Abstract
The present disclosure discloses a proximity-based secure communication system and method for digital transactions. The system comprises: a slave terminal with a near field communication (NFC) radio frequency communication channel, wherein the slave terminal remains in the listening mode in the NFC radio frequency communication channel; and a master electronic device with an NFC radio frequency communication channel. The slave terminal is configured to send an Answer-to-Reset (ATR) to the master electronic device when, by proximity, the slave terminal detects the activation of the NFC radio frequency channel. The slave terminal and the master electronic device exchange Application Protocol Data Unit (APDU) commands that represent a digital transaction by means of the NFC radio frequency channel, such that the master electronic device sends request APDU commands to the slave terminal, and the master electronic device receives reply APDU commands from the slave terminal.
Claims
1. A proximity-based secure communication system for digital transactions, wherein the system comprises: a slave terminal comprising a first near field communication (NFC) radio frequency communication channel, wherein the slave terminal is configured to remain in a listening mode in the first NFC radio frequency communication channel; a master electronic device comprising a second NFC radio frequency communication channel, wherein the second NFC radio frequency communication channel is configured to be activated by the master electronic device itself; wherein the slave terminal is further configured to send an Answer-To-Reset (ATR) to the master electronic device when, by proximity, the slave terminal detects the activation of the second NFC radio frequency channel comprised in the master electronic device; and wherein the slave terminal and the master electronic device are further configured to exchange Application Protocol Data Unit (APDU) commands that represent a digital transaction by means of the second NFC radio frequency channel, such that the master electronic device sends request APDU commands to the slave terminal, and the master electronic device receives reply APDU commands from the slave terminal.
2. The proximity-based secure communication system for digital transactions according to claim 1, wherein the system comprises an external digital transaction server connectable to the slave terminal, wherein the external digital transaction server provides data associated with the digital transaction.
3. A proximity-based secure communication method for digital transactions comprising: selecting a digital transaction means in a master electronic device; activating a listening mode in a first near field communication (NFC) radio frequency channel comprised in the slave terminal; activating a second NFC radio frequency channel comprised in the master electronic device; sending an Answer-to-Reset (ATR) from the slave terminal to the master electronic device when, by proximity, the slave terminal detects an activation of the second NFC radio frequency channel comprised in the master electronic device; exchanging Application Protocol Data Unit (APDU) commands that represent a digital transaction by means of the second NFC radio frequency channel, wherein the master electronic device sends request APDU commands to the slave terminal, and the master electronic device receives reply APDU commands from the slave terminal.
4. The proximity-based secure communication method for digital transactions according to claim 3, wherein the digital transaction is a financial transaction and wherein the method, after selecting the digital transaction means in the master electronic device, further comprises receiving, in a slave charge terminal, data that represents the financial transaction with at least one piece of data referring to an economic amount.
5. The proximity-based secure communication method for digital transactions according to claim 4, wherein the method further comprises identifying, in the master electronic device, a user by means of an option selected from an alphanumerical code, a numerical code, and a biometric.
6. The proximity-based secure communication method for digital transactions according to claim 4, wherein the digital transaction means comprises a payment means, and wherein the step of exchanging APDU commands comprises: a) sending APDU commands that represent the payment means available in the master electronic device; b) receiving APDU commands that represent the payment means selected by the slave terminal; c) sending APDU commands confirming the payment means selected by the slave terminal; d) receiving APDU commands that represent an acknowledgment of receipt of the payment means selected by the slave terminal; e) sending APDU commands requesting the economic amount comprised in the financial transaction; f) receiving APDU commands that represent the economic amount comprised in the financial transaction; g) sending APDU commands requesting if the slave terminal needs to verify the financial transaction by means of a PIN code; h) receiving APDU commands that represent if the slave terminal needs to verify the financial transaction by means of the PIN code; if it does, go to the following step; otherwise, skip to step “k”; i) sending APDU commands requesting the PIN code; j) receiving APDU commands that represent an encrypted PIN code; k) sending APDU commands requesting if the slave terminal has received a confirmation of an executed financial transaction from an external digital transaction server; l) receiving APDU commands confirming that the financial transaction has been executed; m) sending APDU commands requesting acknowledgment of a receipt of the financial transaction; n) receiving APDU commands that represent the acknowledgment of the receipt of the financial transaction.
7. The proximity-based secure communication method for digital transactions according to claim 6, wherein the step of exchanging APDU commands further comprises: o) receiving APDU commands that represent a receipt of purchase and guarantee for a plurality of products and/or services sent to a purchase application associated with the payment means; and p) sending APDU commands confirming reception of the receipt of purchase and guarantee for the plurality of products and/or services sent to the purchase application.
