Abstract: In a, computerized method (200), payer and payce communication devices (PD, PD2) negotiate (210) payment details for an offline digital payment by exchanging a payment request (112) and a payment response (114) by short-range data communication. For data integrity, the negotiation involves performing a predefined cryptographic operation for the payment request (112) as well as the payment response (114). The cryptographic operation is based on payment-specific data and a first cryptographic key (masterkey) being a shared secret stored in respective trusted execution environments (16, 26) of the payer and payce communication devices (PD, PD2). Upon successful negotiation, the payer and/or payee communication device (PD, PD2), store(s) (220) the payment details for the offline digital payment in the trusted execution environment (16, 26).

Abstract: A method (600) for handling a digital payment between a payer (P1) and a payee (P2) is presented. A payer communication device (PD1) is used by the payer (P1), and a payee communication device (PD2) is used by the payee (P2). The payer and payee communication devices (PD1, PD2) uses (610) short-range data communication (SRDC) when the devices are in proximity of each other to agree upon a digital payment (DP) without requiring long-range data communication with a remote digital payment settlement service (DPSS) at that stage. The payer communication device (PD1) and the payee communication device (PD2) both buffers (620) digital payment information (DPI) pertaining to the digital payment (DP) locally in the respective device (PD1, PD2).

Abstract: A method prevents fraudulent use by cloning of a trusted application (TA) executable in a secure execution environment (SEE) of a host device (HD). According to the method, the trusted application (TA) starts (310; 406) in a locked mode in which access to protected functionality and data of the trusted application (TA) is prohibited (312). The trusted application performs a handshake procedure (320; 400) with a computerized backend resource (BE) to verify that a current execution state of the trusted application (TA) has not already been occupied by another instance of the trusted application (TA). Only upon successful verification by the handshake procedure (320; 400) will the trusted application (TA) switch (330; 432) to an unlocked mode in which access to the protected functionality and data is permitted (332).

Abstract: A computerized method (100) in a digital payment system (1) involves registering (110) of transaction data (TBS) for a digital payment. The transaction data comprises an alias of the payer, an alias of the payee, and a representation of a payment amount which is covered by a reservation of funds in an account managed by the payment service provider. The method involves signing (120) of the transaction data, followed by communicating (130) the signed transaction data (P, TBS) to enable verification (140) at the payment service provider or payment server function. The payee communication device (PD2) receives (132) the signed transaction data (P, TBS) which includes a specification of a verification resource and uses (912) the specification of the verification resource to make a verification request (134; 914) at the payment service provider or payment server function. Subject to successful verification, the method concludes to enable settlement (150) of the digital payment.

Abstract: A computerized method (600) of performing a digital payment involves maintaining (610), at a financial institution (PB1), a reservation of funds in a payer account (PA1) of a payer (P1), and maintaining (620), by a computerized digital wallet server function (DCWS), a digital wallet (DCW) having a balance corresponding to the reservation of funds in the payer account. The method further involves making (630), by a payer communication device (PD1) usable by the payer, a payment request (PR) for the digital payment at the digital wallet sewer function. The digital wallet sewer function registers (640) transaction data (TXD) that comprises an alias of the payer (PayerAlias), an alias of a payee (PayeeAlias), and a representation of a payment amount (Amount) which is deducted from the balance of the digital wallet.

Abstract: A method (600) for handling a digital payment between a payer (P1) and a payee (P2) is presented. The payer and payee communication devices (PD1, PD2) uses (610) short-range data communication (SRDC) when the devices are in proximity of each other to agree upon a digital payment (DP) without requiring long-range data communication with a remote digital payment settlement service (DPSS) at that stage. Independently of the other device, the payer communication device (PD1) or the payee communication device (PD2) subsequently communicates (630) buffered digital payment information (DPI) to the remote digital payment settlement service (DPSS) by long-range data communication (LRDC1, 15 LRDC2). The remote digital payment settlement service (DPSS) causes settlement (640) of the digital payment (DP) as indicated by the digital payment information (DPI) received by long-range data communication (LRDC1, LRDC2) from one of the payer communication device and the payee communication device (PD1, PD2).

