OVER THE AIR MANAGEMENT OF PAYMENT APPLICATION INSTALLED IN MOBILE DEVICE

• US 20160226882A1
• Filed: 01/29/2016
• Published: 08/04/2016
• Est. Priority Date: 09/22/2008
• Status: Active Grant

• Current Assignee: Christian Aabye, David William Wilson, Gavin Shenker, Hao Ngo, Joseph J. Mirizzi, Lauren White, Michael Lindelsee, Olivier Brand
• Original Assignee: Christian Aabye, David William Wilson, Gavin Shenker, Hao Ngo, Joseph J. Mirizzi, Lauren White, Michael Lindelsee, Olivier Brand
• Inventors: Aabye, Christian, Brand, Olivier, Lindelsee, Michael, Mirizzi, Joseph J., Ngo, Hao, Shenker, Gavin, White, Lauren, Wilson, David William
• Granted Patent: US 10,115,100 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems, apparatus, and methods for managing an application installed on a mobile device, such as a mobile phone are provided, so as to prevent or limit unauthorized use of the application, for example, when the mobile device is lost, stolen, or otherwise subject to unauthorized use. An input indicative of a password to access the application can be received. It may be determined that a predetermined number of password entry attempts has been reached based on the input. A request message to disable access to the application can be transmitted from the mobile device to a remote computer. One or more lock instructions for disabling access to the application can be received by the mobile device from the remote computer. The one or more lock instructions can be executed by the mobile device by modifying control data within a secure memory of the mobile device.

Claims

1. A computer-implemented method, comprising:

receiving, by a mobile device, an input indicative of a password to access an application installed on the mobile device;

determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;

transmitting, by the mobile device to a remote computer, a request message to disable access to the application;

receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application; and

executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device.

2. The computer-implemented method of claim 1, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application.

3. The computer-implemented method of claim 1, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device.

4. The computer-implemented method of claim 1, wherein the one or more lock instructions are received using an over-the-air communication channel.

5. The computer-implemented method of claim 1, where the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values.

6. The computer-implemented method of claim 1, wherein the application is a payment application used to conduct payment transactions.

7. The computer-implemented method of claim 1, further comprising:

receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and

executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

8. A mobile device, comprising:

a memory that stores one or more computer-executable instructions; and

a processor configured to access the memory and execute the computer-executable instructions to implement a method comprising;

receiving an input indicative of a password to access an application installed on the mobile device;

determining that a predetermined number of password entry attempts has been reached based on the input;

transmitting, to a remote computer, a request message to disable access to the application;

receiving, from the remote computer, one or more lock instructions for disabling access to the application; and

executing the one or more instructions to disable access the application by modifying control data within a secure memory of the mobile device.

9. The mobile device of claim 8, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application.

10. The mobile device of claim 8, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device.

11. The mobile device of claim 8, wherein the one or more lock instructions are received using an over-the-air communication channel.

12. The mobile device of claim 8, where the control data is used by the application to permit or deny access to one or more functions of the application.

13. The mobile device of claim 8, where the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values.

14. The mobile device of claim 8, wherein the application is a payment application used to conduct payment transactions.

15. The mobile device of claim 8, wherein the method further comprises:

receiving, from the remote computer, one or more unlock instructions for enabling access to the application; and

executing the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

16. A non-transitory computer-readable storage medium comprising one or more computer-executable instructions to implement a method, the method comprising:

receiving, by a mobile device, an input indicative of a password to access an application installed a mobile device;

determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;

transmitting, by the mobile device to a remote computer, a request message to disable access to the application;

receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application; and

executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device.

17. The non-transitory computer-readable storage medium of claim 16, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application.

18. The non-transitory computer-readable storage medium of claim 16, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device.

19. The non-transitory computer-readable storage medium of claim 16, wherein the one or more lock instructions are received using an over-the-air communication channel.

20. The non-transitory computer-readable storage medium of claim 16, where the method further comprises:

receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and

executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.