WO2013118088A1

WO2013118088A1 - A re-writable electronic label

Info

Publication number: WO2013118088A1
Application number: PCT/IB2013/051047
Authority: WO
Inventors: Horatio Nelson HUXHAM
Original assignee: Fundamo (Pty) Ltd
Priority date: 2012-02-08
Filing date: 2013-02-08
Publication date: 2013-08-15
Also published as: WO2013118088A4; AP2014007841A0; ZA201404670B

Abstract

A re-writable electronic label is disclosed. The electronic label includes an antenna configured to receive encrypted signals; a processor configured to interpret the encrypted signals and generate a barcode based thereon; and an electronic-ink display configured to display the generated barcode. The electronic-ink display, the processor, and the antenna are coupled together and may be in the form of a sticker.

Description

A RE- WRITABLE ELECTRONIC LABEL

CROSS-REFERENCES TO RELATED APPLICATIONS

[0001] This application claims priority to US provisional patent application number 61/596,623 filed on 8 February 2012.

BACKGROUND OF THE INVENTION

[0002] Consumers are increasingly utilizing portable mobile devices, such as mobile phones, for conducting financial transactions. In some cases, the use of mobile payment methods requires a transacting consumer to provide a merchant with transaction credentials. There is a need for reliable and efficient means of providing merchants with transaction credentials, in order to minimize the possibility of a fraudulent transaction being authorized.

[0003] There is also a need for merchants to be able to reliably and conveniently display and update information, such as product pricing and labeling information.

BRIEF SUMMARY OF THE INVENTION

[0004] In accordance with the invention there is provided a re-writable electronic label comprising: an antenna configured to receive encrypted signals; a processor configured to interpret the encrypted signals and generate an image based thereon; and an electronic-ink display configured to display the generated image, wherein the electronic-ink display, the processor, and the antenna are coupled together.

[0005] Further features of the invention provide for the re-writable electronic label to receive the encrypted signal from a mobile phone, and for the encrypted signal to be transferred from the mobile phone to the antenna of the electronic label via near field communication. [0006] Still further features of the invention provide for the re-writable electronic label to receive the encrypted signals from a cryptographic expansion device, for the cryptographic expansion device to be an adhesive attachment device having processors embedded therein and being adhered to a subscriber identity module (SIM) card of the mobile phone, and configured to create the near field communication (NFC) used to transfer the encrypted signal from the phone to the re-writable electronic-ink attachment device.

[0007] Further features of the invention provide for the electronic label to be a sticker, and for the image generated by the processor to be a barcode. [0008] Still further features of the invention provide for the processor to include a hardware security module.

[0009] Yet further features of the invention provide for the encrypted signals to include payment information required to complete a payment, alternatively to include pricing information for a product. [0010] Further features of the invention provide for the barcode to be a two-dimensional barcode, such as, for example, a Quick Response (QR) barcode, and for the QR barcode to include payment information required to complete a payment.

BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Fig. 1 illustrates a block diagram of a re-writable electronic label according to an embodiment of the invention.

[0012] Fig. 2 illustrates a block diagram of a system according to an embodiment of the invention.

[0013] Fig. 3 illustrates a block diagram of another system according to an embodiment of the invention.

[0014] Fig. 4 illustrates a block diagram of yet another system according to an embodiment of the invention.

[0015] Fig. 5 illustrates a block diagram of yet another system according to an embodiment of the invention. [0016] Fig. 6 illustrates a flow diagram of a method according to an embodiment of the invention. [0017] Fig. 7 illustrates a flow diagram according of a method according to another embodiment of the invention.

[0018] Fig. 8 illustrates a block diagram of an exemplary mobile phone which may be used in conjunction with various embodiments. DETAILED DESCRIPTION OF THE INVENTION

[0019] Fig. 1 shows front and back views of a re-writable electronic label (100) according to the invention. The label (100) includes a front portion (104) which includes an electronic-ink display (110) and a back portion (102) in which a processor (106) and an antenna (108) are mounted. The antenna (108) is in the form of a coil which is wound adjacent the edges of the electronic label. The front potion and the back portion are sandwiched together into a single construction to form the electronic label (100). In one embodiment, the back portion includes an adhesive coating (not shown) and the label is in the form of a sticker which can be attached to a surface, such as an unused surface of a mobile phone or a product display mounting. In other embodiments, the label may be in the form of a clip or a tag, and include fastening means other than adhesive coatings, such as clips, press studs, magnetic elements, retaining formations or the like.

