Patent Application
20190073653
The term near field communication (NFC) refers to a type of communication that involves minute wireless data transfers between devices over limited distances. The technology is rooted in radio-frequency identification technology (RFID). NFC does not refer to a single communication specification as numerous incompatible platforms have been developed in the NFC space. These specifications include those developed by ISO/IEC, the NFC Forum, the GSMA Group, the EMV Company, and others. Furthermore, each NFC platform can include multiple modes of communication that are each individually practiced by separate devices. For example, one device could execute the NFC Forum Reader/Writer mode but not the NFC Forum Peer-to-Peer mode. The resulting technology landscape can be confusing to people who expect a device that engages in NFC communication to be able to communicate with any other device that uses NFC. However, this is not the case, and enabling a device to be interoperable with two different NFC platforms can be technically challenging.
This disclosure relates to point of sale (POS) devices capable of obtaining payment information from an NFC enabled device, encrypting the payment information, and transmitting the payment information to a central processor for payment. Specifically, this disclosure relates to POS devices that can communicate via multiple NFC specifications using a single NFC front end. One of the NFC specifications can be used to obtain payment information that is processed by a first secure microprocessor while another one of the NFC specifications is used to obtain unsecure information that is processed by an applications microprocessor. Benefits associated with some of the disclosed approaches include the reduced bill of materials and design effort resulting from a reduction in the number of antennas and front-end hardware required by a single POS device, and the improved user experience associated with a device that conducts all NFC communications via a single location on the device. This disclosure includes specific technical approaches directed to enabling a POS device to communicate using multiple NFC protocols with a single NFC front end.
Approaches disclosed herein include the use of a discrete microcontroller that can selectively instantiated one of at least two different NFC stacks, where each NFC stack is tailored for a specific use. The discrete microcontroller communicates with both an NFC front end and an applications microprocessor for the POS device. The POS device operates in two different modes depending upon which of the two different NFC stacks is instantiated. The POS device can engage in communication with two different external devices via NFC using two incompatible and independent NFC protocols in the two modes. However, switching between the two modes does not require any change in the hardware along the path of communication between the external device and the applications microprocessor, and instead all that is involved is a change in the impedance of solid state devices and the use of different software.
In certain approaches, the discrete microcontroller can selectively instantiate a first NFC stack for an NFC payment processing protocol and a second NFC stack is for a less secure protocol. The terminal could be referred to as being in a payment processing mode when the first NFC stack was instantiated. In these approaches, the discrete microcontroller can also serve as a secure microprocessor for the POS device and can encrypt payment information received via the NFC front end and payment processing NFC protocol for transmission to a payments processor. The discrete microcontroller can also encrypt payment information received on the POS device from other channels such as from a contact chip card reader, a magnetic stripe reader, a personal identification number pad, an integrated touch screen, or any other channel for receiving payment information. The discrete microcontroller can also serve as the payments kernel for the POS device. In these approaches, the discrete microcontroller can be transparent to an operating system on the applications microprocessor and can tunnel data from the NFC front end to the applications microprocessor while the second stack is instantiated and the terminal is in an unsecure mode, and can receive and encrypt payment data from the NFC front end while the first stack is instantiated and the terminal is in the payment processing mode.
In certain approaches, the discrete microcontroller is rendered transparent to an NFC service on the applications microprocessor by augmenting an operating system of the applications microprocessor with a master communication service that administrates interrupts between the two NFC stacks, and sends remote procedure calls to retrieve buffered data on the discrete microcontroller. The NFC service of the operating system can be modified slightly to interoperate with the master communication service but the core of the operating system does not need to be modified.
In one approach, a POS system an NFC front end communicatively coupled to an antenna, a discrete microcontroller communicatively coupled with the near field communication front end, and an applications microprocessor communicatively coupled with the discrete microcontroller. The discrete microcontroller stores a first software stack for a first NFC protocol, and a second software stack for a second NFC protocol. The applications microprocessor instantiates an operating system for the POS system and a master NFC service. The discrete microcontroller is programmed to, selectively and in response to the master NFC service, instantiate: (i) the first software stack exclusive to the second software stack; and (ii) the second software stack exclusive to the first software stack. The first and second software stacks are independent. The first NFC protocol and the second NFC protocol are different and incompatible.
