WO2016066253A1

WO2016066253A1 - Method for contactlessly carrying out a transaction

Info

Publication number: WO2016066253A1
Application number: PCT/EP2015/002096
Authority: WO
Inventors: Ullrich Martini; Frank Schäfer
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2014-10-27
Filing date: 2015-10-22
Publication date: 2016-05-06
Also published as: DE102014015847A1

Abstract

The invention relates to a method for contactlessly carrying out a transaction between a mobile terminal (100) and a terminal (300), in which the commands defining the transaction, in particular in the form of APDU commands, are embedded into data packets of a EAP-SIM or a EAP-AKA protocol and are tunneled between a transaction application (12) on a security element (10) of the mobile terminal (100), in particular a SIM/UICC mobile radio card, and the terminal (300) via a wireless network (S2.1-S2.9).

Description

Method for contactless performance

OF A TRANSACTION The present invention relates to a method for contactlessly performing a transaction between a mobile terminal and a terminal.

As a transaction, for example, a payment transaction or a transaction can be carried out, which provides access to a user of the terminal, for example, to a building or a room in a building. Also, tickets, tickets or the like can be purchased by means of such transactions. In the context of the present invention, the non-contact implementation of a transaction is understood to be the implementation of the transaction via a radio interface, for example NFC ("Near Field Communication"), via a radio network, for example a WLAN, or via a telecommunications network.

Increasingly, mobile terminals, such as smartphones or tablet computers, are provided with contactless interfaces for short-range communication, in particular NCF interfaces. Through such interfaces, transactions described above can be easily performed. In general, the NFC interface of the terminal for this purpose with a security element of the terminal, such as a SIM / UICC mobile card, coupled. The security element can then be For example, data and / or keys for authenticating and / or saving the transaction be stored. Also, a transaction application for securely performing the transaction by the terminal may be stored and executed on the security element of the terminal.

However, since a significant proportion of mobile terminals currently in use do not have a suitable short-range contactless interface, in particular via no NFC interface, it is the object of the present invention to propose a method which nevertheless, i. even in the absence of short-range contactless interface, a contactless performing such a transaction by means of a mobile terminal allowed.

This object is achieved by a method, a security element for a mobile terminal, a mobile terminal with such a security element and a system having the features of the independent claims. Advantageous embodiments and further developments are specified in the dependent claims.

The present invention is based on the idea of embedding the transaction-defining commands, for example in the form of APDU commands, in data packets of an EAP-SIM or EAP-AKA protocol and via a wireless network, in particular a WLAN, via which the terminal with a Terminal via a base station can be connected to tunnel.

The EAP-SIM protocol and the EAP-AKA protocol each form specific embodiments of the E AP (Extensible Authentication Protocol) protocol, which has been generally designed as an authentication protocol basis (see RFC 3748) EAP has been developed to support a dial-up of a mobile terminal into a foreign network, without it being necessary to know exactly the respective exact infrastructure with each authentication. For this purpose, EAP supports different authentication methods, among others also by means of a SIM / UICC mobile card which has been quasi specified in RFC 4186 or RFC 4187 as EAP-SIM protocol (for GSM) or EAP-AKA protocol (for UMTS) are.

As part of an EAP-SIM or EAP-AKA protocol, a corresponding security element, that is to say a SIM / UICC mobile communication card, is used to authenticate a mobile terminal in a wireless network. For this purpose, a corresponding EAP request command is sent from the terminal to the terminal via a base station which provides the network. An operating system of the terminal, e.g. Android or iOS, can recognize from the specific embodiment of the EAP request command in the form of an EAP-SIM or EAP-AKA request command that this command to the

Forward SIM / UICC mobile card of the terminal.

This mechanism is used herein to transport such commands defining the transaction to be performed between the terminal and a transactional application on the security element of the terminal. According to the invention, the data packets of the EAP-SIM or EAP-AKA protocol are thus not used for authentication of the mobile terminal in the wireless network provided by the base station, but rather as a transport frame for the commands defining the actual transaction, which basically do not belong to any prescribed protocol are bound. Usually these commands are in the form of APDU commands between the terminal and the transactional application on the security element of the terminal transmitted.

