Abstract: Systems, methods, and computer program products are provided for managing access control. A first set of access control rules is stored in a memory of mobile communication device. The mobile communication device receives from a trusted server over a communication network a notification message indicating that an access control rule has been updated in a secure element. In response to receiving the notification message, the mobile communication device retrieves from the secure element a second set of access control rules including at least the access control rule that has been updated. The first set of access control rules is updated based on the second set of access control rules retrieved from the secure element. An applet stored on the secure element is accessed via an application running on the mobile communication device, in accordance with the updated first set of access control rules.

Abstract: System, methods, and computer program products are provided for interfacing with and providing a cloud-based secure storage. A payment system and procedure optionally stores security-critical information in a cloud-based secure store. Personalization data on the cloud-based secure store may be comprehensively managed by interfacing with a contactless front end (CLF) module in a near field communication (NFC) device and an interceptor. Non-security-critical information remains on the device. The processing time required to manage a payment transaction using Host-based Card Emulation (HCE) is minimized. User experience is improved.

Abstract: Systems, methods, and computer program products are provided for managing access control. A first set of access control rules is stored in a memory of mobile communication device. The mobile communication device receives from a trusted server over a communication network a notification message indicating that an access control rule has been updated in a secure element. In response to receiving the notification message, the mobile communication device retrieves from the secure element a second set of access control rules including at least the access control rule that has been updated. The first set of access control rules is updated based on the second set of access control rules retrieved from the secure element. An applet stored on the secure element is accessed via an application running on the mobile communication device, in accordance with the updated first set of access control rules.

Abstract: The invention includes network mesh routers and methods for network mesh routing that are capable of transparently routing data packets to other clients on the network. The invention uses the link layer (L2) for route initiation and active client discovery and a combination L2 and the network layer (L3) for passive client discovery. By responding to packets on L2, networks composed of transparent mesh routers require neither configuration by the network operator nor any pre-configuration of the network clients.