Automated Account Provisioning

• US 20150140960A1
• Filed: 11/18/2014
• Published: 05/21/2015
• Est. Priority Date: 11/19/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Powell, Glenn Leon, Sheets, John F., Karpenko, Igor
• Granted Patent: US 9,516,487 B2
• Time in Patent Office: Days
• US Class Current: 455/406
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/1457 using an account
• CPC Class Codes: H04L 12/1464 using a card, such as credit card, prepay card or SIM
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/75 Account location specifications
• CPC Class Codes: H04M 15/751 Card based account, e.g. smart card, SIM card or USIM
• CPC Class Codes: H04M 15/755 Account identification
• CPC Class Codes: H04M 15/7556 by SIM, e.g. smart card account in SCP, SDP or SN
• CPC Class Codes: H04M 15/8044 Least cost routing
• CPC Class Codes: H04M 17/02 Coin-freed or check-freed systems , e.g. mobile- or card-operated phones, public telephones or booths
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring

Abstract

Embodiments of the present invention are directed to systems, methods, and apparatus for allowing an issuer to initiate account provisioning on a mobile device without interacting with an accountholder. The issuer may initiate the process by sending a provisioning information request message to a mobile device with a secure element. The mobile device may recognize the provisioning request message and gather the requisite provisioning information without requiring user input. The provisioning information may include information associated with the secure element of the mobile device. The mobile device may then send a provisioning request message to a provisioning system. The provisioning request message may include the requisite provisioning information to allow the provisioning system to provision the financial account on the secure element of the mobile device.

Claims

1. A method comprising:

receiving, by a mobile communication device, an information request message from an issuer server computer;

automatically determining, by the mobile communication device, provisioning information associated with a secure memory in response to the information request message and without input of a user operating the mobile communication device;

generating, by the mobile communication device, a provisioning request message including the provisioning information;

sending, by the mobile communication device, the provisioning request message including the provisioning information to a provisioning system or the issuer server computer;

receiving, by the mobile communication device, a provisioning response message including provisioning data from the provisioning system, wherein the provisioning data is generated using the provisioning information associated with the secure memory; and

storing, by the mobile communication device, the provisioning data in the secure memory, wherein the provisioning data associates the mobile communication device with a payment account.

2. The method of claim 1, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

3. The method of claim 1, wherein the information request message includes one or more of an authorization code, an account identifier and a mobile device identifier.

4. The method of claim 3, wherein the provisioning request message includes one or more of the authorization code, the account identifier and the mobile device identifier.

5. The method of claim 1, further comprising:

encrypting the provisioning request message prior to sending the provisioning request message to the provisioning system.

6. The method of claim 1 further comprising:

identifying the information request message as a provisioning information request message based on an identifier included in the information request message, and without interacting with the user.

7. The method of claim 1, wherein the provisioning data includes a primary account number or a payment token.

9. The method of claim 7, wherein the provisioning information request message further includes one or more of an authorization code and an account identifier.

8. A method comprising:

authenticating, by a server computer, a user associated with a user payment account;

receiving, by the server computer, a mobile device identifier identifying a mobile device of the user;

generating, by the server computer, a provisioning information request message without interacting with the user, the provisioning information request message including at least the mobile device identifier and a provisioning information request identifier, wherein the provisioning information request identifier automatically causes the mobile device to gather provisioning information associated with a secure memory of the mobile device without interacting with the user; and

sending, by the server computer, the provisioning information request message to the mobile device of the user, wherein the provisioning information request message initiates provisioning of the user payment account on the mobile device of the user.

10. A mobile communication device comprising:

a secure memory;

a processor; and

a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, that when executed by the processor, causes the processor to;

receive an information request message from an issuer server computer;

automatically determine provisioning information associated with the secure memory in response to the information request message and without input of a user operating the mobile communication device;

generate a provisioning request message including the provisioning information;

send the provisioning request message including the provisioning information to a provisioning system or the issuer server computer;

receive a provisioning response message including provisioning data from the provisioning system, wherein the provisioning data is generated using the provisioning information associated with the secure memory; and

store the provisioning data in the secure memory, wherein the provisioning data associates the mobile communication device with a payment account.

11. The mobile communication device of claim 10, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

12. The mobile communication device of claim 10, wherein the information request message includes one or more of an authorization code, an account identifier and a mobile device identifier.

13. The mobile communication device of claim 12, wherein the provisioning request message includes one or more of the authorization code, the account identifier and the mobile device identifier.

14. The mobile communication device of claim 10, wherein the code, when executed by the processor, further causes the processor to:

encrypt the provisioning request message prior to sending the provisioning request message to the provisioning system or the issuer server computer.

15. The mobile communication device of claim 10, wherein the code, when executed by the processor, further causes the processor to:

identify the information request message as a provisioning information request message based on an identifier included in the information request message without interacting with the user.

16. The mobile communication device of claim 10, wherein the provisioning data includes a primary account number or a payment token.

17. An issuer server computer comprising:

a processor; and

a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, that when executed by the processor, causes the processor to;

send an information request message to a mobile communication device, the information request message requesting provisioning information associated with a secure memory of the mobile communication device;

receive a response message including the provisioning information from the mobile communication device, wherein the provisioning information is automatically gathered by the mobile communication device in response to the information request message and without input of a user operating the mobile communication device; and

send a provisioning request message to a provisioning system such that provisioning data can be sent to the mobile communication device for associating the mobile communication device with a payment account, wherein the provisioning request message includes the provisioning information, and one or more of an account identifier and a mobile device identifier associated with the mobile communication device.

18. The issuer server computer of claim 17, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

19. The issuer server computer of claim 17, wherein the provisioning data includes a primary account number or a payment token.

20. The issuer server computer of claim 17, wherein the code, when executed by the processor, further causes the processor to:

generate an authorization code indicating that the provisioning request message associated with the authorization code is authorized and authenticated by the issuer server computer; and

include the authorization code in the provisioning request message.