EXPRESS MOBILE DEVICE ACCESS PROVISIONING METHODS, SYSTEMS, AND APPARATUS

• US 20150004934A1
• Filed: 06/26/2013
• Published: 01/01/2015
• Est. Priority Date: 06/26/2013
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: Qian, Nanjun, Li, Yuk Lun, Caceres, Manuel Enrique
• Granted Patent: US 9,585,006 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

Methods, systems, and apparatus enable provisioning of a mobile device with access information for an account. A secure element within a subscriber identity module (SIM) or universal integrated circuit card (UICC) of the mobile device may be provisioned to enable account access. Provisioning may be performed by obtaining card data for a card associated with an account using an automated data capture device, confirming validity of the account by exchanging the card data with a user authentication server, confirming validity of the mobile device by exchanging mobile device information with a device authentication server, sending a request from the mobile device to provision the mobile device after confirming validity of the account and the mobile device, receiving provisioning instructions to provision the mobile device with the access information for the account, and provisioning the mobile device with the access information for the account based on the provisioning instructions.

Claims

1. A method comprising steps of:

obtaining, using an automated data capture device of a mobile device containing a processor, card data for a card associated with an account;

in response to obtaining the card data;

confirming validity of the account by exchanging at least a portion of the card data with a remote user authentication server;

confirming validity of the mobile device by exchanging mobile device information with a remote device authentication server;

sending a request from the mobile device to provision the mobile device after confirming the validity of the account and the mobile device;

receiving provisioning instructions to provision the mobile device with access information for the account in response to the request; and

provisioning the mobile device with the access information for the account associated with the card based on the provisioning instructions.

2. The method of claim 1, further comprising:

obtaining user authentication data with the mobile device;

wherein the request is further based on the obtained user authentication data.

3. The method of claim 2, wherein the user authentication data is a biometric signature.

4. The method of claim 1, wherein the automated data capture device includes an imager and wherein the step of obtaining card data comprises:

capturing a visual image of the card using the imager; and

processing the visual image using the processor to obtain the card data.

5. The method of claim 1, wherein the automated data capture device includes a near field communication (NFC) module and wherein the step of obtaining card data comprises:

capturing a wireless data signal from the card using the NFC module; and

processing the wireless data signal using the processor to obtain the card data.

6. The method of claim 1, wherein the processor is configured to:

determine a current location of the mobile device;

compare the current location of the mobile device to a geographic limitation to determine compliance with the geographic limitation; and

prevent provisioning of the mobile device if the current location is not in compliance with the geographic limitation.

7. The method of claim 1, wherein the account is a credit card account and wherein the step of confirming validity of the account comprises:

transmitting, by the mobile device to the remote user authentication server, the portion of the card data for confirmation of validity of the credit card account;

receiving, by the mobile device from the remote user authentication server, an indication of validity of the credit card account; and

confirming validity of the credit card account, by the mobile device, based on the received indication of validity from the remote user authentication server.

8. The method of claim 7, wherein the step of confirming validity of the mobile device comprises:

transmitting, by the mobile device to the remote device authentication server, the mobile device information;

receiving, by the mobile device from the remote device authentication server, an indication of validity of the mobile device; and

confirming validity of the mobile device, by the mobile device, based on the received indication of validity from the remote device authentication server.

9. The method of claim 6, wherein the account is a location access account, the geographic limitation is an address of a building, and wherein the processor determines the current location of the mobile device based on global positioning system (GPS) information and compares the current location of the mobile device to the address of the building to determine compliance.

10. The method of claim 1, wherein the step of provisioning comprises:

provisioning a secure element within a subscriber identity module (SIM) or universal integrated circuit card (UICC) of the mobile device with the access information for the account.

11. A mobile device comprising:

a secure component;

an automated data capture device; and

a processor configured to;

obtain card data for a card associated with an account using the automated data capture device;

confirm validity of the account by exchanging at least a portion of the card data with a remote user authentication server;

confirm validity of the mobile device by exchanging mobile device information with a remote device authentication server;

send a request to provision the mobile device after confirming the validity of the account and the mobile device;

receive provisioning instructions to provisioning the mobile device with access information for the account in response to the instruction; and

provision the secure component of the mobile device with the access information for the account associated with the card based on the provisioning instructions.

12. The apparatus of claim 11, wherein the automated data capture device is an imaging device.

13. The apparatus of claim 11, wherein the automated data capture device is a near field communication (NFC) module.

14. The apparatus of claim 11, wherein the processor is further configured to obtain user authentication data and wherein the request is further based on the captured user authentication data.

15. The apparatus of claim 11, further comprising:

a biometric sensor coupled to the processor, the biometric sensor configured to obtain the user authentication data.

16. The apparatus of claim 11, wherein the storage component is a secure element within a subscriber identity module (SIM) or universal integrated circuit card (UICC).

17. A method comprising:

confirming validity, by a server containing a processor to a mobile device, of an account based on card data received from the mobile device that is remote to the server;

confirming validity, by the server to the mobile device, of the mobile device based on mobile device data received from the mobile device;

receiving, by the server from the mobile device, a mobile device request to provision the mobile device, the mobile device request including user authentication data; and

sending, by the server, to an enrollment server a provisioning request to provision the mobile device with access information for the account, the provisioning request including the card data, the device data, and the user authentication data.

18. The method of claim 17, further comprising the step of:

acknowledging, by the server to the mobile device, receipt of the mobile device request to provision the mobile device with access information for the account.

19. The method of claim 17, wherein the confirmation of the validity of the account is performed by a user authentication server and the confirmation of the validity of the device is performed by a device authentication server.

20. The method of claim 17, further comprising:

receiving, by the enrollment server, the provisioning request to provision the mobile device; and

sending to the mobile device provisioning instructions to provision a secure element within a subscriber identity module (SIM) or universal integrated circuit card (UICC) of the mobile device with the access information for the account.