In another approach, a method of operating a POS system includes storing a first software stack for a first NFC protocol on a discrete microcontroller, storing a second software stack for a second NFC protocol on the discrete microcontroller, instantiating an operating system for the POS system on an applications microprocessor, instantiating a master NFC service on the applications microprocessor, and digitizing an NFC near field communication signal using an NFC front end. The method also includes, selectively processing, on the discrete microcontroller and as selected by the master NFC service, the digitized NFC signal with one and only one of the first software stack and the second software stack. The operating system controls the NFC front end solely via the master NFC service. The first NFC protocol and the second NFC protocol are different and incompatible.
In another approach, a POS system includes an NFC front end communicatively coupled to an antenna, a discrete microcontroller communicatively coupled thereto, and an applications microprocessor (applications processor) communicatively coupled to the discrete microcontroller. The discrete microcontroller stores a first software stack for a first NFC protocol, a second software stack for a second NFC protocol, and instructions to process a digitized NFC signal from the NFC front end with the first software stack. The applications processor stores instructions to instantiate an operating system for the point of sale system, instantiate a master NFC service, and transmit a remote procedure call from the master NFC service to the discrete microcontroller to switch between the first software stack and the second software stack.
Methods and systems for multi-use near field communication (NFC) front ends are disclosed. An NFC front end receives signals from an antenna and conducts initial processing on the signals to condition them for use by a host system. Generally, an NFC front end includes an analog interface for connecting to an antenna (e.g., a modulator/demodulator, a phase locked loop, a filter, a transmitter, a receiver, an oscillator, an analog-to-digital converter, etc.), and a bus interface for connecting to a host (e.g., a USB, UART, SPI, or I2C interface). An NFC front end can be implemented in a single integrated circuit with external connections to connect the analog interface to an external antenna, and the bus interface to an external bus. In accordance with the following approaches a single NFC front end can be used for different and incompatible NFC protocols. In particular, one of the protocols can be an NFC payment processing protocol and one of the protocols can be a basic or less secure NFC communication protocol. In further accordance with some of the following approaches, the same hardware can be used to receive payment information data from the NFC antenna of a POS system for secure processing, and tunnel other data from that same NFC antenna to an applications microprocessor of the POS system.
Approaches disclosed herein include the use of a discrete microcontroller that can selectively instantiate one of at least two different NFC stacks, where each NFC stack is tailored for a specific use. The NFC stacks can be independent software stacks. The NFC software stacks can be referred to as independent because they exist wholly in mutually exclusive physical memory locations and can individually be used to implement their protocols. As used herein, a protocol “stack” refers to a set of computer readable instructions and associated data that can be utilized by a computer to implement a low-level driver and an associated state machine which will allow the computer to talk to a different computer that operates the protocol. The discrete microcontroller can be configured such that it stores two protocol stacks in an internal or external nonvolatile memory, and instantiates a first software stack exclusive to a second software stack by loading the first software stack from memory and vice versa. The internal memory could be a nonvolatile memory such as a flash memory of the discrete microcontroller. The external memory could be a discrete flash memory on the same printed circuit board as the discrete microcontroller. The protocol stack can be instantiated on the discrete microcontroller using a bootloader or BIOS. The protocol stack could also be instantiated on the discrete microcontroller using a higher-level system, including a micro-operating system of the discrete microcontroller. The software stacks could facilitate communication protocols that utilize the same frequency when transmitting through the air between two devices. Indeed, such approaches would be beneficial in that the hardware of the NFC front end would not need to be overtly modified to facilitate communication in either mode and could be implemented with a static hardware configuration. The discrete microcontroller could selectively and alternatively instantiate either software stack to communicate in accordance with the related protocol. The discrete microcontroller could also initialize the NFC front end to be compatible with a specific NFC protocol such as by sending a signal to tune the antenna or filters of the NFC front end.
