Method and apparatus for funding an electronic purse

What is this patent about?

’855 is related to the field of secure mobile commerce and electronic payment systems. Specifically, it addresses the technical challenge of extending single-function contactless smart card technologies, which typically operate in closed environments like transit systems, into open environments like the Internet or cellular networks. The background context involves the difficulty of securely delivering authentication keys over public domains to manage stored-value accounts on portable devices.

The underlying idea behind ’855 is the implementation of a three-tier security model that encapsulates physical, e-purse, and card manager security layers to protect transactions over open networks. By utilizing a software-based emulator that mimics a physical smart card (such as a Mifare tag) alongside a dedicated e-purse applet, the system creates a secure gateway. This architecture allows a mobile device to bridge the gap between legacy contactless hardware protocols and modern wireless communication, ensuring that sensitive transaction data is never exposed during transmission.

The claims of ’855 focus on a method for funding an electronic purse through a coordinated interaction between a midlet agent, an e-purse applet, and a remote payment server. The process requires a multi-stage verification where a user-entered PIN triggers the midlet to request a response from the applet, which is then validated by a server against a financial institution's records. Central to the claims is the personalization process, which establishes nested security channels between the card module and an external Security Authentication Module (SAM) to protect all subsequent operations.

In practice, the invention functions by using the midlet as a high-level coordinator that manages the user interface and network communication, while the e-purse applet acts as a gatekeeper for the underlying emulator. When a user initiates a 'top-off' or funding request, the system generates Application Protocol Data Units (APDUs) that are wrapped in standard network protocols like HTTP. This allows the device to communicate with a backend SAM to verify the authenticity of fund transfers before the emulator updates its internal transaction logs and balance.

This approach differs from prior solutions by moving beyond the limitations of simple hardware tags that require direct, local key delivery. By personalizing the e-purse with transformed passwords and operation keys during setup, the invention enables secure, remote management of stored values over wireless networks. The use of a nested security channel on top of a standard card manager framework ensures that even if the open network is compromised, the underlying financial data within the emulator remains protected from unauthorized access.