In this way, a terminal that does not have an NFC module can easily and securely perform a transaction without contact with the terminal. An adaptation of an existing infrastructure is not necessary, just as a change of existing and used communication protocols. All necessary functionalities can be implemented in the terminal and the security element, in particular in the transaction application of the security element. For the user of the terminal, the process remains transparent. There is no need for user interaction, preserving all the benefits of contactless transaction execution. The transaction can also be carried out safely, since the security element of the mobile terminal stores all data and applications necessary for performing and / or authenticating the transaction, in particular the transaction application according to the invention, in a secure manner.

As a rule, the EAP-SIM or EAP-AKA data packets are forwarded unchanged according to the EAP-SIM or EAP-AKA protocol from the base station, which provides the network via which the mobile terminal can be connected to the terminal , This applies both to E AP request commands sent from the terminal to the terminal and to EAP response commands sent from the terminal to the terminal. Such forwarding of EAP commands by a base station is also provided according to the EAP specification. However, the base station can also be designed as a component of the terminal. Then such a transfer can be practically omitted. Usually but the terminal will be connected to the base station via a suitable communications network, such as the Internet.

The security element on the terminal recognizes such EAP-SIM or EAP-AKA data packets received via the base station and the mobile terminal from the terminal, which comprise transaction commands defining request commands, i. such EAP data packets used to tunnel transaction commands. In particular, the security element is arranged to distinguish such EAP-SIM or EAP-AKA data packets from conventional EAP-SIM or EAP-AKA data packets which do not have embedded, i. tunneled transaction commands.

Recognition of EAP-SIM or EAP-AKA data packets, which include embedded, transaction-defining commands, can take place in various ways.

In principle, the security element can analyze the corresponding data packets and, on the basis of an analysis, in particular of the data portion of such a data packet, infer whether the data packet comprises embedded commands defining the transaction or not. EAP-SIM or EAP-AKA data packets have a predefined structure and contain defined attributes that enable unambiguous recognition. According to a preferred embodiment, the security element recognizes, on the basis of an identification code of the terminal, whether data communication via the EAP-SIM or EAP-AKA protocol is used for carrying out the transaction, ie whether the corresponding EAP-SIM or EAP-AKA data packets are embedded , transaction-defining com- Mandos include. A corresponding identifier of the terminal is provided according to the EAP protocol and can be easily checked quickly. By using a transaction-specific identifier, the terminal can the terminal, ie so inform the security element of the terminal _/ easily that the e AP data packets are used for tunneling transaction commands. For this purpose, in the security element, for example, a list of terminal identifiers is stored, which specify such terminals that are set up for tunneling transaction commands in EAP data packets.

Alternatively or additionally, the security element can recognize on the basis of an identification code of the base station, which provides the network, via which the mobile terminal is connected to the terminal, or an identification code of the network, whether a data communication via the EAP-SIM or EAP-AKA Protocol to be used to perform the transaction. Again, for example, a list of corresponding base station and / or network identifiers may be stored in the security element. If the security element has detected that the received E AP data packets comprise embedded, transaction-defining commands, the security element forwards the corresponding EAP data packets to the transaction application. The transaction application then extracts from an EAP-SIM or EAP-AKA data packet received by the security element the corresponding request commands defining the transaction and interprets them in a predefined manner. The transaction application then embeds the response commands defining the transaction in an EAP SIM card. or EAP-AKA data packet and forwards this EAP data packet as an EAP-SIM or EAP-AKA response command to the security element of the mobile terminal. The security element in turn sends this EAP-SIM or EAP-AKA response command to the terminal via the terminal and the base station.

In an analogous manner, the terminal is set up transaction requesting commands, i. e.g. Inquiry APDUs to embed in EAP-SIM or EAP-AKA data packets and as EAP-SIM or EAP-AKA

Request command to send via the base station and the mobile terminal to the security element. Furthermore, the terminal is set up to extract the transaction-defining response commands from EAP-SIM or EAP-AKA response commands received from the security element, via the terminal and the base station, and to interpret them appropriately.

