SECURE PROVISIONING OF CREDENTIALS ON AN ELECTRONIC DEVICE

• US 20150058191A1
• Filed: 11/27/2013
• Published: 02/26/2015
• Est. Priority Date: 08/26/2013
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Khan, Ahmer A., Haggerty, David T., Dicker, George R., Linde, Joakim, Adler, Mitchell D., Rosen, Zachary A., Hauck, Jerrold V., Vaid, Yousuf H., Sharp, Christopher
• Application Number:
  US14/092,205
• Publication Number:
  US 20150058191A1
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment

Abstract

Systems, methods, and computer-readable media for provisioning credentials on an electronic device are provided. In one example embodiment, a secure platform system may be in communication with an electronic device and a financial institution subsystem. The secure platform system may be configured to, inter alia, receive user account information from the electronic device, authenticate a user account with a commercial entity using the received user account information, detect a commerce credential associated with the authenticated user account, run a commercial entity fraud check on the detected commerce credential, commission the financial institution subsystem to run a financial entity fraud check on the detected commerce credential based on the results of the commercial entity fraud check, and facilitate provisioning of the detected commerce credential on the electronic device based on the results of the financial entity fraud check. Additional embodiments are also provided.

Claims

1. A secure platform system in communication with an electronic device and a financial institution subsystem, the secure platform system comprising:

a processor component;

a memory component; and

a communications component, the secure platform system configured to;

receive user account information from the electronic device;

authenticate a user account with a commercial entity using the received user account information;

detect a commerce credential associated with the authenticated user account;

run a commercial entity fraud check on the detected commerce credential;

commission the financial institution subsystem to run a financial entity fraud check on the detected commerce credential based on the results of the commercial entity fraud check; and

facilitate provisioning of the detected commerce credential on the electronic device based on the results of the financial entity fraud check.

2. The secure platform system of claim 1, further configured to:

transmit to the electronic device a request for user selection of the detected commerce credential when the result of the financial entity fraud check meets a particular standard;

receive user selection of the detected commerce credential from the electronic device in response to the transmitted request; and

provision the detected commerce credential on the electronic device when the user selection is received.

3. The secure platform system of claim 1, wherein the commercial entity fraud check comprises analyzing data indicative of a characteristic of the authenticated user account.

4. The secure platform system of claim 3, wherein the data is indicative of a relationship between the detected commerce credential and the authenticated user account.

5. The secure platform system of claim 3, wherein at least a portion of the data is not available to the financial institution subsystem.

6. The secure platform system of claim 3, wherein the data is indicative of at least one of the following:

the age of the authenticated user account;

the length of time that the detected commerce credential has been associated with the authenticated user account;

the percentage of the overall age of the authenticated user account during which the detected commerce credential has been associated with the authenticated user account;

the percentage of the overall age of the detected commerce credential during which the detected commerce credential has been associated with the authenticated user account;

the number of times the detected commerce credential has been used for payment by the authenticated user account;

the duration of time since the detected commerce credential was last used for payment by the authenticated user account; and

the number of times a primary account number of the detected commerce credential has been associated with the authenticated user account.

7. The secure platform system of claim 3, wherein:

the financial entity fraud check comprises analyzing other data; and

at least a portion of the other data is not available to the secure platform system.

8. The secure platform system of claim 1, wherein the commercial entity fraud check comprises analyzing data indicative of a characteristic of the electronic device.

9. The secure platform system of claim 8, wherein at least a portion of the data is not available to the financial institution subsystem.

10. The secure platform system of claim 8, wherein the data is indicative of at least one of the following:

whether the detected commerce credential was used to purchase the electronic device;

a comparison of the current location of the electronic device and a first location associated with at least one of the detected credential and the authenticated user account;

a comparison of the location where the electronic device was purchased and a second location associated with at least one of the detected credential and the authenticated user account;

the duration of time between when the electronic device was purchased and when the commercial entity fraud check is run; and

the duration of time between when the electronic device was first turned on and when the commercial entity fraud check is run.

11. A method comprising:

authenticating a user account with a commercial entity using user account information received from an electronic device;

detecting at least one commerce credential associated with the authenticated user account; and

running a commercial entity fraud risk analysis on each of the at least one detected commerce credential using data available to the commercial entity.

12. The method of claim 11, wherein:

the at least one commerce credential was issued by a financial institution subsystem; and

at least a portion of the data is not available to the financial institution subsystem.