[0020] The processor (106), antenna (108) and electronic-ink display (110) are in communication with each other. The communication is preferably electronic communication such that information received at the antenna (108) can be communicated to the processor (106) which, in turn, can communicate the information to the electronic-ink display (110). The information being communicated might include a digital representation of payment credentials, product pricing or labeling information, communication protocol handshaking information or other communication layer information, information formatted for graphical representation, or the like.

[0021] The antenna (108) is a near field communication (NFC) antenna which is in communication with the processor (106) and is configured to receive NFC signals from an NFC transmitter device, the transmitted signals containing information which is encrypted. The antenna (108) is further configured to harvest electrical power from the NFC transmitter device so as to supply the processor (106) and electronic-ink display (110) with electrical power. [0022] In other embodiments of the invention, the antenna (108) might be a radio frequency identification (RFID) antenna configured to receive RFID signals and to harvest electrical power from an RFID transmitter device so as to provide electrical power.

[0023] In this embodiment, the processor (106) includes a hardware security module (HSM) which uses hardware to encrypt and decrypt data instead of solely performing the encryption/decryption in software, and accordingly provides enhanced protection over software encryption technologies. For example, the HSM might be able to provide secure key management to generate cryptographic keys, sets the capabilities and security limits of keys, implement key backup and recovery, prepare keys for storage and performs key revocation and destruction. In some embodiments, the HSM is implemented as a dual processor device that includes a secure processor with storage and a public processor with storage. The HSM may also include a physical or logical separation between interfaces that are used to communicate critical security parameters and other interfaces that are used to communicate other data. The HSM can also provide a tamper-proof mechanism that provides a high risk of destroying the HSM and the cryptographic keys stored therein, if any attempt is made to remove or externally access the HSM.

[0024] This is in contrast to a device which might only encrypt data using software. Such a device may comply with only a security level 1 of the Federal Information Processing Standard 140-2 (FIPS 140-2), which provides only a minimum level of security to protect sensitive information. In contrast, the HSM according to embodiments of the invention is compliant with at least a security level 2 of the FIPS 140-2 standard. Preferably, the HSM in embodiments of the invention is compliant with security level 3 or level 4 of FIPS 140-2.

[0025] The HSM might include a public processing unit (PPU) which can be implemented with one or more processors or controllers, and a secure processing unit (SPU) which can be implemented with one or more cryptoprocessors. In some embodiments, the HSM is a packaged semiconductor chip that includes both an SPU and a PPU in a single package, but with a logical and physical separation between the SPU and the PPU. In other embodiments, the SPU and the PPU can be individually packaged semiconductor chips or semiconductor dies that are coupled together to implement the HSM. [0026] The processor (106) receives information from the antenna (108), decodes, decrypts, processes and renders the received information and communicates the decoded, decrypted, processed and rendered information to the electronic-ink display (110).

[0027] The electronic-ink display (110) is configured to receive the information communicated from the processor (106), the information having been rendered such that the information is displayable on the electronic-ink display (110). For example, the processor (106) might render a Quick Response (QR) code which might then be displayed graphically on the electronic-ink display (110). Electronic-ink displays (110) referred to in this description are commonly also known as electronic paper displays, e-paper displays or e-ink displays by those skilled in the art and are display technologies which have been designed to mimic the appearance of ordinary ink on ordinary paper. Types of electronic-ink displays which might be implemented include those types of electronic-ink displays manufactured by E Ink Corporation and commonly used in e- readers, for example, Amazon's Kindle™. The invention also extends to other methods of representing the information graphically on the electronic-ink display (110), such as, for example, ordinary plaintext, a barcode, a two dimensional barcode, or the like.

