NFC transaction
View Patent ↗In an embodiment a method for implementing a NFC transaction between a mobile terminal and a distant module is disclosed. The terminal includes a processor hosting an application configured to establish the NFC transaction, a near-field communication module, and a secure element distinct from the processor. The method includes storing, by the near-field communication module in the secure element, first data from the distant module, sending, by the near-field communication module, second data to the application notifying it that the first data have been stored in the secure element and requesting, by the application, the first data from the secure element.
1 . A method for implementing a NFC transaction between a mobile terminal and a distant module, the terminal comprising a processor hosting an application configured to establish the NFC transaction, a near-field communication module, and a secure element, wherein the processor, the near-field communication module and the secure element are all distinct from each other, the method comprising:
storing, by the near-field communication module in the secure element, first data received from the distant module;
sending, by the near-field communication module, second data to the application notifying it that the first data have been stored in the secure element; and
in response to receiving the second data, requesting, by the application, the first data from the secure element.
2 . The method according to claim 1 , further comprising authorizing, by an interface software, the application to implement the NFC transaction, the interface software being a software hosted by the processor and executing instructions sent by the application.
3 . The method according to claim 2 ,
wherein the application is a system application, or
wherein the application is a reliable application having received a permanent authorization to implement the NFC transaction, or
wherein the application has received a temporary authorization to implement the NFC transaction, wherein the secure element delivers the temporary authorization for the application to the interface software, the secure element having obtained this temporary authorization from an external server.
4 . The method according to claim 1 , wherein the second data are representative of the first data.
5 . The method according to claim 1 , wherein the second data are random data.
6 . The method according to claim 1 , further comprising, ciphering, by the secure element, the first data.
7 . The method according to claim 6 , wherein the first data are ciphered with an asymmetrical cipher algorithm.
8 . The method according to claim 1 , wherein the NFC transaction is a transaction during which the terminal and the distant module are likely to exchange secret data.
9 . The method according to claim 1 , further comprising, prior to storing, by the near-field communication module, the first data, detecting, by the near-field communication module, that the first data are critical data.
10 . A mobile terminal comprising:
a processor hosting an application configured to establish a NFC transaction with a distant module;
a near-field communication module; and
a secure element,
wherein the processor, the near-field communication module and the secure element are all distinct from each other,
wherein the near-field communication module is configured to:
store first data received from the distant module in the secure element, and
send second data to the application to notify it that the first data have been stored in the secure element, and
wherein the application is configured to, in response to receiving the second data, request the first data from the secure element.
11 . The terminal according to claim 10 , further comprising an interface software hosted by the processor and configured to execute instructions from the application, wherein the interface software is configured to authorize the application to implement the NFC transaction.
12 . The terminal according to claim 11 ,
wherein the application is a system application, or
wherein the application is a reliable application having received a permanent authorization to implement the NFC transaction, or
wherein the application has received a temporary authorization to implement the NFC transaction, wherein the secure element is configured to deliver the temporary authorization for the application to the interface software, the secure element having obtained this temporary authorization from an external server.
13 . The terminal according to claim 10 , wherein the second data are representative of the first data.
14 . The terminal according to claim 10 , wherein the second data are random data.
15 . The terminal according to claim 10 , wherein the secure element is configured to cipher the first data with an asymmetrical cipher algorithm.
16 . The terminal according to claim 10 , wherein the NFC transaction is a transaction during which the terminal and the distant module are likely to exchange secret data.
17 . The terminal according to claim 10 , wherein the near-field communication module is configured to detect that the first data are critical data prior to storing the first data.
18 . A method for implementing a NFC transaction between a mobile terminal and a distant module, the terminal comprising a processor hosting an application configured to establish the NFC transaction and an interface software, a near-field communication module, and a secure element, wherein the processor, the near-field communication module and the secure element are all distinct from each other, the method comprising:
storing, by the near-field communication module in the secure element, first data received from the distant module;
sending, by the near-field communication module, second data to the application notifying it that the first data have been stored in the secure element;
in response:
forbidding, by the interface software, the application to request a key from the secure element when the interface software does not have an authorization for the application; or
requesting, by the application, the first data from the secure element; and
refusing, by the secure element, to send the first data to the application when the interface software does not have the authorization for the application.