System and method for NFC peer-to-peer authentication and secure data transfer

摘要

A reader device may generate a first identifier. The reader device may transmit the first identifier to a mobile device. The reader device may receive encrypted data and unencrypted data from the mobile device in which the encrypted data includes a second identifier. The reader device may evaluate whether the first identifier and the second identifier correspond to one another.

主权项

1. A method, comprising:
generating a session identifier with a reader device; transmitting the session identifier to a mobile device over an NFC peer-to-peer connection, wherein the mobile device includes a unique device identity; receiving, with the reader device, encrypted data and unencrypted data from the mobile device over the NFC peer-to-peer connection, wherein the encrypted data is generated with a symmetric key via an application installed on the mobile device, wherein the encrypted data includes at least the session identifier and the unique device identity, and the unencrypted data includes the unique device identity; evaluating, with the reader device, whether the session identifier of the encrypted data corresponds to the session identifier transmitted to the mobile device and whether the unique device identity of the encrypted data corresponds to the unique device identity of the mobile device; and failing authentication of the mobile device with the reader device when either the session identifiers do not correspond to one another or the unique device identifiers do not correspond to one another.