Secure Element Payment Access via Application Layer Gatekeeper
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing portable electronic devices face challenges in securely managing payment information, as telecommunications providers and financial institutions want to restrict access to sensitive data during Near Field Communication (NFC) transactions, while allowing authorized third-party applications to make payments without exposing all device information.
Innovation Solution
A method and system where a third-party application on a portable electronic device is installed and associated with a selected payment option, with an application layer acting as a gatekeeper to compare the application's category to use restrictions defined by the issuer, ensuring only authorized transactions occur, and integrating the application with a secure element for NFC payments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If all device information is made accessible through NFC, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments device information into two categories: public information accessible through NFC and private information protected in a secure element. This segmentation allows easy access to necessary payment information while protecting sensitive data, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent introduces an application layer as an intermediary between NFC communication and the secure element. This intermediary manages access control, comparing application categories against use restrictions before allowing access to protected payment information, thus maintaining both ease of operation and security.
2Reliability
If a secure element is introduced to protect payment information, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent divides device memory into distinct partitions: user memory for applications and a separate secure element for protected payment information. This segmentation provides security while maintaining manageable system architecture through clear separation of concerns.
Solution Approach 2:
The application layer serves as an intermediary that simplifies access to the secure element by handling authentication and access control automatically. This intermediary manages the complexity of secure element integration, allowing applications to access protected information without directly dealing with security protocols.
3Reliability
If access control is implemented through application layer comparison, then security is improved, but processing time is worsened
Solution Approach 1:
The patent performs preliminary actions by pre-comparing application categories against use restrictions during application installation or configuration. This preliminary validation stores access permissions in advance, so that during actual NFC transactions, the access control decision can be made quickly without repeated comparisons, reducing processing time while maintaining security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution securely manages payment information by isolating the secure element and NFC transceiver from unauthorized access, allowing authorized third-party applications to make payments while preventing fraudulent transactions, thus ensuring secure and restricted access to payment options.
Implementation Method 1
Near Field Communication (NFC) where radio communication may be established between portable electronic devices by putting the devices in contact or in close proximity
Data Source
AI summary
Methods and systems for storing a plurality of payment options on a secure element in a portable electronic device and associating at least one payment option with a third party application to make a payment transaction.