Abstract: A method of transferring digital cash comprises establishing (20) a local point-to-point communication link (CL) directly between a mobile communication device (MCD) and a smart card (SC) upon being in proximity of each other (10), then communicating (30) cash transfer data (CTD) over the local point-to-point communication link (CL). The cash transfer data (CTD) defines a local transfer of a monetary amount (Amount) from one of the mobile communication device (MCD) and the smart card (SC), being a cash sender, to the other of the mobile communication device (MCD) and the smart card (SC), being a cash receiver. The method further comprises updating (40) a balance (balance_ow) of a local digital wallet (OW) of the mobile communication device (MCD) as well as a balance (balance_card) of the cash deposit (CD) to reflect the local transfer of the monetary amount (Amount), such that the balance of the cash sender is reduced while the balance of the cash receiver is increased.

Abstract: A computerized method (100) of performing a digital payment of a payment amount (Amount) between a payer (P1) and a payee (P2) provides payment service provider interoperability. A payer communication device (PD1) and a payee 5 communication device (PD2) communicate (112) by short-range data communication during an offline settlement stage (110) to generate payment transaction data (Transaction Data) being digitally signed (114) by the payer communication device (PD1). The generated payment transaction data (Transaction Data) is validated (116) by the payee communication device (PD2).

Abstract: A communication device (100; 100a) has a processing device (110), a user interface (120), and a short-range wireless communication transceiver (130). The short- range wireless communication transceiver (130) is configured for receiving a short- range wireless communication signal (S) from another communication device (100b). The processing device (110) is configured for reading a communication identifier (CI) of the received short-range wireless communication signal (S), determining - based on the communication identifier (CI) - a particular audio/visual/audiovisual media content (140a) among a plurality of possible media contents (140), controlling the user interface (120) to present the particular media content (140a) to a user (1a) of the communication device (100; 100a), and controlling the user interface (120) to receive an input (INP) from the user (1a).

Abstract: A method (600) for handling a digital payment between a payer (P1) and a payee (P2) is presented. The payer and payee communication devices (PD1, PD2) uses (610) short-range data communication (SRDC) when the devices are in proximity of each other to agree upon a digital payment (DP) without requiring long-range data communication with a remote digital payment settlement service (DPSS) at that stage. Independently of the other device, the payer communication device (PD1) or the payee communication device (PD2) subsequently communicates (630) buffered digital payment information (DPI) to the remote digital payment settlement service (DPSS) by long-range data communication (LRDC1, 15 LRDC2). The remote digital payment settlement service (DPSS) causes settlement (640) of the digital payment (DP) as indicated by the digital payment information (DPI) received by long-range data communication (LRDC1, LRDC2) from one of the payer communi-cation device and the payee communication device (PD1, PD2).

Abstract: A VR device (110) comprising a controller (910) configured to: present a Virtual Reality space (120) comprising at least one virtual object (130) being associated with a gesture for executing an action associated with said virtual object (130); determine that the virtual object (130) is in a Line Of View (LOV); and providing a graphical marking (140) of the virtual object (130); wherein the graphical marking includes an indication of the associated gesture.

Abstract: A VR device (110) comprising a controller (910) configured to: present a Virtual Reality space (120) comprising at least one virtual object (130) being associated with a gesture for executing an action associated with said virtual object (130); determine that the virtual object (130) is in a Line Of View (LOV); and providing a graphical marking (140) of the virtual object (130); wherein the graphical marking includes an indication of the associated gesture.

Abstract: A method for improving the ability to detect passive beacon receiver devices is disclosed. According to the method, a beacon communication system which comprises one or more short-range wireless beacon transmitter devices, at least one of which is configured to repeatedly transmit a short-range wireless beacon advertisement signal on a first beacon broadcast channel, is operated by causing a device among the short-range wireless beacon transmitter devices to temporarily transmit a short-range wireless beacon refresh signal on a second beacon broadcast channel. The beacon refresh signal is adapted to cause one or more short-range wireless beacon receiver devices being in a passive mode to enter into a short-range wireless beacon scanning mode.