The discrete microcontroller and NFC front end can be components of a larger system. The system can be said to be operating in different “modes” when the discrete microcontroller and NFC front end are being used to process signals in accordance with different NFC protocols. In specific approaches, the discrete microcontroller could be a component of a POS system. For example, the discrete microcontroller could be a secure microprocessor for the POS system. The secure microprocessor could store encryption keys to encrypt payment information received by the POS system. The secure microprocessor could also implement a secure kernel for the POS system. The encryption keys could be stored in a secure memory on the secure microprocessor which is configured to delete the encryption keys in case of a tamper detector indicating that the POS system was undergoing a malicious physical attack. The secure microprocessor could be covered by a secure mesh to prevent and detect tampering with the secure microprocessor. In a payment processing mode, payment information could be received by the NFC antenna and secure microprocessor using an NFC payment processing protocol. In an alternative mode, unsecure information could be received by the NFC antenna and secure microprocessor using a basic NFC communication protocol. The NFC payment processing protocol could be the EMV Co L1 protocol. The basic NFC communication protocol could be an NFC Forum protocol.
In specific approaches, the disclosed hardware configuration and methods of operation will facilitate EMV compliance for the POS system because the software stack and library associated with the EMV Co L1 protocol can be stored on the discrete microcontroller in an unmodified form. As the two or more stacks on the discrete microcontroller are fully independent, and the POS system is configured to instantiate the stacks in a mutually exclusive manner, they do not need to be changed to accommodate the use of another protocol even though they both use the same front end. As will be described below, the handoff between the protocols can also be handled by a higher-level system and can be completely transparent to the two stacks. Therefore, one stack can be independently modified while another stack can remain in a certified state as recorded by a third party, such as EMV Co., and loaded into the discrete microcontroller. For example, a new updated NFC Forum Reader/Writer library drop could be integrated into the POS system without affecting a separate payment processing stack.
Discrete microcontroller 203 can selectively instantiate a first software stack for a first NFC protocol or a second software stack for a second NFC protocol. The two stacks can be instantiated exclusive to the alternative stack. While instantiating either stack, discrete microcontroller 203 could buffer data received from NFC Front End 202 until applications microprocessor 204 requested the data. The first protocol could be for an NFC payment processing protocol and the second could be a less secure or basic NFC communication protocol such as an NFC tag reader protocol. In such situations, discrete microcontroller 203 could additionally encrypt payment information received from the NFC Front End 202 before sending it on to applications microprocessor 204, or sending it to a payment processor directly. The encryption process could involve the use of payment keys such as those generated by a DUKPT key management scheme. As such, discrete microcontroller 203 could store a DUKTP key set and could also store additional keys or certificates. Discrete microcontroller could include a secure kernel for all the computation and functionality provided by the POS system. Discrete microcontroller 203 could be configured to delete the keys and certificates if tamper mesh 205 was disrupted or any other sensor in the system indicated that a tamper had occurred.
Applications microprocessor 204 could be the master processor of the POS system. Applications microprocessor 204 could instantiate an operating system, such as an Android Operating System or an equivalent, and run applications with the operating system such as a main register application for the POS system. The operating system could include services such as an NFC service. If the operating system were Android, the NFC service could be the Android NFC service. Applications microprocessor 204 could also instantiate a master NFC service. The master NFC service could be instantiated using firmware. The firmware could be loaded using a BIOS or bootloader. The firmware could be loaded from an internal or external nonvolatile memory.
The master NFC service could render discrete microcontroller 203 transparent to the operating system of applications microprocessor 204 by handling the transitions between the various NFC operating modes for the operating system and allowing the discrete microcontroller to tunnel data to the applications processor when the POS system is operating in an unsecure mode. The master NFC service could achieve this with the use of direct communication with both the NFC service of applications microprocessor 204 and the kernel or operating system of discrete microcontroller 203. Direct communication could be utilized to accept commands from and deliver data to the NFC service and to provide commands to and deliver data to and from the discrete microcontroller. The discrete microcontroller 203 could selectively instantiate one of its stored software stacks in response to the master NFC service.
The two arrows overlying the components of
The switch over required for the POS system to facilitate data flow line 206 as opposed to data flow line 207 could be limited to a change in which software stack was instantiated by discrete microcontroller 203. In certain approaches, the switch could also involve a nominal change in NFC Front End 202 and antenna 201 such as electrically tuning the filter or changing the impedance of solid state devices in either block of the diagram.
