Systems and Methods for Identifying Devices by a Trusted Service Manager

• US 20120304254A1
• Filed: 05/25/2012
• Published: 11/29/2012
• Est. Priority Date: 05/26/2011
• Status: Active Grant

• Current Assignee: First Data Corporation (Fiserv Incorporated)
• Original Assignee: First Data Corporation (Fiserv Incorporated)
• Inventors: Musfeldt, Roger Lynn, Adkisson, Brent Dewayne, Kean, Brian
• Granted Patent: US 8,752,127 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Embodiments of the invention provide systems and methods for identifying devices by a trusted service manager. According to one example embodiment of the invention, a method for identifying communications is provided. The method can include receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and evaluating, by the service provider, the received CPLC information in order to identify the secure element.

Claims

1. A computer-implemented method for identifying communications, the method comprising:

receiving, by a service provider from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and

evaluating, by the service provider, the received CPLC information in order to identify the secure element.

2. The computer-implemented method of claim 1, further comprising:

identifying, by the service provider, a customer associated with the secure element.

3. The computer-implemented method of claim 1, wherein evaluating the received CPLC information comprises evaluating the CPLC information to determine a serial number for the secure element.

4. The computer-implemented method of claim 1, further comprising:

identifying, by the service provider based at least in part upon the received CPLC information, a key for unlocking the secure element; and

communicating, by the service provider to the device, the identified key in order to unlock the secure element.

5. The computer-implemented method of claim 4, wherein identifying a key comprises identifying a master key.

6. The computer-implemented method of claim 4, wherein identifying a key comprises:

identifying, by the service provider based at least in part upon the CPLC information, a manufacturer of the secure element; and

identifying, by the service provider, a master key associated with the manufacturer.

7. The computer-implemented method of claim 4, further comprising:

identifying, by the service provider based at least in part upon the CPLC information, a method utilized to lock the secure element,

wherein the key is identified based at least in part upon the identified method.

8. A method for incorporating identification information into device communications, the method comprising:

receiving, by a secure element associated with a device from an application stored on a separate memory of the device, a message to be communicated to a recipient;

associating, by the secure element, secure element identification information into the received message;

providing, by the secure element, the modified message to the application; and

directing, by the application, communication of the modified message to the recipient,

wherein the recipient utilizes the secure element identification information to identify an originator of the message.

9. The method of claim 8, wherein the secure element identification information comprises card production life cycle (CPLC) information.

10. A system for identifying communications, the system comprising:

at least one memory configured to store computer-executable instructions; and

at least one processor configured to access the at least one memory and execute the computer-executable instructions to;

receive, from a device, a message comprising card production life cycle (CPLC) information associated with a secure element incorporated into the device; and

evaluate the received CPLC information in order to identify the secure element.

11. The system of claim 10, wherein the at least one processor is further configured to execute the computer-executable instructions to:

identify a customer associated with the secure element.

12. The system of claim 10, wherein the computer-executable instructions to evaluate the received CPLC information comprise instructions to evaluate the CPLC information to determine a serial number for the secure element.

13. The system of claim 10, wherein the at least one processor is further configured to execute the computer-executable instructions to:

identify, based at least in part upon the received CPLC information, a key for unlocking the secure element; and

communicate, to the device, the identified key in order to unlock the secure element.

14. The system of claim 13, wherein the computer-executable instructions to identify a key comprise instructions to identify a master key.

15. The system of claim 14, wherein the computer-executable instructions to identify a key comprise instructions to:

identify, based at least in part upon the CPLC information, a manufacturer of the secure element; and

identify a master key associated with the manufacturer.

16. The system of claim 14, wherein the at least one processor is further configured to execute the computer-executable instructions to:

identify, based at least in part upon the CPLC information, a method utilized to lock the secure element,

wherein the key is identified based at least in part upon the identified method.