8. The proximity-based secure communication method for digital transactions according to claim 3, wherein the digital transaction is a travel document transaction and wherein the digital transaction means is a travel document; and wherein the step of exchanging APDU commands comprises: a) sending APDU commands that represent the travel document available in the master electronic device; b) receiving APDU commands that represent the cancellation of the travel document; c) sending APDU commands confirming that the travel document has been cancelled; d) receiving APDU commands that represent the acknowledgment of receipt that the digital transaction has been suitably completed and the travel document correctly cancelled and debited.
9. The proximity-based secure communication method for digital transactions according to claim 3, wherein the digital transaction is an access transaction for physical accesses and wherein the digital transaction means is a digital access key; and wherein the step of exchanging APDU commands comprises: a) sending APDU commands that represent the digital access key which enables a user to get past a physical access control; and b) receiving APDU commands that represent the confirmation and refusal of access.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
[0051] FIG. 1. Proximity-based secure communication system for digital transactions according to the present disclosure.
[0052] FIG. 2. Proximity-based communication method for digital transactions according to the state of the art.
[0053] FIG. 3. Proximity-based secure communication method for digital transactions according to the present disclosure applied to financial transactions.
[0054] FIG. 4. Proximity-based secure communication method for digital transactions according to the present disclosure applied to access control in transport facilities.
[0055] FIG. 5. Proximity-based secure communication method for digital transactions according to the present disclosure applied to access control in means of access.
DETAILED DESCRIPTION OF THE INVENTION
[0056] List of references: [0057] 1. proximity-based secure communication system for digital transactions according to the present disclosure. [0058] 2. slave terminal. [0059] 3. master electronic device. [0060] 4. external digital transaction server. [0061] 5. NFC radio frequency communication channel of the slave terminal 2. [0062] 6. NFC radio frequency communication channel of the master electronic device 3. [0063] 7. wireless communication channel - 3G, 4G, 5G. [0064] 8. master terminal from the state of the art. [0065] 9. slave electronic device (smartphone/chip card) from the state of the art. [0066] 10. proprietor of the digital transaction means and user of the electronic device 2,9. [0067] 11, 11′, 11″. digital transaction according to embodiments shown in FIGS. 3, 4 and 5. [0068] 12, 12′,12″. digital transaction means according to embodiments shown in FIGS. 3, 4 and 5. [0069] 13. activating NFC communication and emit radio signal in the state of the art. [0070] 14. open NFC communication and listen to radio signal in the state of the art. [0071] 15. biometric identification of the user. [0072] 16. listening mode in NFC communication channel of the slave terminal 2. [0073] 17. activation of NFC communication and emission of radio signal by the master electronic device 3. [0074] 18. approximation of the slave terminal 2 to the master electronic device 3 or approximation of the master terminal 8 to the slave electronic device 9. [0075] 19, 19′, 19″. ATR from the slave device terminal 2 to the master electronic device 3. [0076] 20 - 28. APDU commands that the master electronic device 3 sends to the slave terminal 2 in FIG. 3. [0077] 29. storage, in the master electronic device 3, of data associated with the products/services acquired by means of the master electronic device 3. [0078] 30 - 37. APDU commands that the master electronic device 3 receives from the slave terminal 2 in FIG. 3. [0079] 38 - 39. not used. [0080] 40. ATR from slave electronic device 9 from the state of the art to the master terminal 8 from the state of the art. [0081] 41 - 49. not used. [0082] 50 - 55. APDU commands that the master terminal 8 sends to the slave electronic device 9 in FIG. 2 (state of the art). [0083] 56 - 59. not used. [0084] 60 - 65. APDU commands that the master terminal 8 receives from the slave electronic device 9 in FIG. 2 (state of the art). [0085] 71 - 72. APDU commands that the master electronic device 3 sends to the slave terminal 2 (travel document validating device) in FIG. 4. [0086] 73. APDU commands that the master electronic device 3 sends to the slave terminal 2 in FIG. 5. [0087] 74 - 80. not used. [0088] 81 - 82. APDU commands that the master electronic device 3 receives from the slave terminal 2 (travel document validating device) in FIG. 4. [0089] 83. APDU commands that the master electronic device 3 receives from the slave terminal 2 in FIG. 5. [0090] 110.- digital transaction according to the state of the art. [0091] 111, 111′.- economic amount in a financial digital transaction.