As already mentioned, for example, a payment transaction or an access transaction can be carried out by means of the transaction.

Furthermore, it is also possible to use the transaction on the part of the terminal to check a status of applications that can be selected on the security element. For this purpose, the terminal can specifically address a so-called "Card Manager" on the security element as part of the transaction.The "Card Manager" is a special application of the security element, with the aid of which applications can be selected on the security element if it is installed there and are selectable. A concrete example of such a status request to the terminal can be made with a specific application called PPSE ("Proximity Payment System Environment"). ment ") in order to obtain the status of the payment applications installed on a security element of the terminal.

A security element according to the invention for a mobile terminal, in particular in the form of a SIM-UICC mobile communication card, therefore comprises a transaction application which is set up to carry out a transaction with a terminal via a contactless data communication channel. The security element is further set up if the transaction-defining commands embedded in data packets of an EAP-SIM or EAP-AKA protocol between the transactional application on the security element and the terminal are tunneled over a wireless network, such EAP-SIM received by the terminal. or recognize EAP-AKA data packets that comprise request commands defining the transaction.

Furthermore, the security element is set up to forward the recognized EAP-SIM or EAP-AKA data packets to the transaction application.

Finally, the security element is set up to forward the EAP-SIM or EAP-AKA data packets received from the transaction application into which corresponding response commands defining the transaction are forwarded to the terminal.

According to a preferred embodiment, the transaction application is set up on the security element to extract the transaction-defining request commands from E AP-SIM or EAP-AKA data packets received from the security element and to interpret them appropriately. Furthermore, the transaction application is set up, the transaction-defining response commands in EAP-SIM or EAP-AKA data packets. and forward to the security element for forwarding to the terminal.

A mobile terminal according to the invention comprises a security element described above.

An inventive terminal is configured to perform a transaction with a transaction application of a security element for a mobile terminal, in particular in the form of a SIM / UICC mobile card. In particular, the terminal is set up to tunnel commands defining the transaction to the transactional application via a wireless network, to request requests defining the transaction in EAP-SIM or EAP-AKA data packets and to send them to the security element via the base station and the terminal. Furthermore, the terminal is set up to extract appropriate response commands defining the transaction from EAP-SIM or EAP-AKA data packets received from the security element via the terminal and the base station and to interpret them appropriately for carrying out the transaction.

Finally, a system according to the invention comprises a terminal as described above, at least one terminal described above having a security element according to the invention and at least one base station connected to the terminal, which is set up to provide a wireless network via which the mobile terminal can be connected to the terminal. The terminal, the base station and the security element of the terminal are each configured to execute a method described above. The base station can also be designed as a part of the terminal. The present invention will be described by way of example with reference to the accompanying drawings. Show:

FIG. 1 shows components of a preferred embodiment of a system according to the invention and

Figure 2 steps of a preferred embodiment of a method according to the invention. The system 1000, which is schematically indicated in FIG. 1, comprises at least one mobile terminal 100. The terminal 100 may be for example a smartphone, a mobile radio terminal, a tablet computer or the like. The terminal 100 is controlled by an operating system (OS). In the terminal 100, a security element 10 is integrated. The security element 10 can be firmly connected to the terminal 100 or removably integrated therein.

As security element 10 of the terminal 100, SIM / UICC mobile cards are particularly suitable. Other security elements of known type can also be used, for example in the form of hardware and / or software means, specially secured areas in the terminal (eg TEE, trusted execution environment, vSIM) The security element 10 comprises a transaction application 12, which is configured to perform a transaction with a terminal 300 in the manner described below with reference to FIG. The terminal 300 is usually assigned to a provider of a transaction and can be provided, for example, by a server of a bank, via which an EMV payment transaction by means of the terminal 100 of the user is to be performed as a transaction.

