Over the air management of payment application installed in mobile device

• US 10,115,099 B2
• Filed: 01/29/2016
• Issued: 10/30/2018
• Est. Priority Date: 09/22/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aabye, Christian, Brand, Olivier, Lindelsee, Michael, Mirizzi, Joseph J., Ngo, Hao, White, Lauren, Wilson, David William
• Primary Examiner(s): Liu, I Jung
• Application Number:
  US15/010,641
• Publication Number:
  US 20160224971A1
• Time in Patent Office: 1,005 Days
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems, apparatus, and methods for managing an application installed on a mobile device, such as a mobile phone are provided, so as to prevent or limit unauthorized use of the application, for example, when the mobile device is lost, stolen, or otherwise subject to unauthorized use. A request to enable or disable user access to a function of the application can be received by a server computer. A command message responsive to the request can be generated by the server computer, the command message comprising control data for enabling or disabling user access to the function of the application. The generated command message can be transmitted to the mobile device over a wireless network.

Claims

1. A computer-implemented method of controlling use of a payment application installed on a mobile device comprising a processor and a contactless element coupled to the processor, the method comprising:

receiving, by a server computer, a request to enable or disable user access to features or functions of the payment application;

generating, by the server computer, a command message responsive to the request, the command message comprising control data that when executed by the processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and

transmitting, by the server computer, the generated command message to the mobile device over a wireless network, wherein the processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,

wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values; and

wherein the mobile device is configured to extract the control data from the command message and store the control data in a secure data storage of the mobile device.

2. The computer-implemented method of claim 1, wherein the request is received from a payment authorizing entity of the payment application.

3. The computer-implemented method of claim 1, wherein control data is used by the mobile device to enable payment transactions for one or more of a prepaid account, a credit account, or a debit account.

9. The method of claim 1, the secure data storage is a secure memory.

10. The method of claim 1, wherein only certain types of transactions can be conducted with the mobile device after the control data is executed.

11. The method of claim 1, wherein the mobile device authenticates a user of the mobile device before allowing the mobile device to conduct a transaction with the terminal.

12. The method of claim 1, wherein the short range communication comprises NFC.

13. The method of claim 1, wherein the mobile device is a mobile phone and the terminal is a payment terminal at a merchant.

4. A server computer, comprising:

a memory that stores one or more computer-executable instructions; and

a first processor configured to access the memory and execute the computer-executable instructions to implement a method comprising;

receiving a request to enable or disable user access to features or functions of a payment application on a mobile device comprising a second processor and a contactless element coupled to the second processor;

generating a command message responsive to the request, the command message comprising control data that when executed by the second processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and

transmitting the generated command message to the mobile device over a wireless network, wherein the second processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,

wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values; and

wherein the mobile device is configured to extract the control data from the command message and store the control data in a secure data storage of the mobile device.

5. The server computer of claim 4, wherein the request is received from a payment authorizing entity of the payment application.

6. The server computer of claim 4, wherein control data is used by the mobile device to enable payment transactions for one or more of a prepaid account, a credit account, or a debit account.

7. A non-transitory computer-readable storage medium comprising one or more computer-executable instructions to implement a method, the method comprising:

receiving a request to enable or disable user access to features or functions of a payment application on a mobile device comprising a processor and a contactless element coupled to the processor;

generating a command message responsive to the request, the command message comprising control data that when executed by the processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and

transmitting the generated command message to the mobile device over a wireless network, wherein the processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,

wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values; and

wherein the mobile device is configured to extract the control data from the command message and store the control data in a secure data storage of the mobile device.

8. The non-transitory computer-readable storage medium of claim 7, wherein the request is received from a payment authorizing entity of the payment application.