software on the user device 200 recognizes the presence of a communication field outside the user device 200. In step 410, a digital tag is received from the first device 100. This digital tag may include information requested by the user device 200 from the first device 100. In some examples, the digital tag may include additional information not requested by the user device 200. For example, the digital tag may include one or more association parameters, one or more time parameters, and / or one or more interference parameters. In either case, the information may be in the form of one or more records, each of which may be used in an unauthorized manner by a malicious application.

[0056] In step 415, an application associated with the digital tag may be launched by the user device 200 in response to the received tag. For example, the launched application may be defined by metadata or a dedicated field in the received tag. The launched application may then read other information transmitted from the first device to the user device, such as credit card information or other personal information, as well as any association, time, and interference parameters. Thus, the application may intercept other information transmitted to the user device upon launch and prevent other applications on the user device from accessing that information. Furthermore, the application may prevent other applications from running without the user specifically requesting and / or authorizing their execution. Thus, the execution of applications, including malicious applications, without authorization and without the user's knowledge may be advantageously prevented. In step 420, the application may read and act upon any additional information or parameters.

[0057] FIG. 5 illustrates an embodiment of the present invention, method 500. The method begins in step 505, where information is requested from a first device (e.g., first device 100) when the user device (e.g., user device 200) is in physical proximity to the first device. This may occur when the user device 200 recognizes the presence of the first device due to overlap between the first device 100 and the user device's 200 communication field. This may also occur when software within the user device 200 recognizes the presence of a communication field outside the user device 200. In step 510, a digital tag is received from the first device 100. This digital tag may be information requested from the first device 100 by the second device 100. In some examples, the digital tag may include additional information not requested by the user device 200. In either case, the information may be in the form of one or more records, each of which may be used in an unauthorized manner by a malicious application. This digital tag may be platform or operating system specific. In step 515, an application associated with the emitted digital tag may be launched in response to the received tag. For example, in the Android operating system, the launched application may be defined by metadata or a dedicated field in the received tag. In step 520, if the second device cannot find the application specified in the emitted digital tag, the second device may launch a package manager or application manager, such as the Google Play Store, to allow a user of the user device to identify and download the specified application. In step 525, the application specified in the emitted digital tag may be downloaded and / or installed by the user device, allowing the device to automatically install the specified application if the application is not present on the device.

[0058] 6 illustrates an embodiment of the present invention, method 600. The method may begin in step 605, where an applet is stored on a first device (e.g., first device 100), where the applet is configured to generate a collection of digital tags. These tags may be pre-generated, in which case the applet may optionally not be used to generate the digital tags (i.e., the digital tags may be stored in the memory of the first device without the need for creation by the applet). In some examples, the collection of digital tags may include additional information, such as user account information and / or user identification information, and the collection of digital tags may further include one or more parameters, such as an association parameter, a time parameter, and an interference parameter.

[0059] In step 610, a signal is emitted from the first device in the form of a near field communication field. This may be emitted in response to an external trigger, such as an electric field, or the first device 100 may be in a state where it is constantly emitting signals. In step 615, the first device 100 may receive a request for information. This may take the form, for example, of an NFC device within the first device 100 being activated in the presence of an external field or device. This may also occur if the first device communication field (e.g., first device communication field 104) overlaps with other communication fields.

[0060] In step 620, the first device 100 can issue a digital tag, where the tag is configured to be in the NDEF data format specification and is further configured to be an Android Application Record (AAR) tag. In this step, the first device 100 can transmit additional information along with the digital tag. Examples of the additional information transmitted along with the digital tag include user information or credit card information, and parameters such as association parameters, time parameters, and interference parameters. In step 625, the issued tag can be configured to be associated with at least one of (i) an application or (ii) an input on the second device such that receipt of the tag launches the application on the second device.

[0061] 7 shows a block diagram of an exemplary embodiment of a system 700 according to the present disclosure that can be used to perform the procedures described below. For example, the exemplary procedures according to the present disclosure described herein can be performed by a processing arrangement and / or computing device (e.g., computer hardware device) 705. Such a processing / computing device 705 may be, or include, for example, but is not limited to, all or part of a computer / processor 710, which may include, for example, one or more microprocessors, and may use instructions stored on a computer-accessible medium (e.g., RAM, ROM, hard drive, or other storage device).

[0062] 7, for example, computer-accessible medium 715 (e.g., a storage device such as a hard disk, floppy disk, memory stick, CD-ROM, RAM, ROM, etc., or a collection thereof) can be provided (e.g., in communication with processing unit 705). Computer-accessible medium 715 can include executable instructions 220. Additionally or alternatively, storage device 725 can be provided separate from computer-accessible medium 715, which can provide instructions for configuring processing unit 705 to perform certain example procedures, processes, and methods, such as those described herein above.

[0063] Additionally, the exemplary processing device 705 may comprise or include input / output ports 735, which may include, for example, a wired network, a wireless network, the Internet, an intranet, data collection probes, sensors, etc. As shown in Figure 7, the exemplary processing device 705 may be in communication with an exemplary display device 730, which, according to certain exemplary embodiments of the present disclosure, may be, for example, a touchscreen configured for inputting information into the processing device in addition to outputting information from the processing device. Additionally, the exemplary display device 730 and / or storage device 725 may be used to display and / or store data in a user-accessible and / or user-readable format.

[0064] Throughout this specification and the claims, the following terms shall take on at least the meaning expressly associated therewith herein, unless the context clearly dictates otherwise. The term "or" is intended to mean an inclusive "or." Furthermore, the terms "a," "an," and "the" are intended to mean one or more unless otherwise specified or unless the context clearly directs to the singular form.