13. The method of claim 11, further comprising running a financial entity fraud risk analysis on at least a subset of the at least one detected commerce credential.

14. The method of claim 13, wherein the subset comprises each credential of the at least one detected commerce credential that passed the commercial entity fraud risk analysis.

15. The method of claim 13, wherein:

the subset comprises each of the at least one detected commerce credential; and

the running of the commercial entity fraud risk analysis is at least partially concurrent with the running of the financial entity fraud risk analysis.

16. The method of claim 13, wherein:

the running of the financial entity fraud risk analysis comprises using other data available to a financial institution subsystem; and

at least a portion of the other data is not available to the commercial entity.

17. The method of claim 13, further comprising provisioning a particular credential of the at least one detected commerce credential on the electronic device, wherein the particular credential passed both the commercial entity fraud risk analysis and the financial entity fraud risk analysis.

18. The method of claim 13, further comprising:

presenting to a user of the electronic device a list of each credential of the at least one detected commerce credential that passed both the commercial entity fraud risk analysis and the financial entity fraud risk analysis;

receiving a user selection of a particular credential from the presented list; and

provisioning the particular credential on the electronic device in response to receiving the user selection.

19. The method of claim 13, further comprising:

presenting to a user of the electronic device a list of each credential of the at least one detected commerce credential that passed both the commercial entity fraud risk analysis and the financial entity fraud risk analysis;

receiving user selection of a particular credential from the presented list;

receiving user authentication of the particular credential; and

provisioning the particular credential on the electronic device in response to receiving both the user selection and the user authentication.

20. A secure platform system in communication with an electronic device and a financial institution subsystem, the secure platform system comprising:

a processor component;

a memory component; and

a communications component, the secure platform system configured to;

receive user account information from the electronic device;

authenticate a user account using the received user account information;

detect a commerce credential associated with the authenticated user account;

run a commercial entity fraud check on the detected commerce credential; and

instruct the financial institution subsystem to run a financial entity fraud check on the detected commerce credential when the result of the commercial entity fraud check meets a particular standard.

21. The secure platform system of claim 20, further configured to transmit to the electronic device a request for user selection of the detected commerce credential when the result of the financial entity fraud check meets another particular standard.

22. The secure platform system of claim 21, further configured to:

receive user selection of the detected commerce credential from the electronic device in response to the transmitted request; and

provision the detected commerce credential on the electronic device when the user selection is received.

23. The secure platform system of claim 20, further configured to transmit to the electronic device a request for user selection of the detected commerce credential when the result of the commercial entity fraud check meets the particular standard.

24. The secure platform system of claim 23, further configured to:

receive user selection of the detected commerce credential from the electronic device in response to the transmitted request; and

instruct the financial institution subsystem to run the financial entity fraud check on the detected commerce credential when the user selection is received.

25. The secure platform system of claim 20, further configured to provision the detected commerce credential on the electronic device based on both the result of the commercial entity fraud check and the result of the financial entity fraud check.

26. An electronic device comprising:

a contactless proximity-based communication component;

another communication component; and

a processor configured to;

communicate user account information to a commercial entity via the other communication component;

receive account authentication information from the commercial entity via the other communication component based on the user account information; and

in response to the received account authentication information, transmit a request to the commercial entity via the other communication component for initiating a credential provisioning process.

27. The electronic device of claim 26, wherein:

the processor is further configured to detect the presence of the contactless proximity-based communication component; and

the processor is configured to transmit the request in response to the received account authentication information and in response to the detected presence.

28. The electronic device of claim 26, further comprising a secure element, wherein:

the processor is further configured to detect the absence of any credential on the secure element; and

the processor is configured to transmit the request in response to the received account authentication information and in response to the detected absence.

29. A non-transitory computer-readable medium comprising computer-readable instructions recorded thereon for:

authenticating a user account with a commercial entity using user account information received from an electronic device;

detecting a commerce credential associated with the authenticated user account; and

running a commercial entity fraud risk analysis on the detected commerce credential using data available to the commercial entity.

30. The non-transitory computer-readable medium of claim 29, wherein:

the detected commerce credential was issued by a financial institution subsystem;

at least a portion of the data is not available to the financial institution subsystem; and

the non-transitory computer-readable medium further comprises additional computer-readable instructions recorded thereon for instructing the financial institution subsystem to run a financial entity fraud risk analysis on the detected commerce credential.