Abstract: Asset authentication in a dynamic, proximity-based network of communication devices, each having a first interface for establishing the dynamic, proximity-based network by short-range wireless beacon broadcast messaging, and a second interface for communicating with a server by broadband communication. A first communication device sends (210) via the first interface an authentication request to a second communication device having an associated asset. The second device receives (220) the authentication request via the first interface and in response communicates (230) with the server via the second interface to generate a digital signature by encrypting data which includes the asset with a private key for the second device. The second device sends (240) a signing completed report message about the generation of the digital signature to the first device via the first interface.

Abstract: A method is provided for establishing a dynamic, proximity-based group of wireless communication devices to support potential interaction between a user of a first wireless communication device and one or more users of the wireless communication devices in the dynamic, proximity-based group. In the method, the first wireless communication device sends a short-range wireless beacon broadcast message to other wireless communication devices in a proximity zone around the first wireless communication device. The short-range wireless beacon broadcast message is adapted for requesting the other wireless communication devices to send a response message to a server. The server registers responding devices among the other wireless communication devices.

Abstract: A method for improving the ability to detect passive beacon receiver devices is disclosed. According to the method, a beacon communication system which comprises one or more short-range wireless beacon transmitter devices at least one of which is configured to repeatedly transmit a short-range wireless beacon advertisement signal on a first beacon broadcast channel, is operated by causing a device among the short-range wireless beacon transmitter devices to temporarily transmit a short-range wireless beacon refresh signal on a second beacon broadcast channel. The beacon refresh signal is adapted to cause one or more short-range wireless beacon receiver devices being in a passive mode to enter into a short-range wireless beacon scanning mode.

Abstract: A method is provided for establishing a dynamic, proximity-based group of wireless communication devices to support potential interaction between a user of a first wireless communication device and one or more users of the wireless communication devices in the dynamic, proximity-based group. In the method, the first wireless communication device sends a short-range wireless beacon broadcast message to other wireless communication devices in a proximity zone around the first wireless communication device. The short-range wireless beacon broadcast message is adapted for requesting the other wireless communication devices to send a response message to a server. The server registers responding devices among the other wireless communication devices.

Abstract: A communication device (100) comprising a controller (210), a radio frequency interface (230) and a memory (240), wherein the controller is configured to identify at least one receiving communication device (100B, 100C); present content (510); receive one user input (U) indicating a share; and share the content (510) with the at least one receiving communication device (100B, 100C) through the sharing network over the radio frequency interface (230); wherein the communication device (100) is characterized in that the controller (210) is further configured to identify the receiving communication device (100B, 100C) by the controller (210) being configured to detect a presence of the receiving communication device (100B, 100C) being in close proximity and then initiate a connection with the at least one receiving communication device (100B, 100C) and wherein the controller is configured to share content upon initiating the connection thereby establishing a sharing network (400) automatically.

Abstract: Asset authentication in a dynamic, proximity-based network of communication devices, each having a first interface for establishing the dynamic, proximity-based network by short-range wireless beacon broadcast messaging, and a second interface for communicating with a server by broadband communication. A first communication device sends (210) via the first interface an authentication request to a second communication device having an associated asset. The second device receives (220) the authentication request via the first interface and in response communicates (230) with the server via the second interface to generate a digital signature by encrypting data which includes the asset with a private key for the second device. The second device sends (240) a signing completed report message about the generation of the digital signature to the first device via the first interface.

Abstract: A communication device (100) comprising a controller (210), a radio frequency interface (230) and a memory (240), wherein the controller is configured to identify at least one receiving communication device (100B, 100C); present content (510); receive one user input (U) indicating a share; and share the content (510) with the at least one receiving communication device (100B, 100C) through the sharing network over the radio frequency interface (230); wherein the communication device (100) is characterized in that the controller (210) is further configured to identify the receiving communication device (100B, 100C) by the controller (210) being configured to detect a presence of the receiving communication device (100B, 100C) being in close proximity and then initiate a connection with the at least one receiving communication device (100B, 100C) and wherein the controller is configured to share content upon initiating the connection thereby establishing a sharing network (400) automatically.