[0065] Numerous specific details are described herein. However, it will be understood that implementations of the disclosed technology may be practiced without these specific details. In other instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure an understanding of this specification. References to "some examples," "other examples," "one example," "examples," "various examples," "one embodiment," "embodiments," "some embodiments," "exemplary embodiments," "various embodiments," "one implementation," "implementation," "exemplary implementation," "various implementations," "some implementations," etc., indicate that implementations of the technology so described and disclosed may include particular features, structures, or characteristics, but not all implementations necessarily include the particular features, structures, or characteristics. Furthermore, repeated use of the phrases "in one example," "in one embodiment," or "in one implementation" does not necessarily refer to the same example, embodiment, or implementation, although they may do so.

[0066] As used herein, unless otherwise specified, the use of ordinal adjectives "first," "second," "third," etc. to describe a common object merely indicates that different instances of a similar object are being referred to and is not intended to imply that the objects so described must be in a predetermined order, temporally, spatially, sequentially, or in any other way.

[0067] While particular embodiments of the disclosed technology have been described in connection with what are presently considered to be the most practical and versatile embodiments, it is to be understood that the disclosed technology is not to be limited to the disclosed embodiments, but on the contrary, it is intended to cover various modifications and equivalent arrangements included within the scope of the appended claims. Although specific terms are employed herein, they are used in a generic and descriptive sense only and not for purposes of limitation.

[0068] This description uses examples to disclose particular implementations of the disclosed technology, including the best mode, and to enable any person skilled in the art to practice particular implementations of the disclosed technology, including making and using any device or system, and performing any incorporated methods. The patentable scope of particular implementations of the disclosed technology is defined in the claims, and may include other examples that occur to those skilled in the art. Such other examples are intended to be within the scope of the claims if they have structural elements that do not differ from the literal language of the claims, or if they include equivalent structural elements that do not differ substantially from the literal language of the claims.

Claims

1. storing an applet configured to generate a digital tag on a smart card; receiving, at said smart card, a request for the requested information after entering a communication field generated by the smartphone; associating the digital tag with at least one of (i) an application or (ii) an input on the smartphone such that receipt of the digital tag by the smartphone launches an application on the smartphone upon successful completion of a security review; and issuing the digital tag from the smart card, wherein the digital tag is configured to restrict the requested information to be accessible only by the application to prevent unauthorized access to the requested information; prompting the security review of the application prior to the launch via the digital tag; and Preventing the launch of the application when the security review is not successfully completed. A method comprising:

2. the application is configured to prevent other applications on the smartphone from accessing the requested information. The method of claim 1.

3. The smart card is a contactless credit card. The method of claim 1.

4. the smart card emits a near field communication field; The method of claim 1.

5. the smartphone includes an Android-based operating system; The method of claim 1.

6. the applet is configured to generate at least one digital tag according to the NFC Data Exchange Format (NDEF) specification; The method of claim 5.

7. and wherein the at least one digital tag according to the NDEF specification is further configured to be an Android Application Record (AAR) activation tag. The method of claim 6.

8. a contactless smart card; a user device application; The user device application automatically requesting the required information from the contactless smart card after the contactless smart card enters a communication field generated by a user device; receiving a digital tag from said contactless smart card, wherein: the digital tag is configured to launch an application associated with the digital tag upon successful completion of a security review; and the digital tag is configured to restrict the requested information to be accessible only by the application to prevent unauthorized access to the requested information; performing the security review of the application associated with the digital tag prior to the launch of the application; and configured to prevent the application associated with the digital tag from launching if the security review is not successfully completed. system.

9. the digital tag is configured to launch the application associated with the digital tag when the user device is inactive; The system of claim 8.

10. the digital tag is configured to launch the application associated with the digital tag when the display of the user device is inactive; The system of claim 8.

11. The application associated with the digital tag is further configured to launch when the user device has not received user input for a predetermined period of time. The system of claim 10.

12. the user device is configured to include an Android-based operating system; The system of claim 10.

13. the user device is configured to launch the application associated with the digital tag in response to an NFC Data Exchange Format (NDEF) tag or an Android Application Record (AAR) launch tag; The system of claim 11.

14. The system of claim 13 , wherein the user device is further configured to launch an application manager in response to the NDEF tag if the application associated with the digital tag is not present on the system.

15. The application manager is a Google Play Store. The system of claim 14.

16. the user device is further configured to download and install the application associated with the digital tag from the Google Play Store; The system of claim 14.

17. a processor; a communication interface; a non-transitory computer-accessible medium having computer-executable instructions stored thereon, the instructions being configured, when executed by the processor, to perform procedures including: receiving a request for information via the communication interface after entering a near field communication (NFC) communication field generated by the smartphone; and issuing an NFC Data Exchange Format (NDEF) tag; The NDEF tag is configured to be an Android Application Record (AAR) tag; The NDEF tag is configured to be associated with an applet stored on the contactless card, and the NDEF tag is configured to be associated with an application on the smartphone; The NDEF tag is configured to launch the application associated with the NDEF tag upon receipt by the smartphone and successful completion of a security review. Contactless card.

18. the failure to successfully complete the security review includes the detection of a software virus; The method of claim 1.

19. the failure of the security review to complete successfully includes the detection of a function that breaks a security rule; The system of claim 8.

20. Successful completion of the security review includes the detection of no software viruses and no detection of features that break through security rules.

18. The contactless card of claim 17.

Images