NFC transaction
View Patent ↗The present description concerns a method of implementation of an NFC transaction between a mobile terminal and a distant module. The terminal includes a processor hosting an application establishing the NFC transaction, a near-field communication module, and a secure element distinct from the processor. The method includes at least the following successive steps: (a) the near-field communication module ciphers first data sent by the distant module by using a first key supplied by the secure element and (b) the first application deciphers the first data by using a second key supplied by the secure elements.
1. A method, comprising:
implementing a near field communication (NFC) transaction between a mobile terminal and a distant module, wherein the mobile terminal comprises a processor, an NFC circuit, and a secure element distinct from the processor, the processor hosting an application establishing the NFC transaction;
ciphering first data transmitted by the distant module using a first key supplied by the secure element; and
deciphering the first data using a second key supplied by the secure element; and
denying access to the second key from the application by the secure element during the deciphering in response to the application not being authorized to implement the NFC transaction, the denial of access to the application preventing the application from successfully deciphering the first data.
2. The method of claim 1 , wherein the application is authorized to implement the NFC transaction using an interface software hosted by the processor for executing instructions sent by the application.
3. The method of claim 2 , further comprising prohibiting, using the interface software, a request, from the application, for a key from the secure element during the deciphering in response to the interface software including no authorization with regards to the application.
4. The method of claim 1 , wherein the application is a system application.
5. The method of claim 1 , wherein the application is a reliable application, the method further comprising receiving, by the application, a permanent authorization to implement the NFC transaction.
6. The method of claim 1 , further comprising receiving, by the application, a temporary authorization to implement the NFC transaction.
7. The method of claim 6 , further comprising transmitting, by the secure element, the temporary authorization.
8. The method of claim 6 , further comprising receiving, by the secure element, the temporary authorization from an external server.
9. The method of claim 1 , wherein the application is a first application, and wherein the secure element comprises a list of rules indicating a first authorization concerning the first application and a second authorization concerning a second application.
10. The method of claim 1 , wherein the first key is identical to the second key.
11. The method of claim 1 , wherein the NFC transaction is a transaction to exchange critical data between the mobile terminal and the distant module.
12. The method of claim 1 , wherein the NFC transaction is a bank transaction.
13. The method of claim 1 , further comprising detecting, by the NFC circuit, whether the first data includes critical data before ciphering.
14. A mobile terminal, comprising:
a secure element configured to supply a first key and a second key;
a processor configured to host an application used to establish a near field communication (NFC) transaction, the NFC transaction being a transaction between the mobile terminal and a distant module; and
an NFC circuit configured to cipher first data transmitted by the distant module using the first key, wherein the first data is deciphered by the application using the second key,
wherein the application is authorized to implement the NFC transaction using an interface software hosted by the processor for executing instructions sent by the application, and
wherein the secure element is further configured to deny access from the application to the second key during the deciphering in response to the application not being authorized to implement the NFC transaction, the denial of access to the application preventing the application from successfully deciphering the first data.
15. The mobile terminal of claim 14 , wherein the application is configured to receive a temporary authorization from the secure element to implement the NFC transaction.
16. The mobile terminal of claim 15 , wherein the temporary authorization is received by the secure element from an external server.
17. A system, comprising:
a distant module configured to transmit first data; and
a mobile terminal, comprising:
a secure element configured to supply a first key and a second key;
a processor configured to host an application used to establish a near field communication (NFC) transaction, the NFC transaction being a transaction between the mobile terminal and the distant module; and
an NFC circuit configured to cipher the first data using the first key, wherein the first data is deciphered by the application using the second key,
wherein the secure element is further configured to deny access from the application to the second key during the deciphering in response to the application not being authorized to implement the NFC transaction, the denial of access to the application preventing the application from successfully deciphering the first data.
18. The system of claim 17 , wherein the application is authorized to implement the NFC transaction using an interface software hosted by the processor for executing instructions sent by the application.
19. The system of claim 18 , wherein the application is configured to receive a temporary authorization from the secure element to implement the NFC transaction.
20. The system of claim 19 , wherein the temporary authorization is received by the secure element from an external server.