The terminal 300 is connected to a base station 200 for this purpose. The base station 200 is configured to provide a wireless network (WLAN) via which the terminal 100 can contact the terminal 300. FIG. 2 illustrates steps of a preferred embodiment of a method for performing a contactless transaction between the terminal 300 and the transactional application 12 on the security element 10 of the terminal 100. In a step Sl, the base station 200 provides a wireless network.

To perform the transaction (step S2), the following sub-steps can be performed in detail. The transaction-specific descriptive parameters, such as a purchase item or a purchase price, may be previously entered in a suitable manner, for example by keyboard input or voice input, by the user via a suitable input device connected to the terminal. In step S2.1, the terminal 300 embeds a request command defining the transaction, preferably in the form of an APDU request command, in an EAP-AKA data packet. The data portion of such a data packet is suitable for embedding any data, thus also for embedding of APDU commands. For details of the EAP-AKA protocol refer to RFC 4187.

In step S2.2, the terminal 300 sends the EAP-AKA data packet to the base station 200 in accordance with the EAP-AKA protocol as an EAP-AKA request command.

The base station 200 forwards the EAP-AKA request unchanged to the mobile terminal 100 (step S2.3).

On the basis of the specific type of EAP request command - in the form of an EAP-AKA request command - the operating system of the terminal 100 recognizes that the corresponding data communication is to be forwarded to the security element 10 of the terminal 100.

Consequently, the security element 10 of the terminal 100 receives the EAP-AKA request command in step S2.4 and recognizes that the EAP-AKA request command is used for tunneling a request command defining the transaction, for example in the form of an APDU request. As already described above, such recognition can be made visible to the terminal 100, for example, by means of an identifier of the terminal 300 which is part of the EAP data packet or by means of an identification of the base station or the network (SSID) provided by the base station is done.

In step S2.5, the security element 10 forwards the recognized EAP-AKA data packet to the transaction application 12. The transaction application, in step S2.6, extracts the request APDU from the EAP-AKA data packet and interprets this command accordingly. Subsequently, the transactional application 12 embeds a response command, ie a response APDU, in an EAP-AKA data packet and forwards the EAP-AKA data packet to the security element 10 as an EAP-AKA response command.

In step S2.7, the security element 10 in turn forwards the EAP-AKA response command to the base station 200.

The base station 200 forwards the EAP-AKA response command unchanged to the terminal 300, which extracts the response APDU from the EAP-AKA data packet in step S2.9 and interprets it accordingly. It is possible that steps S2.1 to S2.9 have to be repeated several times in order to carry out the transaction. In principle, however, it may also be sufficient for performing the transaction that each of the steps 2.1 to S2.9 is performed only once. Deviating from the method described above, the terminal 300, before the step S2.1, try to address the terminal 100 via a suitable interface of the base station, via an NFC protocol. Only when it is detected by means of a missing response that the terminal 100 does not support an NFC protocol or, due to the lack of an NFC module, can not receive a corresponding request, a method according to FIG. 2 is initiated.

Preferably, the security element 10 is set up, firstly a method as described above, as illustrated with reference to FIG and secondly, to securely support a corresponding transaction via an NFC module of a terminal. Such a security element can then be used both in a terminal 100, as shown in Figure 1, which has no NFC module, as well as in a terminal equipped with an NFC module to perform a transaction.

Claims

1. A method for contactless performance of a transaction between a mobile terminal (100) and a terminal (300), characterized in that the commands defining the transaction, in particular in the form of APDU commands, embedded in data packets of an EAP SIM or EAP-AKA protocol between a transaction application (12) on a security element (10) of the mobile terminal (100), in particular a SIM / UICC mobile card, and the terminal (300) are tunneled via a wireless network (S2. 1-S2.9).

2. The method according to claim 1, characterized in that EAP-SIM or EAP-AKA data packets from a base station (200), which provides the network, and via which the mobile terminal (100) is connected to the terminal (300) , are forwarded unchanged (S2.3, S2.8).

