Automated access data provisioning

• US 10,257,185 B2
• Filed: 12/11/2015
• Issued: 04/09/2019
• Est. Priority Date: 12/12/2014
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Wong, Erick, Ansari, Ansar, Bansal, Parveen, Thaw, William
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US14/966,948
• Publication Number:
  US 20160173483A1
• Time in Patent Office: 1,215 Days
• Field of Search: 713168-174, 713182-186, 713202, 709206, 709225, 709229, 709249, 709389, 726 2- 9
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method is disclosed. The method includes transmitting by a computing device, an account creation request to a remote server computer. The method further includes automatically provisioning the computing device with an access token in response to receiving a request to create the account.

Claims

1. A method comprising steps including:

receiving, by a server computer from a computing device comprising an application, user information input into the computing device by a user of the computing device, and device information;

determining, by the server computer, if the user information and the device information is already associated with an account by determining if the user information or the device information is stored in a database;

after determining that the user information and the device information is not already associated with the account, causing, by the server computer, the application on the computing device to present an account creation query for an account;

receiving, by the server computer via the application on the computing device, a request to create the account, the request including account information entered into the computing device by the user;

initiating, by the server computer, the creation of the account;

performing, by the server computer, a risk analysis on at least the account information and the device information to determine if a risk of provisioning access data to the computing device exceeds a predetermined threshold;

determining, by the server computer, that the risk of provisioning the access data to the computing device does not exceed the predetermined threshold; and

initiating, by the server computer, provisioning of the account with the access data automatically in response to the creation of the account,

wherein the steps of initiating the creation of the account, and initiating provisioning of the account with the access data automatically in response to the creation of the account occur without additional user input, and

wherein provisioning of the account with the access data comprises transmitting the access data to the computing device to store the access data on the computing device.

2. The method of claim 1, wherein the account is unrelated to the application, and wherein the account and the application are associated with different entities.

3. The method of claim 1, wherein the server computer is a token service computer.

4. The method of claim 1, wherein the access data allows the user to enter a building.

5. The method of claim 1,

wherein the device information was automatically gathered without human intervention by a second application on the computing device.

6. A server computer comprising:

a processor; and

a memory comprising a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor, for implementing a method comprising

receiving, from a computing device comprising an application, user information input into the computing device by a user of the computing device, and device information;

determining if the user information and the device information is already associated with an account by determining if the user information or the device information is stored in a database;

after determining that the user information and the device information is not already associated with the account, causing the application on the computing device to present an account creation query for an account;

receiving, via the application on the computing device, a request to create the account, the request including account information entered into the computing device by the user;

initiating the creation of the account;

performing a risk analysis on at least the account information and the device information to determine if a risk of provisioning access data to the computing device exceeds a predetermined threshold;

determining that the risk of provisioning the access data to the computing device does not exceed the predetermined threshold; and

initiating provisioning of the account with the access data automatically in response to the creation of the account,

wherein the steps of initiating the creation of the account, and initiating provisioning of the account with the access data automatically in response to the creation of the account occur without additional user input, and

wherein provisioning of the account with the access data comprises transmitting the access data to the computing device to store the access data on the computing device.

7. The server computer of claim 6, wherein the account is unrelated to the application, and wherein the account and the application are associated with different entities.

8. The server computer of claim 6, wherein the server computer is a token service computer.

9. The server computer of claim 6, wherein the access data allows the user to enter a building.

10. The server computer of claim 6, wherein the

the device information was automatically gathered without human intervention by a second application on the computing device.

11. A method comprising:

providing, by a computing device comprising an application to a server computer, user information and device information, which causes the server computer to determine if the user information and the device information is already associated with an account by determining if the user information or the device information is stored in a database;

receiving, by the application in the computing device, an account creation query;

in response to receiving the account creation query, transmitting, by the computing device to the server computer, an account creation request comprising account information to the server computer, which causes the server computer to perform a risk analysis on at least the account information and the device information to determine if a risk of provisioning access data to the computing device exceeds a predetermined threshold, and determine that the risk of provisioning the access data to the computing device does not exceed the predetermined threshold, and

wherein an account is created thereafter and the server computer then automatically transmits and provisions the access data to the computing device in response to the creation of the account without additional user input; and

receiving and storing, by the computing device, the access data associated with the account in the computing device.

12. The method of claim 11, further comprising:

gathering, by a second application on the computing device, the device information about the device without user interaction.

13. The method of claim 11, wherein the computing device is a mobile device, and the device information comprises a secure element identifier, a phone number, an IMEI number, an IMSI number, a SIM card number, or a device serial number.

14. The method of claim 11, wherein the access data is used to access a building.

15. The method of claim 11, wherein the application performs an identity and verification process before receiving the access data.

16. The method of claim 11, further comprising:

providing, by the computing device, the access data to an access device, which transmits an authorization request message including the access data to an issuer computer via an acquirer computer and a payment processing network.

17. A computing device comprising:

a processor; and

a memory comprising a computer readable medium coupled to the processor, the computer readable medium comprising an application and comprising code, executable by the processor, for implementing a method comprising

providing to a server computer, user information and device information, which causes the server computer to determine if the user information and the device information is already associated with an account by determining if the user information or the device information is stored in a database;

receiving, by the application, an account creation query;

in response to receiving the account creation query, transmitting, to the server computer, an account creation request comprising account information to the server computer, which causes the server computer to perform a risk analysis on at least the account information and the device information to determine if a risk of provisioning access data to the computing device exceeds a predetermined threshold, and determine that the risk of provisioning the access data to the computing device does not exceed the predetermined threshold, and

wherein an account is created thereafter and the server computer then automatically transmits and provisions the access data to the computing device in response to the creation of the account without additional user input; and

receiving and storing the access data associated with the account in the computing device.

18. The computing device of claim 17, wherein the method further comprises:

gathering, by a second application on the computing device, the device information about the device without user interaction.

19. The computing device of claim 17, wherein the access data comprises a payment token that is a substitute for a credit or debit card account number that is issued by an issuer, the application being an issuer application associated with the issuer.

20. The computing device of claim 17, wherein the computing device is a mobile phone.