Data access in a mobile device with NFC

摘要

The disclosure concerns an NFC (near field communications) device having an NFC router. The NFC router includes a memory adapted to store data to be shared with an external device and an NFC antenna circuit. The NFC router is capable of operating in a card emulation mode in which the shared data stored by the memory is accessible via the NFC antenna circuit.

主权项

1. A near field communications (NFC) device, comprising:
an NFC router having a secure memory adapted to store shared data, the shared data accessible to a plurality of devices, wherein at least one of the plurality of devices is an external device; an NFC antenna circuit, wherein the NFC router is capable of operating in a card emulation mode in which the shared data stored by the secure memory is accessible via the NFC antenna circuit; an instruction memory different from the secure memory of the NFC router; and a host processor coupled to the instruction memory and arranged to control the NFC device using instructions retrieved from the instruction memory, the host processor further coupled to the NFC router and capable of accessing the shared data in the secure memory, wherein the NFC router is adapted to:
receive requests to access the shared data in the secure memory from the host processor according to at least some of the instructions retrieved from the instruction memory;receive requests to access the shared data in the secure memory from the external device via commands passed through the NFC antenna circuit;detect for each received request to access the shared data whether the host processor or the external device sent the respective request to access the shared data;selectively verify one or more first access conditions prior to permitting access to the shared data when the external device requested access to the shared data; andselectively verify one or more second access conditions prior to permitting access to the shared data when the host processor requested access to the shared data,wherein selectively verifying at least one of the first or second access conditions includes verifying a digital signature associated with the requested access to the shared data.