Over the air management of payment application installed in mobile device

• US 10,115,100 B2
• Filed: 01/29/2016
• Issued: 10/30/2018
• Est. Priority Date: 09/22/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aabye, Christian, Brand, Olivier, Lindelsee, Michael, Mirizzi, Joseph J., Ngo, Hao, White, Lauren, Wilson, David William
• Primary Examiner(s): Liu, I Jung
• Application Number:
  US15/010,728
• Publication Number:
  US 20160226882A1
• Time in Patent Office: 1,005 Days
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems, apparatus, and methods for managing an application installed on a mobile device, such as a mobile phone are provided, so as to prevent or limit unauthorized use of the application, for example, when the mobile device is lost, stolen, or otherwise subject to unauthorized use. An input indicative of a password to access the application can be received. It may be determined that a predetermined number of password entry attempts has been reached based on the input. A request message to disable access to the application can be transmitted from the mobile device to a remote computer. One or more lock instructions for disabling access to the application can be received by the mobile device from the remote computer. The one or more lock instructions can be executed by the mobile device by modifying control data within a secure memory of the mobile device.

Claims

1. A computer-implemented method, comprising:

receiving, by a mobile device, an input indicative of a password to access an application installed on the mobile device;

determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;

in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, by the mobile device to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;

receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and

executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

2. The computer-implemented method of claim 1, wherein the one or more lock instructions are received using an over-the-air communication channel.

3. The computer-implemented method of claim 1, wherein the application is a payment application used to conduct payment transactions.

4. The computer-implemented method of claim 1, further comprising:

receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and

executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

12. The method of claim 1, wherein the application is a payment application, and wherein disabling access to the application only disables access to a feature of the payment application, such that only a predetermined value or number of transactions can be conducted using the payment application.

5. A mobile device, comprising:

a memory that stores one or more computer-executable instructions; and

a processor configured to access the memory and execute the computer-executable instructions to implement a method comprising;

receiving an input indicative of a password to access an application installed on the mobile device;

determining that a predetermined number of password entry attempts has been reached based on the input;

in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;

receiving, from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and

executing the one or more instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

6. The mobile device of claim 5, wherein the one or more lock instructions are received using an over-the-air communication channel.

7. The mobile device of claim 5, where the control data is used by the application to permit or deny access to one or more functions of the application.

8. The mobile device of claim 5, wherein the method further comprises:

receiving, from the remote computer, one or more unlock instructions for enabling access to the application; and

executing the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

9. A non-transitory computer-readable storage medium comprising one or more computer-executable instructions to implement a method, the method comprising:

receiving, by a mobile device, an input indicative of a password to access an application installed a mobile device;

determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;

in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, by the mobile device to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;

receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and

executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

10. The non-transitory computer-readable storage medium of claim 9, wherein the one or more lock instructions are received using an over-the-air communication channel.

11. The non-transitory computer-readable storage medium of claim 9, where the method further comprises:

receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and

executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.