Personal point of sale
Embodiments provided herein include techniques for enabling a mobile device to communicate with smart media in a manner that can sidestep the secure element of the mobile device—and the costs associated with it. The mobile device can communicate with the smart media using near-field communication (NFC) by creating an encrypted connection with a remote computer while bypassing a secure element of the mobile device. This allows the mobile device to provide point-of-sale (POS) functionality by reading and/or writing to the smart media, without compromising the security of the smart media. Embodiments may further enable the server to provide authentication information to a third party based on the communication between the smart media and the server.
1. A method for enabling an electronic device to communicate with a smart media, the method comprising:
receiving, with a server, information read from the smart media by the electronic device, the information including identifying information regarding the smart media;
establishing a secure communications link between the electronic device and the server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;
conducting a transaction between the server and the smart media via the secure communications link;
determining, with the server, a third party related to the transaction; and
in response to determining the third party related to the transaction, sending, from the server, authentication information to a device associated with the third party.
2. The method for enabling the electronic device to communicate with the smart media of claim 1 , further comprising communicating encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.
3. The method for enabling the electronic device to communicate with the smart media of claim 1 , wherein authentication information comprises an indication that the smart media is valid or active.
4. The method for enabling the electronic device to communicate with the smart media of claim 1 , wherein the authentication information comprises one or more of:
user identification information,
an indication of when the smart media was last used in a transit system,
an indication of where the smart media was last used in a transit system,
an indication of how the smart media was last used in a transit system,
a frequency of use of the smart media,
a type of transit product associated with the smart media or a corresponding user's account, or
a location of use of the smart media, or
any combination thereof.
5. The method for enabling the electronic device to communicate with the smart media of claim 1 , wherein the device associated with the third party is the electronic device.
6. The method for enabling the electronic device to communicate with the smart media of claim 1 , wherein determining, with the server, the third party related to the transaction is based on information provided by the electronic device.
7. A non-transitory computer-readable medium having instructions embedded thereon for enabling an electronic device to communicate with a smart media, the instructions including computer-executable code for:
receiving information read from the smart media by the electronic device, the information including identifying information regarding the smart media;
establishing a secure communications link between the electronic device and a server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;
conducting a transaction between the server and the smart media via the secure communications link;
determining a third party related to the transaction; and
in response to determining the third party related to the transaction, sending authentication information to a device associated with the third party.
8. The non-transitory computer-readable medium of claim 7 , wherein the instructions further comprise computer code for communicating encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.
9. The non-transitory computer-readable medium of claim 7 , wherein the instructions further comprise computer code for providing authentication information comprising an indication that the smart media is valid or active.
10. The non-transitory computer-readable medium of claim 7 , wherein the instructions further comprise computer code for providing authentication information comprising one or more of:
user identification information,
an indication of when the smart media was last used in a transit system,
an indication of where the smart media was last used in a transit system,
an indication of how the smart media was last used in a transit system,
a frequency of use of the smart media,
a type of transit product associated with the smart media or a corresponding user's account, or
a location of use of the smart media, or
any combination thereof.
11. The non-transitory computer-readable medium of claim 7 , wherein the instructions further comprise computer code for determining the third party related to the transaction based on information provided by the electronic device.
12. A server for enabling an electronic device to communicate with a smart media, the server comprising:
a communications interface; and
a processing unit communicatively coupled with the communications interface and configured to cause the server to:
receive, via the communications interface, information read from the smart media by the electronic device, the information including identifying information regarding the smart media;
establish, via the communications interface, a secure communications link between the electronic device and the server, wherein the establishing the secure communications link comprises encrypting data communicated via the secure communications link using an encryption key for the smart media such that a secure element of the electronic device is not used;
conduct a transaction between the server and the smart media via the secure communications link;
determine a third party related to the transaction; and
in response to determining the third party related to the transaction, send, via the communications interface, authentication information to a device associated with the third party.
13. The server for enabling the electronic device to communicate with the smart media of claim 12 , wherein the processing unit is further configured to cause the server to communicate encrypted data to the smart media via the secure communications link by writing the encrypted data such that a secure element of the electronic device is not used.
14. The server for enabling the electronic device to communicate with the smart media of claim 12 , wherein the processing unit is further configured to include, in the authentication information, an indication that the smart media is valid or active.
15. The server for enabling the electronic device to communicate with the smart media of claim 12 , wherein the processing unit is further configured to include, in the authentication information, one or more of:
user identification information,
an indication of when the smart media was last used in a transit system,
an indication of where the smart media was last used in a transit system,
an indication of how the smart media was last used in a transit system,
a frequency of use of the smart media,
a type of transit product associated with the smart media or a corresponding user's account, or
a location of use of the smart media, or
any combination thereof.
16. The server for enabling the electronic device to communicate with the smart media of claim 12 , wherein the processing unit is further configured to cause the server to base the determination of the third party related to the transaction on information provided by the electronic device.