[0028] Embodiments of the invention accordingly provide for the electronic label (100) to be configured to be energized by wireless communication signals from another device, to securely receive information via the wireless communication from the another device and to render the information and display it graphically. [0029] Fig. 2 shows an exemplary system according to embodiments of the invention. The system includes a mobile phone (120), which may not be NFC-enabled, as well as an electronic label (100) as previously described. The mobile phone has a cryptographic expansion device (124) which is attached onto a subscriber identity module (SIM) card (122) of the mobile phone. The cryptographic expansion device (124) provides its own NFC functionality, so that the cryptographic expansion device can communicate directly with the electronic label.

[0030] The cryptographic expansion device (124) is a device that can be attached to a communication component, in this case a SIM card (122), of a communication device, e.g. a mobile phone (120), to enable the phone to perform cryptographic operations on communications sent to and from the mobile phone. When used with a mobile phone, the cryptographic expansion device enables the mobile phone to send and receive end-to-end secure encrypted communications. The secure encrypted communications can include sending secure communications using a communication protocol which might be selected from a group consisting of Short Message Service (SMS) protocol, Unstructured Supplementary Service Data (USSD) protocol, Near Field Communication (NFC) protocol, and Radio Frequency (RF) communications protocol. The cryptographic expansion device (124) can be used with a mobile phone without requiring any changes to the internal software or hardware of the mobile phone and without requiring any modification to the communication protocols of the mobile phone. In some embodiments, the end-to-end secure communications enabled by the cryptographic expansion device (124) can be utilized by a user of the mobile phone to perform financial and/or banking transactions. Such a cryptographic expansion device is fully described in PCT Publication Number WO/2013/013192 which is incorporated herein by reference in its entirety.

[0031] Accordingly, the mobile phone (120) is configured to emit NFC signals (114) via the cryptographic expansion device (124). The NFC signals (114) energize the electronic label (100) such that the electronic label is able to receive, store, decode, decrypt, process and/or graphically render the information being transmitted. Fig. 2 shows the information being graphically rendered and displayed on the electronic-ink display (110) as a QR code (112). Due to the fact that both the cryptographic expansion device (124) and the electronic label (100) include HSMs according to embodiments of the invention, the data transfer from one device to the other is secure and is not intelligible to a third party that may intercept the NFC signals (114). [0032] In use, when the mobile phone (120) is brought in close proximity to the electronic label (100), the NFC module of the cryptographic expansion device (124) energizes the antenna (108), or NFC coil, of the electronic label (100) and enables communication between the processor (106) of electronic label (100) and the cryptographic expansion device (124). The respective HSMs of the electronic label (100) and the cryptographic expansion device (124) then perform a digital handshake by means of which mutual authentication is conducted. If both the HSM of the electronic label (100) and the HSM of the cryptographic label (124) have positively authenticated one another, a secure communications channel is established between them by means of which further communication may be done, for example, the secure communication of payment credentials from the cryptographic expansion device (124) to the electronic label (100). Prior authentication may be required from a user, for example by requesting the user to enter a passcode or personal identification number (PIN). Thereafter, the processor (106) of the electronic label renders the payment credentials into a QR code (112) for graphical display on the electronic-ink display (110). In one embodiment, a consumer may have attached the electronic label onto an unused surface of his or her mobile phone, such as a back cover of the mobile phone. The payment credentials rendered into a QR code may include a one-time personal account number (PAN). The QR code can then be scanned by a merchant for capturing of the payment credentials.

[0033] Fig. 3 shows an exemplary system which comprises a mobile phone (320) and an electronic label (300). In this embodiment the mobile phone (320) is an NFC enabled mobile phone which transmits an NFC signal (314). The NFC signal (314) energizes the electronic label (300) such that the electronic label is able to receive, store and graphically render the information being transmitted. The figure shows the information being graphically rendered and displayed on the electronic-ink display (310) as a QR code (312). In this embodiment, the mobile phone is not provided with a cryptographic expansion device but transmits the information to be displayed by means of ordinary NFC signals. The electronic label (100) receives, stores, decodes, decrypts, processes and graphically renders the information being transmitted from the NFC enabled mobile phone (320).