3. The method according to claim 1 or 2, characterized in that the security element (10) from the terminal (300) received EAP-SIM or EAP-AKA data packets, which include the transaction defining request commands, recognizes (S2.4), and in particular from conventional EAP-SIM or E AP-AKA data packets.

4. The method according to any one of claims 1 to 3, characterized in that the security element (10) from the terminal (300) received EAP-SIM or EAP-AKA data packets, which include the transaction defining request commands, to the transaction application (12 ) (S2.5), and received by the transactional application (12) EAP-SIM or EAP-AKA data packets in which corresponding transaction commands defining response commands are embedded are forwarded to the terminal (300) (S2.7).

5. The method according to any one of claims 1 to 4, characterized in that the security element (10) based on an identification identifier of the terminal (300) detects (S2.4), whether a data communication via the EAP-SIM or E AP-AKA Protocol to be used to perform the transaction.

6. The method according to any one of claims 1 to 5, characterized in that the security element (10) based on an identification identifier of a base station (200), which provides the network, and via which the mobile terminal (100) to the terminal (300) is, or an identification identifier of the network recognizes (S2.4), whether a data communication via the EAP-SIM or EAP-AKA protocol is to be used to perform the transaction.

7. The method according to any one of claims 1 to 6, characterized marked, that the transaction application (12) the transaction defining request commands extracted from received EAP-SIM or EAP-AKA data packets and the transaction defining corresponding response commands in EAP-SIM or Embeds EAP-AKA data packets (S2.6).

8. The method according to any one of claims 1 to 7, characterized in that the terminal (300) embedding the transaction definition request commands in EAP-SIM or EAP-AKA data packets (S2.1) and the transaction defining response commands from received EAP- SIM or EAP-AKA data packets extracted (S2.9).

9. The method according to any one of claims 1 to 8, characterized in that by means of the transaction, a payment transaction or an access transaction is performed, or that by means of the transaction, a status of in the security element (10) selectable applications (12) is checked.

10. Security element (10) for a mobile terminal (100), in particular in the form of a SIM / UICC mobile card, wherein the security element (10) comprises a transaction application (12) which is set up to handle a transaction with a terminal (10). 300), characterized in that, when the transaction-defining commands, in particular in the form of APDU commands embedded in data packets of an EAP-SIM or EAP-AKA protocol between the transaction application (12) on the security element (10) and tunneled to the terminal (300) via a wireless network, the security element (10) is set up to recognize such EAP-SIM or EAP-AKA data packets received by the terminal (300), which comprise request commands defining the transaction, and in particular from conventional EAP-SIM / AKA data packets.

11. The security element (10) according to claim 10, characterized in that the security element (10) is set up, such from the terminal (300) received EAP-SIM or EAP-AKA data packets, which include transaction-defining request commands to the transaction application (12) and is arranged to forward to the terminal (300) EAP-SIM or EAP-AKA data packets received from the transactional application (12) into which corresponding response commands defining the transaction are embedded.

12. Security element (10) according to claim 10 or 11, characterized in that the transaction application (12) is arranged to extract the transaction defining request commands from received EAP-SIM or EAP-AKA data packets and is set, the transaction defining corresponding To embed response commands in EAP-SIM or EAP-AKA data packets.

13. Mobile terminal (100) with a security element (10) according to one of claims 10 to 12.

14. Terminal (300), configured to perform a transaction with a transaction application (12) of a security element (10) for a mobile terminal (100), in particular in the form of a SIM / UICC Mobilf unkkarte, characterized in that the terminal (300 ) is further configured to embed the transaction defining request commands in EAP-SIM or EAP-AKA data packets and is adapted to extract corresponding response commands from received EAP-SIM or EAP-AKA data packets.

A system (1000) comprising a terminal (300) according to claim 14, at least one mobile terminal (100) according to claim 13, and at least one wireless network base station (200) connected to the terminal (300), at least one of said wireless terminals A network connecting the mobile terminal (100) to the terminal (300), wherein the terminal (300), the base station (200) and the security element (10) of the terminal (100) are respectively arranged, a method according to any one of claims 1 to 9 perform. 1.2

FIG1

1000