SG11201805753QA - Security verification method and device for smart card application - Google Patents

Security verification method and device for smart card application

Info

Publication number
SG11201805753QA
SG11201805753QA SG11201805753QA SG11201805753QA SG11201805753QA SG 11201805753Q A SG11201805753Q A SG 11201805753QA SG 11201805753Q A SG11201805753Q A SG 11201805753QA SG 11201805753Q A SG11201805753Q A SG 11201805753QA SG 11201805753Q A SG11201805753Q A SG 11201805753QA
Authority
SG
Singapore
Prior art keywords
smart card
card application
service
current
verification method
Prior art date
Application number
SG11201805753QA
Inventor
Chao Xiu
Lei Wang
Chenjie Shi
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Publication of SG11201805753QA publication Critical patent/SG11201805753QA/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352—Contactless payments by cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4016—Transaction verification involving fraud or risk level assessment in transaction processing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/61—Time-dependent
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/63—Location-dependent; Proximity-dependent

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Finance (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Signal Processing (AREA)
  • Telephone Function (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Storage Device Security (AREA)

Abstract

The present application relates to the field of information security technologies, and particular, a verification and for a smart card application. The method includes: obtaining related data of a current service when the smart card application performs service processing with the outside; determining the 5 related of current ce a parameter; nd the current service if the related data of the current service does comply the security parameter. The device corresponding to the method can be built in a virtual smart card application, or independent of a smart card application in an eSE chip to execute the described method. Based on the method and device in implementations of 10 the present application, a geographic location, time, transaction information, etc. of a service are determined, so as to ensure security of performing the service by using the smart card application.
SG11201805753QA 2016-01-05 2016-12-27 Security verification method and device for smart card application SG11201805753QA (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610006062.2A CN106940767A (en) 2016-01-05 2016-01-05 A kind of application of IC cards safe verification method and device
PCT/CN2016/112265 WO2017118315A1 (en) 2016-01-05 2016-12-27 Security verification method and device for smart card application

Publications (1)

Publication Number Publication Date
SG11201805753QA true SG11201805753QA (en) 2018-08-30

Family

ID=59273243

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201805753QA SG11201805753QA (en) 2016-01-05 2016-12-27 Security verification method and device for smart card application

Country Status (10)

Country Link
US (1) US11127019B2 (en)
EP (1) EP3401823B1 (en)
JP (1) JP2019501461A (en)
KR (1) KR102125159B1 (en)
CN (1) CN106940767A (en)
MY (1) MY197570A (en)
PH (1) PH12018501427A1 (en)
SG (1) SG11201805753QA (en)
TW (1) TWI744267B (en)
WO (1) WO2017118315A1 (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11704663B2 (en) * 2017-03-31 2023-07-18 Vijay Madisetti Method and system for blockchain-based vehicle identifiers and wallets for decentralized payments
CN108734005B (en) * 2018-02-09 2021-02-09 深圳市微付充科技有限公司 Security/identity authentication method, mobile equipment and storage device
US10998937B2 (en) 2019-04-30 2021-05-04 Bank Of America Corporation Embedded tag for resource distribution
US11196737B2 (en) 2019-04-30 2021-12-07 Bank Of America Corporation System for secondary authentication via contactless distribution of dynamic resources
US11234235B2 (en) * 2019-04-30 2022-01-25 Bank Of America Corporation Resource distribution hub generation on a mobile device
WO2021022204A1 (en) * 2019-07-31 2021-02-04 Iigc, Inc. Image-based authorization and transmission of stored value or sim cards
TWI726488B (en) 2019-11-19 2021-05-01 元太科技工業股份有限公司 Proximity smart card and a method for operating a proximity smart card
CN114726407B (en) * 2022-05-17 2022-08-26 北京紫光青藤微系统有限公司 Method, device, controller and storage medium for acquiring abnormal information