[0034] A further system is illustrated in Fig. 4. The exemplary system comprises an electronic label (100), a mobile phone (120), a consumer (130), a merchant (140) and a merchant point-of- sales (POS) device (150). [0035] The mobile phone (120) may be an NFC enabled mobile phone or a mobile phone fitted with a cryptographic expansion device (124) so as to allow the mobile phone (120) to communicate using NFC (such as, for example the system illustrated in Fig. 3). The electronic label is accordingly configured to appropriately receive, store, decode, decrypt, process and/or graphically render the information being transmitted from the mobile phone (120). [0036] The merchant POS device (150) might be any appropriate POS device or merchant mobile device configured to receive a QR code as a payment method. Exemplary devices range from a computer POS device with a QR code scanner to a merchant mobile phone configured to act as a POS device, in for example in a mobile money banking scenario.

[0037] The consumer (130) wishing to make a payment for a product at a merchant (140), uses his or her mobile phone (120) to request payment credentials from, for example, a mobile money issuer. The payment credentials received might be in the form of one-time, or single-use, payment credentials. Information included in the payment credentials might comprise a primary account number (which might be valid for a single use only), static routing information, an account holder name, expiration information, a transaction value, service data, card verification value(s), IMEI, MSISDN numbers or the like. The payment credentials are communicated by the mobile money issuer to the user's mobile phone (120) which, in turn, securely communicates the payment credentials to the electronic label (100), which may be affixed to the mobile phone. The electronic label (100) securely receives the payment credentials, renders the payment credentials as a QR code (112) and displays the QR code (112) on the electronic-ink display (110). The QR code (112) containing the payment credentials is then captured by a merchant POS device (150) of the merchant (140) and is processed accordingly so as to complete the transaction.

[0038] The exemplary system illustrated in Fig. 4 accordingly allows a consumer (130) to use his or her mobile phone (120) along with an electronic label (100) to present payment credentials to be captured by a merchant POS device (150) so as to complete a transaction at a merchant (140).

[0039] Fig. 5 illustrates an exemplary system according to embodiments of the invention in which the electronic label (100) is used as a price tag in a retail environment. The electronic label (100) is attached to a shelf on which a product (142) is displayed and is configured to display at least the price of the product (142) on the electronic-ink display (110), an optionally a barcode (113). A merchant using an appropriate device, for example a mobile phone (120), can then update the price of the product by communicating the new price and barcode to the electronic label (100) using NFC in a similar manner described in the foregoing description.

[0040] The information might also include a product description, basic product information or the like. Similarly, the electronic label (100) might rather be configured to display the product information in the form of a QR code to be scanned and interpreted by a user mobile phone. The QR code might contain additional information or a link to a website of the product (142), for example.

[0041] Fig. 6 is a flowchart of an exemplary method (600) for generating a dynamic QR code (112) on the display of an electronic label (100), e.g. an e-ink sticker or QR code sticker of the invention. In step 605, a user (130), who in this case is a consumer, affixes an electronic label (100) on their mobile phone (120). In step 610, at some later point, the consumer (130) initiates a transaction with a merchant (140). In step 615, when the consumer (130) wants to present payment information for the transaction to the merchant (140), the consumer (130) accesses a menu on their mobile phone (120). In step 620, the consumer (130) selects a menu option for QR code generation. In step 625, the consumer (130) is prompted to enter a pre-established PIN for identity authentication. In step 630, once the consumer (130) has been authenticated, a cryptographic expansion device (124), attached to the SIM Card (122) of the user's mobile phone (120), generates an NFC field (114) that energizes the electronic label (100). In step 635, a one-time PAN is transferred to the antenna (108) of the electronic label (100). In step 640, the processor (106) of the electronic label (100) renders a one-time use QR code (112) on the electronic-ink display (110). In step 645, the merchant (140) scans the generated QR code (112) using a merchant POS device (150), which in this case is a mobile device of the merchant. Finally, in step 650, the credentials contained in the QR barcode are decrypted by the merchant mobile device and used in a standard payment authorization process. [0042] Fig. 7 is a flowchart of an exemplary method (700) for displaying product information relating to a product (142) on the electronic-ink display (110) of the electronic label (100). In step 705, the merchant (140) affixes an electronic label (100) to a product shelf containing a product (142). In step 710, the merchant selects a menu option on their mobile phone (120) and in step 715 selects a 'product information update' option from this menu. Having done so, in step 720, the merchant (140) is prompted to enter a pre-established PIN into the mobile phone (120) so as to authenticate his or her identity. Upon authentication, the cryptographic expansion device (124) generates an NFC field that energizes the electronic label (100) on the product shelf in step 725. In step 730, the product information is transferred to the electronic label (100) from the cryptographic expansion device (124) over the NFC field. In step 735, the processor (106) in the electronic label (100) renders the product information into a human readable format and displays the rendered information on the electronic-ink display (110). The rendered information displayed on the electronic-ink display (110) is then readable by a consumer in step 740 such that the consumer is able to ascertain at least a price being charged for the product (142).

