Secure element having multiple CRS applets
Techniques are disclosed relating to secure data storage. In various embodiments, a mobile device includes a wireless interface, a secure element, and a secure circuit. The secure element is configured to store confidential information associated with a plurality of users and to receive a request to communicate the confidential information associated with a particular one of the plurality of users. The secure element is further configured to communicate, via the wireless interface, the confidential information associated with the particular user in response to an authentication of the particular user. The secure circuit is configured to perform the authentication of the particular user. In some embodiments, the mobile device also includes a biosensor configured to collect biometric information from a user of the mobile device. In such an embodiment, the secure circuit is configured to store biometric information collected from the plurality of users by the biosensor.
1 . A mobile device, comprising:
a contactless interface;
a secure element associated with the contactless interface,
wherein the secure element is configured to:
store a first contactless registry service (CRS) applet and a first applet within the secure element, wherein the first CRS applet is executable by the secure element to restrict communication of a first confidential information associated with the first applet via the contactless interface, wherein the first applet stores the first confidential information; and
store a second CRS applet and a second applet within the secure element, wherein the second CRS applet is executable by the secure element to restrict communication of a second confidential information associated with the second applet via the contactless interface, wherein the second applet stores the second confidential information;
wherein the mobile device further comprises:
a processor; and
a memory having program instructions stored therein that, when executed by the processor, cause the processor to:
receive a first request from a user to use the first applet;
in response to receiving the first request, select the first CRS applet, wherein selecting the first CRS applet further comprises instructing the secure element to execute the selected first CRS applet to cause communication of the first confidential information associated with the selected first CRS applet;
wherein the secure element is further configured to:
execute the first CRS applet;
execute the first applet; and
communicate the first confidential information stored in the first applet to an external system via the contactless interface for the first request.
2 . The mobile device of claim 1 , wherein receiving the first request further comprises:
receiving an indication of the user of the mobile device; and
based on the indication, selecting the first CRS applet.
3 . The mobile device of claim 1 , wherein the program instructions that, when executed by the processor, further cause the processor to:
in response to the first request, cause performance of an authentication of the user of the mobile device.
4 . The mobile device of claim 3 , further comprising:
a secure circuit coupled to the secure element,
wherein the secure circuit is configured to:
perform the authentication of the user of the mobile device; and
based on the authentication, determine whether to authorize execution of the selected first CRS applet.
5 . The mobile device of claim 3 , further comprising:
a secure circuit coupled to the secure element, wherein the secure circuit is configured to:
perform the authentication of the user of the mobile device; and
communicate a result with the executed first CRS applet.
6 . The mobile device of claim 5 , wherein the secure circuit is further configured to:
communicate securely with the executed first CRS applet using a cryptographic key.
7 . The mobile device of claim 3 , further comprising:
a biosensor configured to collect biometric information from the user of the mobile device to perform the authentication.
8 . The mobile device of claim 1 , wherein the program instructions that, when executed by the processor, further cause the processor to:
receive the first request from an interface application that presents a user interface to the user of the mobile device.
9 . The mobile device of claim 1 , wherein the first CRS applet is executable by the secure element to:
maintain a list of identifiers of applets associated with the first CRS applet.
10 . The mobile device of claim 1 , wherein the contactless interface is a near field communication interface.
11 . A non-transitory computer readable medium storing program instructions that, when executed by one or more processors of a device, cause the one or more processors to perform operations comprising:
storing, within a secure element of the device, a first contactless registry service (CRS) applet and a first applet, wherein the first CRS applet is executable by the secure element to restrict communication of a first confidential information associated with the first applet via a contactless interface of the device, wherein the first applet stores the first confidential information;
storing, within the secure element, a second CRS applet and a second applet, wherein the second CRS applet is executable by the secure element to restrict communication of second confidential information associated with the second applet via the contactless interface, wherein the second applet stores the second confidential information;
receiving a first request from a user to use the first applet;
in response to receiving the first request, selecting the first CRS applet, wherein selecting the first applet comprises instructing the secure element to execute the selected first CRS applet to cause communication of the first confidential information associated with the selected first CRS applet;
executing, via the secure element, the first CRS applet;
executing, via the secure element, the first applet; and
communicating, via the contactless interface, the first confidential information stored in the first applet to an external system via the contactless interface for the first request.
12 . The non-transitory computer readable medium of claim 11 , wherein the program instructions that, when executed by the one or more processors, further cause the one or more processors to perform additional operations comprising:
causing, via the executed first CRS applet, a verification that the user of the device has been authenticated.
13 . The non-transitory computer readable medium of claim 12 , the program instructions that, when executed by the one or more processors, further cause the one or more processors to perform additional operations comprising:
establishing, via the executed first CRS applet, a secure connection with a secure circuit configured to authenticate the user.
14 . The non-transitory computer readable medium of claim 11 , the program instructions that, when executed by the one or more processors, further cause the one or more processors to perform additional operations comprising:
storing, via the selected first CRS applet, a list of applets associated with authorized to communicate confidential information via the contactless interface.
15 . The non-transitory computer readable medium of claim 11 , the program instructions that, when executed by the one or more processors, further cause the one or more processors to perform additional operations comprising:
receiving the first request from an interface application that receives a menu selection from the user of the device.
16 . A method, comprising:
storing, by a mobile device and within a secure element of the mobile device, a first applet and a first contactless registry service (CRS) applet, wherein the first CRS applet is executable by the secure element to restrict communication of a first confidential information associated with the first applet via a contactless interface of the device, wherein the first applet stores the first confidential information;
storing, by the mobile device and within the secure element, a second applet and a second CRS applet, wherein the second CRS applet is executable by the secure element to restrict communication of second confidential information associated with the second applet via the contactless interface, wherein the second applet stores the second confidential information;
receiving, by the mobile device, a first request from a user to use the first applet;
in response to the first request, selecting, by the mobile device, the first CRS applet, wherein the selecting comprises instructing, by the mobile device, the secure element to execute the selected first CRS applet to cause communication of first confidential information of the first applet associated with the selected first CRS applet;
executing, by the mobile device via the secure element, the first CRS applet;
executing, by the mobile device via the secure element, the first applet; and
communicating, via a contactless interface of the mobile device, the first confidential information stored in the first applet to an external system via the contactless interface for the first request.
17 . The method of claim 16 , further comprising:
prior to communicating of the first confidential information of the first applet via the contactless interface, performing, by the mobile device, an authentication of the user of the mobile device.
18 . The method of claim 17 , wherein the performing the authentication comprises using a biosensor that collects biometric information from the user of the mobile device.
19 . The method of claim 18 , wherein the performing the authentication further comprises comparing, by the mobile device via a secure circuit of the mobile device, the collected biometric information with biometric information of an authorized user.
20 . The method of claim 18 , wherein the biosensor includes an infrared (IR) emitter and an IR camera configured to capture images of a biometric.