MOBILE PAYMENT APPLICATION ARCHITECTURE

• US 20110078081A1
• Filed: 09/28/2010
• Published: 03/31/2011
• Est. Priority Date: 09/30/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Kekicheff, Marc B., Pirzadeh, Kiushan
• Granted Patent: US 10,454,693 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1467 involving prepayment

Abstract

A system, apparatus, and method for conducting payment transactions using a mobile device. Embodiments of the invention are directed to an architecture or system design for the functional elements residing in a mobile device that may be used to conduct a payment transaction. The inventive architecture may be implemented as a set of functional modules resident in a secure element that is embedded or otherwise incorporated into the mobile device.

Claims

1. An apparatus for conducting a payment transaction, comprising:

a secure element;

a plurality of functional modules installed in the secure element, the plurality of modules including

a mobile payment module operative to enable a consumer to conduct a payment transaction;

a mobile gateway authentication module operative to mutually authenticate a mobile gateway and the mobile payment module;

an over the air communication and data transfer module operative to transfer data and commands to conduct the payment transaction between a cellular network and the apparatus;

a process message module operative to convert messages received from the mobile gateway into commands that are executable by other of the plurality of functional modules and to convert responses from the other of the plurality of functional modules into messages that are understood by the mobile gateway; and

a multi-access module operative to share data common to a plurality of the consumer'"'"'s payment accounts between the plurality of functional modules; and

a user interface application installed outside of the secure element and operative to generate a user interface to enable the consumer to interact with the mobile payment module.

2. The apparatus of claim 1, wherein the multi-access module is operative to generate a separate instance of a multi-access application for each of the plurality of the consumer'"'"'s payment accounts, and further wherein the apparatus further comprises a data storage element containing data shared by each of the instances of the multi-access application.

3. The apparatus of claim 2, wherein the shared data comprises one or more of cryptographic keys, data used for a consumer verification method, account related data, or payment transaction data.

4. The apparatus of claim 2, wherein each instance of the multi-access application is associated with a unique value or set of values for one or more of file control information, application file locator information, or application interchange profile information.

5. The apparatus of claim 1, wherein the apparatus is contained in a mobile phone.

6. The apparatus of claim 1, wherein the secure element is a SIM card or a secure embedded element.

7. The apparatus of claim 1, further comprising a cryptography function module operative to encrypt or decrypt data or messages.

8. The apparatus of claim 2, wherein the shared data includes a counter that is updated when a transaction is performed using one of the consumer'"'"'s payment accounts.

9. The apparatus of claim of claim 2, wherein a first instance of the multi-access application corresponds to a domestic account of the consumer and a second instance of the multi-access application corresponds to an international account of the consumer.

10. The apparatus of claim 8, wherein the counter indicates a total number of transactions conducted using any of the plurality of the consumer'"'"'s payment accounts.

11. The apparatus of claim 8, wherein the counter indicates a total value of transactions conducted using any of the plurality of the consumer'"'"'s payment accounts.

12. A method of conducting a payment transaction, comprising:

providing a secure element containing a plurality of functional modules, wherein the functional modules include

a mobile payment module operative to enable a consumer to conduct the payment transaction;

a mobile gateway authentication module operative to mutually authenticate a mobile gateway and the mobile payment module;

an over the air communication and data transfer module operative to transfer data and commands to conduct the payment transaction between a cellular network and an apparatus containing the secure element;

a process message module operative to convert messages received from the mobile gateway into commands that are executable by other of the plurality of functional modules and to convert responses from the other of the plurality of functional modules into messages that are understood by the mobile gateway; and

a multi-access module operative to share data common to a plurality of the consumer'"'"'s payment accounts between the plurality of functional modules;

providing a user interface application external to the secure element and operative to generate a user interface to enable the consumer to interact with the mobile payment module;

configuring the multi-access module to generate a separate instance of a multi-access application for each of the plurality of the consumer'"'"'s payment accounts;

configuring the secure element to store shared data common to each of the instances of the multi-access application; and

enabling the consumer to interact with the user interface application to operate the mobile payment module and conduct the payment transaction.

13. The method of claim 12, wherein the shared data comprises one or more of cryptographic keys, data used for a consumer verification method, account related data, or payment transaction data.

14. The method of claim 12, wherein each instance of the multi-access application is associated with a unique value or set of values for one or more of file control information, application file locator information, or application interchange profile information.

15. The method of claim 12, further comprising installing the secure element in a mobile phone.

16. The method of claim 12, wherein the secure element is a SIM card or an element embedded in a mobile device.

17. The method of claim 12, wherein the plurality of functional modules further comprises a cryptography function module operative to encrypt or decrypt data or messages.

18. The method of claim 12, wherein the shared data includes a counter that is updated when a transaction is performed using any of the plurality of the consumer'"'"'s payment accounts.

19. The method of claim of claim 12, wherein a first instance of the multi-access application corresponds to a domestic account of the consumer and a second instance of the multi-access application corresponds to an international account of the consumer.

20. The method of claim 19, wherein the counter indicates a total number of transactions conducted using any of the plurality of the consumer'"'"'s payment accounts.