[0043] Fig. 8 shows a block diagram of a phone (120) that can be used in embodiments of the invention. The phone can be a notification device that can receive alert messages and access reports, a portable merchant device that can be used to transmit control data identifying a discount to be applied, as well as a portable consumer device that can be used to make payments. The exemplary phone (120) may comprise a computer readable medium and a body as shown in Fig. 8. The computer readable medium (120(b)) may be in the form of (or may be included in) a memory that stores data (e.g., issuer account numbers, loyalty provider account numbers, etc.). The memory may store control data identifying a discount to be applied. The memory may also store information such as financial information, transit information (e.g., as in a subway or train pass), access information (e.g., as in access badges), etc. Financial information may include information such as bank account information, loyalty account information (e.g., a loyalty account number), a bank identification number (BIN), credit or debit card number information, account balance information, expiration date, consumer information such as name, date of birth, etc. Any of this information may be transmitted by the phone (120).

[0044] The phone (120) may further include a contactless element (120(g)), which is typically implemented in the form of a semiconductor chip (or other data storage element) with an associated wireless transfer (e.g., data transmission) element, such as an antenna. The contactless element (120(g)) may be associated with (e.g., embedded within) the phone (120) and data or control instructions transmitted via a cellular network may be applied to the contactless element (120(g)) by means of a contactless element interface (not shown). The contactless element interface may function to permit the exchange of data and/or control instructions between the mobile device circuitry (and hence the cellular network) and an optional contactless element (120(g)).

[0045] The contactless element (120(g)) may be capable of transferring and receiving data using a near field communications (NFC) capability (or near field communications medium) typically in accordance with a standardized protocol or data transfer mechanism (e.g., ISO 14443/NFC). Near field communications capability is a short-range communications capability, such as RFID, Bluetooth™, infra-red, or other data transfer capability that can be used to exchange data between the phone (120) and an interrogation device. Thus, the phone (120) may be capable of communicating and transferring data and/or control instructions via both a cellular network and near field communications capability.

[0046] The phone (120) may also include a processor (120(c)) (e.g., a microprocessor) for processing the functions of the phone (120) and a display (120(d)) to allow a consumer to see the phone numbers and other information and messages. The phone (120) may further include input elements (120(e)) to allow a user to input information into the device, a speaker (120(f)) to allow the user to hear voice communication, music, etc., and a microphone (120(i)) to allow the user to transmit his or her voice through the phone (120). The phone (120) may also include an antenna (120(a)) for wireless data transfer (e.g., data transmission). [0047] It should be understood that the present invention as described above can be implemented in the form of control logic using computer software in a modular or integrated manner. Based on the disclosure and teachings provided herein, a person of ordinary skill in the art will know and appreciate other ways and/or methods to implement the present invention using hardware and a combination of hardware and software [0048] Any of the software components or functions described in this application, may be implemented as software code to be executed by a processor using any suitable computer language such as, for example, Java, C++ or Perl using, for example, conventional or object- oriented techniques. The software code may be stored as a series of instructions, or commands on a computer readable medium, such as a random access memory (RAM), a read only memory (ROM), a magnetic medium such as a hard-drive or a floppy disk, or an optical medium such as a CD-ROM. Any such computer readable medium may reside on or within a single computational apparatus, and may be present on or within different computational apparatuses within a system or network.

[0049] Embodiments of the invention further provide for the mobile phone (120) and the merchant mobile device (e.g. merchant POS device (150)) may be in any suitable form. Suitable mobile devices can be hand-held and compact so that they can fit into a consumer's wallet and/or pocket (e.g., pocket-sized). Examples of mobile devices or mobile phones include cellular phones, personal digital assistants (PDAs), pagers, payment cards, security cards, access cards, smart media, transponders, and the like. They may also include smart cards, ordinary credit or debit cards (with a magnetic strip and without a microprocessor), keychain devices (such as the Speedpass™ commercially available from Exxon-Mobil Corp.), etc.

