SYSTEMS FOR ENABLING TOKENIZED WEARABLE DEVICES

• US 20190311109A1
• Filed: 04/06/2018
• Published: 10/10/2019
• Est. Priority Date: 04/06/2018
• Status: Active Grant

• Current Assignee: Toronto-Dominion Bank
• Original Assignee: Toronto-Dominion Bank
• Inventors: D'AGOSTINO, Dino Paul, HALDENBY, Perry Aaron Jones, TSERETOPOULOS, Dean C. N., ECKER, Jeffrey Aaron, McPHEE, Adam Douglas, DUNJIC, Milos, LEE, John Jong Suk, JAGGA, Arun Victor
• Granted Patent: US 10,783,234 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06K 19/07762 the adhering arrangement making the record carrier wearable, e.g. having the form of a ring, watch, glove or bracelet record carriers for insertion in the human body for medical purposes A61B90/00; record carriers adapted for attachment to animals A01K11/00
• CPC Class Codes: G06Q 20/321 using wearable devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices

Abstract

A method for authenticating a wearable device is disclosed. The method includes: receiving, a signal representing an indication that the wearable device is in active use; in response to receiving the signal, updating a device database to associate a first status with the wearable device; receiving, from a tokenization service provider (TSP), a signal representing a first code derived by the TSP from decrypting a security token previously provisioned in the wearable device, wherein the security token was received at a terminal from the wearable device and transmitted to the TSP; obtaining, based on the received first code, a device identifier of the wearable device and an identifier of an account; querying the device database to verify that the wearable device is associated with the first status; verifying that the account is enabled for an operation initiated using the wearable device; and transmitting an authorization message to the terminal, the authorization message authorizing the operation.

Claims

1. A server comprising:

a communication module;

a memory;

a processor coupled to the memory and the communication module, wherein the processor is configured to;

receive, via the communication module, a signal representing an indication that a wearable device is in active use;

in response to receiving the signal, update a device database to associate a first status with the wearable device;

receive, via the communication module, a signal from a tokenization service provider (TSP) representing a first code derived by the TSP from decrypting a security token previously provisioned in the wearable device, wherein the security token was received at a terminal from the wearable device and transmitted to the TSP;

obtain, based on the received signal representing the first code, a device identifier of the wearable device and an identifier of an account;

query the device database to verify that the wearable device is associated with the first status;

verify that the account is enabled for an operation initiated using the wearable device; and

transmit, via the communication module, an authorization message to the terminal, the authorization message authorizing the operation.

2. The server of claim 1, wherein the indication that the wearable device is in active use comprises an indication that the wearable device is in motion.

3. The server of claim 1, wherein updating the device database comprises transmitting a request to a remote server to update the device database.

4. The server of claim 1, wherein the obtaining comprises receiving, from the TSP, a primary account number (PAN) derived from the security token.

5. The server of claim 1, wherein verifying that the account is enabled for the operation initiated using the wearable device comprises checking that the security token provisioned in the wearable device is associated with a PAN corresponding to the account.

6. The server of claim 1, wherein the processor is further configured to:

receive an indication that the wearable device is no longer in active use; and

update the device database to associate a second status with the wearable device.

7. The server of claim 1, wherein the first status indicates that the wearable device is enabled for use as a payment device and wherein the terminal is a point-of-sale terminal and the operation is a transaction.

8. The server of claim 1, wherein the authorization message is transmitted to the terminal after verifying that the wearable device is associated with the first status and that the account is enabled for the operation initiated using the wearable device.

9. A method for authenticating a wearable device, the method comprising:

receiving a signal representing an indication that the wearable device is in active use;

in response to receiving the signal, updating a device database to associate a first status with the wearable device;

receiving, from a tokenization service provider (TSP), a signal representing a first code derived by the TSP from decrypting a security token previously provisioned in the wearable device, wherein the security token was received at a terminal from the wearable device and transmitted to the TSP;

obtaining, based on the received signal representing the first code, a device identifier of the wearable device and an identifier of an account;

querying the device database to verify that the wearable device is associated with the first status;

verifying that the account is enabled for an operation initiated using the wearable device; and

transmitting an authorization message to the terminal, the authorization message authorizing the operation.

10. The method of claim 9, wherein the indication that the wearable device is in active use comprises an indication that the wearable device is in motion.

11. The method of claim 9, wherein updating the device database comprises transmitting a request to a remote server to update the device database.

12. The method of claim 9, wherein the obtaining comprises receiving, from the TSP, a primary account number (PAN) derived from the security token.

13. The method of claim 9, wherein verifying that the account is enabled for the operation initiated using the wearable device comprises checking that the security token provisioned in the wearable device is associated with a PAN corresponding to the account.

14. The method of claim 9, further comprising:

receiving an indication that the wearable device is no longer in active use; and

updating the device database to associate a second status with the wearable device.

15. The method of claim 9, wherein the first status indicates that the wearable device is enabled for use as a payment device and wherein the operation is a transaction.

16. The method of claim 9, wherein the authorization message is transmitted to the terminal after verifying that the wearable device is associated with the first status and that the account is enabled for the operation initiated using the wearable device.

17. A token registration system comprising:

a communication module;

memory;

a processor coupled to the memory and the communication module, wherein the processor is configured to;

transmit a request, to a tokenization service provider (TSP), to;

generate a security token to be provisioned in a wearable device; and

set a primary account number (PAN) associated with the security token to a default value, the default value being associated with a de-authorized account, the de-authorized account configured to prevent performance of a database operation;

after the security token has been provisioned on the wearable device, receive a request, from a first electronic device that is different from the wearable device, to associate the security token with an authorized account, the request identifying a first PAN associated with the authorized account; and

in response to receiving the request, transmit a request, to the TSP, to update the PAN associated with the security token from the default value to the first PAN.

18. The token registration system of claim 17, wherein the processor is further configured to receive and verify authentication data associated with the authorized account prior to transmitting the request to update the PAN associated with the security token.

19. The token registration system of claim 17, wherein the wearable device comprises a near-field communication (NFC)-enabled tag.

20. The token registration system of claim 17, wherein the processor is further configured to:

receive a request, from the first electronic device, to disassociate the security token from the authorized account; and

transmit a request, to the TSP, to switch the PAN associated with the security token from the first PAN to the default value.

21. The token registration system of claim 20, wherein the processor is further configured to:

receive, from the TSP, a first message indicating that the PAN associated with the security token has been updated; and

transmit, to the first electronic device, a second message indicating that the wearable device is enabled for use.

22. The token registration system of claim 21, further comprising, in response to receiving the first message, updating a devices database to associate a first status with the wearable device.