The connections between the blocks in block diagram 200 are illustrated as generic single line connections. As illustrated, discrete microcontroller 203 could be connected to NFC front end 202 using a single connection such as a USB, SPIO, UART, or I2C bus. However, the communication can occur on multiple lines between the blocks. For example, applications processor 204 and discrete microcontroller 203 could be connected using two separate external buses such as a USB line and a UART line. Based on the application running on applications microprocessor 204, one of the lines could entirely block the other line such that the two elements in the block diagram were connected by two totally separate channels. However, the connection between applications processor 204 and discrete microcontroller 203 could also be provided via a single channel.
Communication between the applications microprocessor 204, discrete microcontroller 203, and NFC front end 202 could be conducted through external buses. The buses could be wires or traces on a printed circuit board. The external buses could route signals between the devices such that the devices were thereby communicatively coupled. Communications between applications microprocessor 204 and discrete microcontroller 203 could be conducted using interprocessor lines. Discrete microcontroller 203 could include a buffer for temporarily storing data that is meant to be tunneled through to applications microprocessor 204 until applications microprocessor 204 sends a request for the data. All of the devices in block diagram 200 could be located on the same printed circuit board and all inter-block lines could be provided by traces on that printed circuit board. Furthermore, the difference between data flow path 206 and the portion of data flow path 207 that terminates at discrete microcontroller 203 can involve the same physical routing at the board or system level of the diagram.
Steps 301-4 are conducted prior to the execution of step 306. In step 301, a first software stack for a first NFC protocol is stored on discrete microcontroller 203. In step 302, a second software stack for a second NFC protocol is stored on discrete microcontroller 203. Although these two steps are shown as sequential in chronological order, these steps can be conducted in any order so long as they are completed before step 306 and can involve the software stacks mentioned above. At least one of the software stacks can be provided by an authorized payment processing standardization entity and can be loaded into discrete microcontroller 302 in an unmodified original form. Prior or subsequent to the execution of steps 301 and 302, a step 303 of instantiating an operating system for the POS system can be executed on applications microprocessor 204. The operating system can be an Android Operating System or equivalent. The operating system can be used to instantiate a main register application for the POS system that is used by a merchant to interact with the POS system. The operating system can also be used to instantiate supporting applications for the POS system such as a loyalty point tracker, merchant payroll application, and other applications that increase the functionality of the device. The operating system can also be used to instantiate services for the operating system such as in step 304 when the operating system is used to instantiate a master NFC service on the applications microprocessor.
The master NFC service that is instantiated in step 304 can be instantiated by loading the service from firmware on the point of sale device. The master NFC service could be an additional service that is programmed into the applications microprocessor by a POS manufacture after the applications microprocessor was purchased. The master NFC service could be configured to render discrete microcontroller 203 transparent to the operating system on applications processor 204. This approach allows the secure processor to be the first device to receive payment data from the NFC front end in case the applications processor is compromised while at the same time requiring minimum changes to an applications processor architecture that is designed to connect directly to an NFC controller and front end. The master NFC service could communicate with the operating system's NFC service and hide the complexities of interfacing with multiple NFC protocols from the operating system. The operating system's NFC service may be modified slightly in order to communicate with the master NFC service.
The master NFC service could receive requests from applications on the applications processor via the built in NFC service of the operating system to alter the NFC protocol currently being used to communicate on the POS device. For example, an application on the POS system could be triggered by a user which required communication with an NFC tag such as a loyalty tracking system or some other application. The request could be used by the operating system to change the protocol being instantiated by the secure microcontroller. Prior to the NFC front end digitizing an NFC communication signal as in step 305, the master NFC service could execute a step 306 of selecting a software stack to instantiate on the discrete microcontroller. The digitized NFC signal could then be selectively processed using either the protocol provided by the first software stack as in step 307 or the second software stack as in step 308 depending upon which software stack was instantiated on discrete microcontroller. Furthermore, the master NFC service could be configured to time multiplex the two protocols by repeating step 306 and alternating between the two stacks in accordance with a predetermined time interval.
