AUTOMATED ACCOUNT PROVISIONING

• US 20170046696A1
• Filed: 10/28/2016
• Published: 02/16/2017
• Est. Priority Date: 11/19/2013
• Status: Active Grant

• Current Assignee: Glen Leon Powell, Igor Karpenko, John F. Sheets
• Original Assignee: Glen Leon Powell, Igor Karpenko, John F. Sheets
• Inventors: POWELL, GLEN LEON, Sheets, John F., Karpenko, Igor
• Granted Patent: US 10,248,952 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/1457 using an account
• CPC Class Codes: H04L 12/1464 using a card, such as credit card, prepay card or SIM
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/75 Account location specifications
• CPC Class Codes: H04M 15/751 Card based account, e.g. smart card, SIM card or USIM
• CPC Class Codes: H04M 15/755 Account identification
• CPC Class Codes: H04M 15/7556 by SIM, e.g. smart card account in SCP, SDP or SN
• CPC Class Codes: H04M 15/8044 Least cost routing
• CPC Class Codes: H04M 17/02 Coin-freed or check-freed systems , e.g. mobile- or card-operated phones, public telephones or booths
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring

Abstract

Embodiments of the present invention are directed to systems, methods, and apparatus for allowing an issuer to initiate account provisioning on a mobile device without interacting with an accountholder. The issuer may initiate the process by sending a provisioning information request message to a mobile device with a secure element. The mobile device may recognize the provisioning request message and gather the requisite provisioning information without requiring user input. The provisioning information may include information associated with the secure element of the mobile device. The mobile device may then send a provisioning request message to a provisioning system. The provisioning request message may include the requisite provisioning information to allow the provisioning system to provision the financial account on the secure element of the mobile device.

Claims

1-20. -20. (canceled)

21. A method comprising:

authenticating, by a server computer, a user associated with a user payment account;

receiving, by the server computer, a mobile device identifier identifying a mobile device of the user;

generating, by the server computer, a provisioning information request message without interacting with the user, the provisioning information request message including at least the mobile device identifier and a provisioning information request identifier, wherein the provisioning information request identifier automatically causes the mobile device to gather provisioning information associated with a secure memory of the mobile device without interacting with the user; and

sending, by the server computer, the provisioning information request message to the mobile device, wherein the provisioning information request message initiates provisioning of the user payment account on the mobile device of the user.

22. The method of claim 21, wherein the provisioning information request message further includes one or more of an authorization code and an account identifier.

23. The method of claim 21, further comprising:

generating, by the server computer, an authorization code indicating that the user is authenticated by the server computer; and

incorporating the authorization code in the provisioning information request message.

24. The method of claim 21, further comprising:

receiving, by the server computer, the provisioning information from the mobile device;

generating, by the server computer, a provisioning request message including at least the provisioning information and the mobile device identifier; and

sending, by the server computer, the provisioning request message to a provisioning entity responsible for provisioning the user payment account on the mobile device of the user.

25. The method of claim 24, further comprising:

generating, by the server computer, an authorization code indicating that the user is authenticated by the server computer; and

incorporating the authorization code in the provisioning request message.

26. An issuer server computer comprising:

a processor; and

a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, that when executed by the processor, causes the processor to;

send an information request message to a mobile communication device, the information request message requesting provisioning information associated with a secure memory of the mobile communication device;

receive a response message including the provisioning information from the mobile communication device, wherein the provisioning information is automatically gathered by the mobile communication device in response to the information request message and without input of a user operating the mobile communication device; and

send a provisioning request message to a provisioning system such that provisioning data can be sent to the mobile communication device for associating the mobile communication device with a payment account, wherein the provisioning request message includes the provisioning information, and one or more of an account identifier and a mobile device identifier associated with the mobile communication device.

27. The issuer server computer of claim 26, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

28. The issuer server computer of claim 26, wherein the provisioning data includes a primary account number or a payment token.

29. The issuer server computer of claim 26, wherein the code, when executed by the processor, further causes the processor to:

generate an authorization code indicating that the provisioning request message associated with the authorization code is authorized and authenticated by the issuer server computer; and

include the authorization code in the provisioning request message.

30. A method comprising:

sending, by a server computer, an information request message to a mobile communication device, the information request message requesting provisioning information associated with a secure memory of the mobile communication device;

receiving, by the server computer, a response message including the provisioning information from the mobile communication device, wherein the provisioning information is automatically gathered by the mobile communication device in response to the information request message and without input of a user operating the mobile communication device; and

sending, by the server computer, a provisioning request message to a provisioning system such that provisioning data can be sent to the mobile communication device for associating the mobile communication device with a payment account, wherein the provisioning request message includes the provisioning information, and one or more of an account identifier and a mobile device identifier associated with the mobile communication device.

31. The issuer server computer of claim 30, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

32. The issuer server computer of claim 30, wherein the provisioning data includes a primary account number or a payment token.

33. The issuer server computer of claim 30, further comprising:

generating, by the server computer, an authorization code indicating that the provisioning request message associated with the authorization code is authorized and authenticated by the issuer server computer; and

including, by the server computer the authorization code in the provisioning request message.