[0092] FIG. 1 shows the proximity-based secure communication system for digital transactions according to the present disclosure. The system shown in FIG. 3 comprises the slave terminal 2 as part of a products/services provider and the master electronic device 3 as part of a user that uses a product/service of the products/services provider, between which a digital transaction takes place. Examples of digital transactions can be the charge/payment of an economic amount associated with a financial transaction, the validation of the physical access control or the validation of travel documents in public transport facilities. To carry out the digital transaction, the slave terminal 2 communicates with the master electronic device 3 by means of NFC communication “Near Field Communication” which is a wireless technology working on the 13.56 MHz band by means of exchanging APDU “Application Protocol Data Unit” commands, which is all regulated under ISO 7816. For carrying out NFC communication, the slave terminal 2 has the NFC radio frequency communication channel 5 and the master electronic device 3 has the NFC radio frequency communication channel 6. The slave terminal 2 can connect, by means of 3G, 4G or 5G wireless communication 7, with the external digital transaction server 4 for the server 4 to confirm to the slave terminal 2 if it is possible to carry out the digital transaction.
[0093] Unlike the state of the art wherein the “charge” terminal 8 is the “master” and the electronic “payment” device 9 is the “slave”, in the system 1 of the present disclosure, the “charge” terminal 2 is the “slave” and the electronic “payment” device 3 is the “master”. This change in paradigm entails significant changes on a functional level. For example, in the state of the art, the master terminal 8 activates NFC communication and emits the radio signal 13. In contrast, in the present disclosure, the slave terminal 2 activates the NFC radio frequency communication channel 5 and remains in the listening mode until receiving an NFC radio frequency signal from the master electronic device 3. Once the master electronic device 3 is close enough to the slave terminal 2, in the present disclosure, the slave terminal 2 sends an ATR to the master electronic device 3. In contrast, in the state of the art, the master terminal 8 receives the ATR from the slave electronic device 9. After sending the ATR from the slave terminal 2 to the master electronic device 3, APDU commands that represent the digital transaction (11, 11′, 11″) are exchanged by means of the NFC radio frequency channel. The exchange is carried out such that the master electronic device 3 sends the request APDU commands (APDU requests) to the slave terminal 2, and the master electronic device 3 receives the reply APDU commands (APDU replies) (for each request APDU command) from the slave terminal 2. That is, in the system 1 of the present disclosure, the master electronic device 3 always asks the slave terminal 2, and the slave terminal 2 answers the master electronic device 3 (see FIGS. 3, 4, 5). In contrast, in the state of the art, the master terminal 8 asks and the slave electronic device 9 answers (see FIG. 2).
[0094] FIGS. 3, 4 and 5 show diagrams depicting different embodiments of the proximity-based secure communication method for digital transactions of the present disclosure. However, and in order to adequately understanding the method of the present disclosure in its different embodiments, first it is necessary to explain an embodiment of the method according to the state of the art, which is shown in FIG. 2.
[0095] Therefore, FIG. 2 shows a proximity-based communication method for digital transactions according to the state of the art. An amount to be charged 111 is entered into the master terminal 8 corresponding to a digital transaction 110 consisting of a financial transaction, which is intended to be executed between the master terminal 8 and the slave electronic device 9. In the slave electronic device 9, the user selects the digital transaction means 12, i.e., the desired form of payment, for example a payment application or a URL of a payment entity. The master terminal 8 activates the NFC communication and emits the radio signal 13. Then, the slave electronic device 9 opens the NFC communication and remains in the listening mode 14 for any NFC radio signal that may be emitted by the master terminal 8. When the slave electronic device 9 listens to (=detects) an NFC radio signal coming from the master terminal 8 because they are both in proximity 18, the slave electronic device 9 enables the user of the slave electronic device 9 to be biometrically identified 15. Biometric identification can be replaced with an alphanumerical identification or the like. Once the user is authenticated 15, the slave electronic device 9 sends the ATR (Answer-To-Reset) 40 to the master terminal 8, and the exchange of APDU (“Application Protocol Data Unit”) commands which carry out the digital transaction (financial transaction in this exemplary embodiment) 110 starts, wherein the master terminal 8 sends APDU commands 50-55 (APDU requests) and the slave electronic device 9 answers with APDU commands 60-65 (APDU replies). The commands that the master terminal 8 sends 50-55 and receives 60-65 from the slave electronic device 9 shown in FIG. 2 are the following: [0096] a) sending 50 APDU commands asking about the different methods of payment available in the slave electronic device; [0097] b) receiving 60 APDU commands that represent the different methods of payment available in the slave terminal; [0098] c) sending 51 APDU commands confirming the method of payment selected by the master terminal; [0099] d) receiving 61 APDU commands that represent an acknowledgment of receipt of the method of payment selected by the master terminal; [0100] e) sending 52 APDU commands that represent the economic amount comprised in the financial transaction; [0101] f) receiving 62 APDU commands that represent confirmation of the economic amount comprised in the financial transaction and requests the verification PIN code; [0102] the PIN is requested from the proprietor of the payment means [0103] g) sending 53 APDU commands with the PIN code requested from the proprietor of the payment means; [0104] h) receiving 63 APDU commands that represent the PIN code; if the PIN is correct, it goes to the following step; otherwise, transaction is cancelled; [0105] i) sending 54 APDU commands confirming that the financial transaction has been correctly executed in an external digital transaction server; [0106] j) receiving 64 APDU commands acknowledging receipt that the financial transaction has been executed; [0107] k) sending 55 APDU commands acknowledging receipt of the financial transaction; [0108] l) receiving 65 APDU commands that represent the “END” of the financial transaction.