[0050] Embodiments of the invention provide for at least some of the information transmitted to the electronic label (100) to be encrypted, and for the information to include a digital representation of payment credentials; communication protocol handshaking information or other communication layer information; information formatted for graphical representation; or product information. Information included in the payment credentials might comprise a primary account number (which might be valid for a single use only), static routing information (e.g. a bank identification number or "BIN"), an account holder name, expiration information (e.g. an expiry date), a transaction value, service data, card verification value(s) (e.g. CVVl or CVV2) or information such as bank account information, loyalty account information (e.g., a loyalty account number), credit or debit card number information, account balance information, consumer information such as name, date of birth, or a PIN block. The product information might include a product price, product identifier (e.g. barcode, stock keeping unit), product ingredients, product allergens or the like. [0051] Embodiments of the invention provide for the term "PIN block" to refer to encryption which is applied to a PIN for transmission from an entry device and might include XORing a padded version of the plain text PIN with the account number field.

[0052] Embodiments of the invention provide for a mobile software application to be resident on the mobile phone (120). The software application might provide a user interface to facilitate communications between, for example, the mobile phone, a server computer of the issuer and the electronic label. The user interface might include a menu from which at least some of these communications can be initiated. Alternatively, embodiments of the invention provide for such an interface to be provided by a SIM Application Toolkit protocol (commonly referred to as the STK protocol) implementation or the like. [0053] The above description is illustrative and is not restrictive. Many variations will become apparent to those skilled in the art upon review of the disclosure. The scope of the invention should, therefore, be determined not with reference to the above description, but instead should be determined with reference to the pending claims along with their full scope or equivalents.

[0054] One or more features from any embodiment may be combined with one or more features of any other embodiment without departing from the scope of the invention. A recitation of "a", "an" or "the" is intended to mean "one or more" unless specifically indicated to the contrary.

Claims

WHAT IS CLAIMED IS:

1. A re-writable electronic label comprising:

an antenna configured to receive an encrypted signal;

a processor configured to interpret the encrypted signal and generate an image based thereon; and

an electronic-ink display configured to display the generated image, wherein the electronic-ink display, the processor, and the antenna are coupled together.

2. The re- writable electronic label of claim 1 , wherein the encrypted signal is received from a mobile phone.

3. The re- writable electronic label of claim 2, wherein the encrypted signal is transferred from the mobile phone to the antenna of the electronic label via near field communication.

4. The re- writable electronic label of claim 3, wherein an adhesive attachment device having processors embedded therein and being adhered to a subscriber identity module card of the mobile phone creates the near field communication used to transfer the encrypted signal from the mobile phone to the electronic label.

5. The re- writable electronic label of claim 1, wherein the electronic label is a sticker.

6. The re- writable electronic label of claim 1 , wherein the image generated by the processor is a barcode.

7. The re- writable electronic label of claim 6, wherein the barcode is a two- dimensional barcode.

8. The re- writable electronic label of claim 1, wherein the processor includes a hardware security module.

9. The re- writable electronic label of claim 1, wherein the encrypted signal includes payment information required for the completion of a transaction.

10. The re- writable electronic label of claim 1, wherein the encrypted signal includes pricing information for a product.

11. A method for completing a transaction in a retail environment using a re- writable electronic label, the method comprising the steps of:

receiving an encrypted signal at an antenna of the electronic label; interpreting the encrypted signal at a processor of the electronic label;

generating an image based at least in part upon the interpreted encrypted signal; displaying the generated image on an electronic-ink display of the electronic label; and

scanning the generated image, wherein the encrypted signal includes payment information required for the completion of a transaction.

12. A system comprising:

a mobile phone configured to transmit encrypted signals;

a re- writable electronic label comprising an antenna configured to receive the encrypted signals; a processor configured to interpret the encrypted signals and generate an image based thereon; and an electronic-ink display configured to display the generated image, wherein the electronic-ink display, the processor, and the antenna are coupled together; and a merchant point of sale device configured to interpret the generated image and to use the information contained therein to complete a transaction.