SECURE NFC TOKEN SUPPORTING ESCALATING AUTHENTICATION OF NFC EXCHANGES
A secure NFC Smart Card supporting the enablement of escalating authentication is described. The system includes a secure NFC Smart Card comprising two coupled applications. The first application emulates a standard NFC tag returning NDEF messages with the addition of a specific NDEF message including a unique Smart Card identifier and a unique signed token that varies per tap. This unique signed token, when verified, identifies a specific Smart Card and a specific tap. The second application provides a challenge (Profile)/response (signed Token) interaction. This interaction allows a device to present a challenge (Profile) to the second application which will verify the challenge (Profile) and sign a response (signed Token). This signed Token, when verified, identifies a tap occurring with a specific device (provided by the challenge) at a specific Smart Card.
1 . A system for secure NFC Smart Cards supporting escalating authentication, said system comprising:
a first application, said first application configured to emulate a standard NFC tag returning an NDEF message with the addition of a specific NDEF message comprising:
a unique Smart Card identifier; and
a unique signed token that varies per tap, said unique signed token, when verified, identifies a specific NFC Smart Card and a specific tap; and
a second application, the second application configured to provide a challenge and a response interaction, said interaction comprising:
a receiver to receive a challenge at said second application;
a verifier configured to verify said challenge; and
a generator to generate a signed response token, said signed response token, when verified, identifies a specific tap occurring with a specific device at a specific NFC Smart Card:
a transmitter to transmit said signed response token.
2 . An authentication escalator comprising:
a first application comprising a level two security authenticator, said level two security authenticator for providing a challenge and a response interaction with a device application that resides on a device remote from said first application, said first application comprising:
a receiver for receiving a profile at said first application, wherein said profile is associated with said device that is already verified using a type 4 tag application by a level one security authenticator, wherein said level one security authenticator resides at a second application that is distinct from said first application;
a profile verifier for verifying said profile;
a signed response token generator for generating a signed response token based on said verifying of said profile, wherein said signed response token identifies a specific tap occurring with a specific device at a specific NFC Smart Card; and
a transmitter for transmitting said signed response token to said device application.