WIDGET FRAMEWORK FOR SECURING ACCOUNT INFORMATION FOR A PLURALITY OF ACCOUNTS IN A WALLET
A platform for performing secure personalized transactions in a multi-domain ecosystem includes a personalization tier that enables service provider personalization for one or more ecosystem elements stored on a mobile device. Further, the platform includes an enabling tier for facilitating interoperation between the personalization tier and a client device. The platform further includes a service tier that may be operating independently of the enabling tier and may enable service delivery for a plurality of services.
1 - 181 . (canceled)
182 . An apparatus, comprising:
a plurality of widget applets accessible in a memory of a mobile device;
an electronic wallet configured to execute on the mobile device;
a plurality of accounts accessible through the electronic wallet; and
a wallet container operating on the mobile device, the wallet container configured to provide access to the plurality of accounts in a secure manner by interpreting widget applets in a runtime environment and limiting access by the widget applets to accounts in the electronic wallet to which the widget applets are authorized for access.
183 . The apparatus of claim 182 wherein the widget applets are stored in a secure area of the mobile device.
184 . The apparatus of claim 182 wherein at least one of the plurality of widgets comprises a service provider-specific widget and wherein the wallet container provides the at least one service provider-specific widget exclusive access to a workflow of the specific service provider.
185 . The apparatus of claim 182 wherein the wallet container operates in cooperation with an enabling tier of a mobile transaction platform for securing personalized transactions between the electronic wallet and the specific service provider.
186 . The apparatus of claim 182 wherein the wallet container prevents the service provider-specific widget from accessing at least one of a workflow and an electronic wallet account of a different service provider.
187 . The apparatus of claim 182 wherein the wallet container facilitates access to at least one of the plurality of accounts during an active state of the wallet and prevents access to the at least one account during an inactive state of the wallet.
188 . A method comprising:
operating a wallet container on a mobile device as a runtime environment;
interpreting a content of a widget applet in the runtime environment;
determining at least one account in an electronic wallet of the mobile device that the widget applet is authorized to access; and
limiting access by the widget applet to the determined at least one account in the mobile device electronic wallet.
189 . The method of claim 188 wherein determining at least one account is based on account information derived when the widget applet is interpreted.
190 . The method of claim 188 wherein interpreting includes verifying widget integrity prior to interpreting content of the widget.
191 . The method of claim 190 wherein verifying widget integrity includes comparing a hash stored in association with the widget with a hash of the widget content that is computed when the widget content is accessed by the wallet container.
192 . The method of claim 190 wherein verifying widget integrity is performed by a widget manager function of the runtime environment.
193 . The method of claim 190 wherein limiting access by the widget is performed by the wallet container.
194 . The method of claim 193 wherein limiting access by the widget is further based on a wallet container trigger.
195 . The method of claim 194 wherein the wallet container trigger is based on a balance associated with an electronic wallet account that the widget is authorized to access.
196 . An apparatus comprising:
a wallet container that, when executed on a mobile device produces a runtime environment that is configured to interpret widgets;
an electronic wallet that facilitates security of a plurality of user accounts accessible through the electronic wallet;
a plurality of service provider-specific accounts associated with the electronic wallet; and
a plurality of service provider-specific widgets stored on the mobile device, wherein the runtime environment ensures that a widget of a specific service provider can only access accounts of the specific service provider.
197 . The method of claim 196 wherein at least one of the plurality of service provider-specific widgets are stored in a secure area of the mobile device.
198 . The method of claim 196 wherein the wallet container provides a service provider-specific widget exclusive access to a workflow of the specific service provider.
199 . The method of claim 198 wherein the wallet container operates in cooperation with an enabling tier of a mobile transaction platform to secure personalized transactions between the electronic wallet and the specific service provider.
200 . The method of claim 198 wherein the wallet container prevents the service provider-specific widget from accessing at least one of a workflow and an electronic wallet account of a different service provider.
201 . The method of claim 196 wherein the wallet container facilitates access to at least one account associated with the electronic wallet during an active state of the wallet and prevents access to the account during an inactive state of the wallet.