Family Cites Families (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4899274B2 (en) 2001-08-30 2012-03-21 富士通株式会社 Portable terminal and function suppression method
KR100582389B1 (en) * 2004-11-08 2006-05-23 주식회사 팬택앤큐리텔 Wireless Communication Terminal suspending the interrupt at paying using RF mode and its method
US20130332343A1 (en) * 2005-10-06 2013-12-12 C-Sam, Inc. Multi-tiered, secure mobile transactions ecosystem enabling platform comprising a personalization tier, a service tier, and an enabling tier
FR2934910B1 (en) * 2008-08-05 2013-08-16 Inside Contactless METHOD OF SECURING AN EXECUTED TRANSACTION USING A PROGRAMMABLE PORTABLE DEVICE
CN101789151A (en) * 2009-12-31 2010-07-28 中兴通讯股份有限公司 Application method of mobile terminal E-wallet and mobile terminal
JP2012088952A (en) 2010-10-20 2012-05-10 Nec Casio Mobile Communications Ltd Portable terminal, payment system, payment method and program
US20120166332A1 (en) * 2010-12-22 2012-06-28 Ebay Inc. Bill splitting system
US20120197793A1 (en) * 2011-01-31 2012-08-02 Bank Of America Corporation Dependent notification alert
TWI483627B (en) * 2011-05-19 2015-05-01 Chi Mei Comm Systems Inc Mobile device having nfc protection and method for protecting nfc of the mobile device
CN102855560B (en) * 2011-06-29 2018-07-17 国民技术股份有限公司 A kind of method of mobile payment and system
CN103065240B (en) * 2013-01-11 2018-04-27 中兴通讯股份有限公司 A kind of mobile payment processing method and system
US11232447B2 (en) * 2013-03-15 2022-01-25 Allowify Llc System and method for enhanced transaction authorization
SG11201508369TA (en) * 2013-04-25 2015-11-27 Offla Selfsafe Ltd Self authentication
CN104182870B (en) * 2013-05-24 2017-12-15 中国银联股份有限公司 A kind of safe payment method and payment system based on mobile phone wallet
US9811830B2 (en) * 2013-07-03 2017-11-07 Google Inc. Method, medium, and system for online fraud prevention based on user physical location data
US9390242B2 (en) * 2014-02-07 2016-07-12 Bank Of America Corporation Determining user authentication requirements based on the current location of the user being within a predetermined area requiring altered authentication requirements
CN104132870B (en) 2014-07-10 2017-03-15 上海大学 Surface tension and surface area viscosity determine device
CN104504568A (en) * 2014-12-26 2015-04-08 网易宝有限公司 Payment mode control method and payment mode control equipment
CN104751329A (en) * 2015-02-28 2015-07-01 深圳市中兴移动通信有限公司 Mobile payment terminal, mobile payment system and mobile payment method
CN104794615A (en) * 2015-05-11 2015-07-22 易联支付有限公司 Safety verification method for mobile phone payment

Also Published As

Publication number Publication date
EP3401823B1 (en) 2022-10-12
KR20180109919A (en) 2018-10-08
JP2019501461A (en) 2019-01-17
EP3401823A1 (en) 2018-11-14
CN106940767A (en) 2017-07-11
TWI744267B (en) 2021-11-01
KR102125159B1 (en) 2020-06-22
US20180315048A1 (en) 2018-11-01
EP3401823A4 (en) 2018-11-14
WO2017118315A1 (en) 2017-07-13
MY197570A (en) 2023-06-26
US11127019B2 (en) 2021-09-21
PH12018501427A1 (en) 2019-01-28
TW201730804A (en) 2017-09-01

Similar Documents

Publication Publication Date Title
SG11201805753QA (en) Security verification method and device for smart card application
PH12019501311A1 (en) Blockchain-based commodity claim method and apparatus, and electronic device
SG10201901732UA (en) Sensitive information processing method, device, server and security determination system
MX2015009820A (en) Transaction token issuing authorities.
MX364614B (en) Short message reading method and device.
MX2016011985A (en) Text message reading method and device.
SG11201806674TA (en) Electronic payment service processing method and device, and electronic payment method and device
MX2017012298A (en) Payment processing system using encrypted payment information, and method therefor.
EP4277317A3 (en) Sequencing the validity of access control keys
MX2016003578A (en) Method and device for area identification.
WO2014055241A3 (en) Secure identification of computing device and secure identification methods
WO2016011445A3 (en) System and method for verifying non-human traffic
SG2013042429A (en) Method for receiving an electronic receipt of an electronic payment transaction into a mobile device
SG11201806272TA (en) Risk control method and device
EP3067833A4 (en) Card reader, terminal, and payment information processing method using same
GB201309396D0 (en) Payment unit, system and method
GB2523972A (en) System and method for providing a security code
TW201612812A (en) Apparatus and method for self-service payment
PH12017500227A1 (en) A system and method for security enhancement
MX2015001610A (en) Target terminal recognition method, and terminal monitoring method, device and system.
PH12015501714A1 (en) Methods and systems for mitigating fraud losses during a payment card transaction
WO2018222438A3 (en) Systems and methods for real-time application configuration for nfc transactions
SG11201708102YA (en) System, method and computer program for executing monetary transactions based on social information
EP3480717A4 (en) Ic card, portable electronic device, and information processing method
SG10201807393VA (en) Securities issuing system and method for acquiring funds