The switching mechanism used to transition the POS system between different modes and the manner in which the NFC communication service can render the discrete microcontroller transparent to the operating system can be described with reference to
A POS system in accordance with the approaches disclosed herein can be programmed to implement many potential varieties for how a mode control switch is initiated. For example, mode control could be initiated on the applications processor side of the POS terminal via a request for NFC processing by an application instantiated by the operating system. As another example, mode control could be initiated on the NFC Front End or discrete microcontroller side in response to detecting information associated with a given protocol in an incoming NFC signal. If the NFC front end or discrete microcontroller detected payment information in an incoming NFC signal, the POS system could immediately switch to a payment processing mode. If any software stack on the discrete microcontroller detected a failed communication, the POS terminal could automatically switch to a different mode to retry the communication with a different protocol. As another example, the POS system could be configured to switch into a time multiplexing mode control state where the NFC front end was continually transitioned between modes with different associated NFC communication protocols to detect if a communication via that particular NFC communication protocol was currently required. Furthermore, the POS systems can utilize different varieties for mode switching based on whether they are transitioning into or out of a given mode. For example, one mode could be favored such that the associated NFC protocol was always allowed to finish before switching out of the mode, and alternative protocols would always be immediately interrupted when switching into the mode. The POS systems could be configured to favor a payment processing mode and its associated payment processing protocol over other modes. As another example, the POS system could be in a payment processing mode by default and only transition out of that mode temporarily when a request to do so was received.
After the front end is initialized it could begin to receive data via the NFC antenna and digitize data received in accordance with the Reader/Writer protocol in a step 507. The digitized data could then be transferred to the discrete microcontroller 203 in a step 508. The data could then be buffered on discrete microcontroller 203 in a step 509. Discrete microcontroller 203 could then send an interrupt to applications processor 204 to indicate that the data was ready as in step 510. The interrupt could be sent on GPIO bus 401 and could be detected by the event observe generated in step 506. Discrete microcontroller 203 could also send an optional signal to the NFC front end to power down the antenna and front end in a step 511 to save power. Alternatively, discrete microcontroller 203 could send a signal to the NFC front end to initialize for operation with the first protocol in a step 512. This step could be used in a situation in which the POS terminal was configured to operate in the first mode by default.
The data from the second operating mode could ultimately be delivered to applications processor 204 via a second remote procedure call using the master communication service to request the data from discrete microcontroller 203 in a step 513. The second remote procedure call could originate with the NFC service of the operating system of applications processor 204. The master communication service would issue this request after processing the interrupt informing the service that the data was available in step 510. The data could be returned in a step 514. Finally, the data could be parsed and broadcast to any applications that had registered with the operating system of applications processor 204 to receive the data in a step 515. In a specific approach, the same application that lead to the execution of step 501 could be an application that was registered to receive the data. Finally, step 512 of reinitializing the front end for the first protocol could be conducted at a later time after the antenna had been off for a certain amount of time such that both steps 511 and 512 were executed. Step 512 could also be accompanied by discrete microcontroller 203 reinstantiating the first software stack.
The approaches described with reference to
The specific example of a dual-use NFC front end that is capable of being used to process NFC tags in an NFC read/write mode and also to process payments using the EMVCo L1 standard is used throughout this disclosure as a non-limiting example of the approaches that are disclosed herein. However, the approaches disclosed herein can be utilized to make use of the same NFC front end for multiple communications protocols. Furthermore, the approaches disclosed herein can be utilized for any kind of short range wireless communications technology and radio frequency identification (RFID) communication protocols including ISO/IEC 14443, JIS-X 6319-4, ISO/IEC 18092, EMVCo specifications, any NFC Forum specification (e.g. NFC-A, NFC-B, NFC-F), and any contactless card technology specification generally.
While the specification has been described in detail with respect to specific embodiments of the invention, it will be appreciated that those skilled in the art, upon attaining an understanding of the foregoing, may readily conceive of alterations to, variations of, and equivalents to these embodiments. Any of the method steps discussed above can be conducted by a processor operating with a computer-readable non-transitory medium storing instructions for those method steps. The computer-readable medium may be memory within a personal user device or a network accessible memory. Although examples in the disclosure were generally directed to a device configured to operate with two different protocols, the approaches could can be directed to a device configured to operate with any number of different protocols so long as the NFC front end could be tuned to receive electromagnetic signals in accordance with the OSI physical level of that protocol. These and other modifications and variations to the present invention may be practiced by those skilled in the art, without departing from the scope of the present invention, which is more particularly set forth in the appended claims.
