Methods and systems for provisioning payment credentials

• US 10,198,728 B2
• Filed: 05/15/2014
• Issued: 02/05/2019
• Est. Priority Date: 05/15/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Huxham, Horatio Nelson, O'Regan, Alan Joseph, Moss, Tara Anne, Van Wyk, Hough Arie, Sheets, John Foxe
• Primary Examiner(s): Agwumezie, Chinedu C
• Application Number:
  US14/889,714
• Publication Number:
  US 20160078434A1
• Time in Patent Office: 1,727 Days
• Field of Search: 705 75, 705 78, 705 79, 705 71
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3265 characterised by personalisation for use
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 19/204 Loading of a stored value token using an ATM

Abstract

A method and system for provisioning payment credentials usable by a mobile device in conducting a payment. The method is conducted at a provisioning system and comprises the steps of: receiving payment credentials from a receiving device, the payment credentials having been obtained from a portable payment device presented by a consumer at the receiving device; receiving, from the receiving device, an identifier entered by the consumer; identifying a mobile device or a secure element corresponding to the identifier; and communicating the payment credentials or a derivation of the payment credentials to the identified mobile device or the secure element to be securely stored in association with the mobile device. The method may include: encrypting the received payment credentials, the encrypted payment credentials having a unique decryption key; and wherein communicating a derivation of the payment credentials communicates the unique decryption key.

Claims

1. A method comprising the steps of:

receiving, at a remote server computer, a request for payment credentials from a receiving device;

receiving, by the remote server computer from the receiving device, a personal identifier entered by a consumer;

identifying, by the remote server computer, a previously registered communication address of a mobile device or a secure element associated with the mobile device corresponding to the personal identifier;

communicating, by the remote server computer, a request for a decryption key to an identified communication address of the mobile device or the secure element associated with the mobile device;

receiving, by the remote server computer from the mobile device, the decryption key;

decrypting, by the remote server computer encrypted payment credentials stored by the remote server computer; and

transmitting, by the remote server computer, the decrypted payment credentials to the receiving device.

2. The method as claimed in claim 1, including:

storing the encrypted payment credentials at the remote server computer.

3. The method as claimed in claim 1, including:

requesting authorization from a trusted service manager to access the secure element; and

receiving a security key to access the secure element.

4. The method as claimed in claim 1, including:

communicating additional credentials to the receiving device, wherein the additional credentials are required in use in addition to the payment credentials or derivation of the payment credentials to carry out a transaction.

5. The method as claimed in claim 4, including:

obtaining the additional credentials from a remotely accessible server using the personal identifier and forwarding the additional credentials to the receiving device.

6. The method as claimed in claim 4, wherein the additional credentials are in the form of one or more dynamic verification values.

7. The method as claimed in claim 1, wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message.

8. The method as claimed in claim 1, wherein the method further includes:

determining whether or not the mobile device or the secure element corresponding to the personal identifier has been registered with the remote server computer.

9. The method as claimed in claim 1,

wherein the secure element is one of the group of:

a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device.

10. The method as claimed in claim 1, wherein the method is repeated for multiple payment credentials.

11. The method as claimed in claim 1, wherein the payment credentials are also on a portable payment device used by a user of the mobile device.

12. A remote server computer comprising:

a processor; and

a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising;

receiving, a request for payment credentials from a receiving device;

receiving, from the receiving device, a personal identifier entered by a consumer;

identifying a previously registered communication address of a mobile device or a secure element associated with the mobile device corresponding to the personal identifier;

communicating a request for a decryption key to an identified communication address of the mobile device or the secure element associated with the mobile device;

receiving, by the remote server computer from the mobile device, the decryption key;

decrypting, by the remote server computer encrypted payment credentials stored by the remote server computer; and

transmitting, by the remote server computer, the decrypted payment credentials to the receiving device.

13. The server computer of claim 12, wherein the method comprises storing the encrypted payment credentials.

14. The server computer of claim 12, wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message.

15. The server computer of claim 12, wherein the method further includes:

determining whether or not the mobile device or the secure element corresponding to the personal identifier has been registered with the server computer.

16. The server computer of claim 12,

wherein the secure element is one of the group of:

a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device.

17. The server computer of claim 12, wherein the method is repeated for multiple payment credentials.