[0109] An embodiment for the proximity-based secure communication method for digital transactions of the present disclosure according to FIG. 3 is described in detail below. In the example shown in FIG. 3, the digital transaction is a “financial” transaction. The method of the present disclosure maintains the ISO 7816 standard, but the roles are reversed as explained above, with the terminal 2 now being the “slave” terminal and the electronic device 3 now being the “master” device. Therefore, in the master electronic device 3, the user selects the desired digital transaction means 12 (the form of payment in this embodiment), for example a payment application or a URL of a payment entity. An amount to be charged 111′ is entered into the slave terminal 2 corresponding to a digital transaction 11 consisting of a financial transaction, which is intended to be executed between the slave terminal 2 and the master electronic device 3. The master electronic device 3 identifies 15 the user of the master electronic device 3 itself by means of a biometric or any other personal identification code. The slave terminal 2 opens the NFC communication and remains in listening mode 16 for any NFC radio signal that may be emitted by any master electronic device 3. The master electronic device 3 activates 17 the NFC communication and emits the radio signal. When the master electronic device 3 listens to (=detects) an NFC radio signal coming from the slave terminal 2 because they are both in proximity 18, the slave terminal 2 sends the ATR (Answer-To-Reset) 19 to the master electronic device 3, and the exchange of APDU (“Application Protocol Data Unit”) commands which carry out the financial digital transaction 11 in this embodiment starts, wherein the master electronic device 3 sends APDU commands 20-26 (APDU requests) and the slave terminal 2 answers with APDU commands 30-36 (APDU replies). The APDU commands that the master electronic device 3 sends 20-26 and receives 30-36 from the slave terminal 2 shown in FIG. 3 are the following: [0110] a) sending 20 APDU commands that represent different methods of payment (type of payment application, debit or credit card) available in the master electronic device; [0111] b) receiving 30 APDU commands that represent the method of payment selected by the slave terminal; [0112] c) sending 21 APDU commands confirming the method of payment selected by the slave terminal; [0113] d) receiving 31 APDU commands that represent an acknowledgment of receipt of the method of payment selected by the slave terminal; [0114] e) sending 22 APDU commands requesting the economic amount comprised in the financial transaction; [0115] f) receiving 32 APDU commands that represent the economic amount comprised in the financial transaction; [0116] g) sending 23 APDU commands requesting if the slave terminal needs to verify the financial transaction by means of a PIN code; [0117] h) receiving 33 APDU commands that represent if the slave terminal needs to verify the financial transaction by means of a PIN code; if it does, it goes to the following step; otherwise, it skips to step “k”; [0118] the PIN is requested from the proprietor of the payment means [0119] i) sending 24 APDU commands requesting the PIN code; [0120] j) receiving 34 APDU commands that represent the encrypted PIN code; [0121] k) sending 25 APDU commands requesting if the slave terminal has received confirmation of executed financial transaction from an external digital transaction server; [0122] l) receiving 35 APDU commands confirming that the financial transaction has been executed; [0123] m) sending 26 APDU commands requesting acknowledgment of receipt of the financial transaction; [0124] n) receiving 36 APDU commands that represent the acknowledgment of receipt of the financial transaction.
[0125] Optionally, for the embodiment shown in FIG. 3, the method of the present disclosure can comprise more APDU commands (27,37) if it is necessary to “send information after the end of the transaction” 28. Therefore, the commands that the master electronic device 3 additionally sends and receives from the slave terminal 2 shown in FIG. 3 are the following: [0126] o) receiving 37 APDU commands that represent a receipt of purchase and guarantee for products/services sent to a purchase application associated with the payment means; and [0127] p) sending 27 APDU commands confirming reception of the receipt of purchase and guarantee for products/services sent to the purchase application.
[0128] As a consequence of the two preceding steps, the master electronic device 3 keeps 29 in the purchase application comprised therein the proof of purchase with the list of products/services purchased, together with their amount, guarantee and optionally a photograph of the acquired products.
[0129] FIG. 4 shows a proximity-based secure communication method for digital transactions according to the present disclosure applied to access control in transport facilities, preferably public transport facilities such as the bus, underground, train, etc. Therefore, in this case the “digital transactions” correspond to “travel document transactions” 11′ and the “digital transaction means” is the “travel document” itself, which the user of the transport facilities needs to carry with him or her in order to use the same. Similarly to the embodiment shown in FIG. 3, the method of the present disclosure maintains the ISO 7816 standard, reversing the roles with respect to the state of the art, with the terminal 2 now being the “slave” terminal and the electronic device 3 now being the “master” device. Therefore, in the master electronic device 3, the user selects the “travel document” 12′ to be used in order to use the transport. Optionally, the master electronic device 3 identifies 15 the user of the master electronic device 3 itself by means of a biometric or any other personal identification code. The slave terminal 2 opens the NFC communication and remains in listening mode 16 for any NFC radio signal that may be emitted by any master electronic device 3. The master electronic device 3 activates 17 the NFC communication and emits the radio signal. When the master electronic device 3 listens to (=detects) an NFC radio signal coming from the slave terminal 2 because they are both in proximity 18, the slave terminal 2 sends the ATR (Answer-To-Reset) 19′ to the master electronic device 3, and the exchange of APDU (“Application Protocol Data Unit”) commands which carry out the digital transaction starts, wherein the master electronic device 3 sends APDU commands 71-72 (APDU requests) and the slave terminal 2 answers with APDU commands 81-82 (APDU replies). There are APDU commands included in ATR 19′ whereby the master electronic device 3 knows that it is in specific transport facilities (bus, underground, train) in a specific location. The APDU commands that the master electronic device 3 sends 71-72 and receives 81-82 from the slave terminal 2 shown in FIG. 4 are the following: [0130] a) sending 71 APDU commands that represent the travel document available in the master electronic device; [0131] b) receiving 81 APDU commands that represent the cancellation of the travel document; [0132] c) sending 72 APDU commands confirming that the travel document has been cancelled; [0133] d) receiving 82 APDU commands that represent the acknowledgment of receipt that the digital transaction has been adequately completed and the travel document correctly cancelled/debited.
[0134] FIG. 5 shows a proximity-based secure communication method for digital transactions according to the present disclosure applied to access control in physical access means such as a door of a hotel room. Therefore, in this case the “digital transactions” correspond to “access transactions” 11″ and the “digital transaction means” is a “digital access key”, which the user of the access means needs to carry. Similarly to the embodiment shown in FIG. 3, the method of the present disclosure maintains the ISO 7816 standard, reversing the roles with respect to the state of the art, with the terminal 2 now being the “slave” terminal and the electronic device 3 now being the “master” device. Therefore, in the master electronic device 3, the user selects the “digital key” 12″ to be used in the physical access control. Optionally, the master electronic device 3 identifies 15 the user of the master electronic device 3 itself by means of a biometric or any other personal identification code. The slave terminal 2 opens the NFC communication and remains in listening mode 16 for any NFC radio signal that may be emitted by any master electronic device 3. The master electronic device 3 activates 17 the NFC communication and emits the radio signal. When the master electronic device 3 listens to (=detects) an NFC radio signal coming from the slave terminal 2 because they are both in proximity 18, the slave terminal 2 sends the ATR (Answer-To-Reset) 19″ to the master electronic device 3, and the exchange of APDU (“Application Protocol Data Unit”) commands which carry out the digital transaction starts, wherein the master electronic device 3 sends APDU commands 73 (APDU requests) and the slave terminal 2 answers with APDU commands 83 (APDU replies). There are APDU commands included in ATR 19″ whereby the master electronic device 3 knows that it is in front of a specific physical access control (door of a hotel, sports facility, etc.) of a specific facility. The APDU commands that the master electronic device 3 sends 73 and receives 83 from the slave terminal 2 shown in FIG. 5 are the following: [0135] a) sending 73 APDU commands that represent the digital access key which enables the user to get past the physical access control; [0136] b) receiving 83 APDU commands that represent the confirmation/refusal of access.
