System and method for managing mobile wallet and its related credentials

• US 8,843,125 B2
• Filed: 12/02/2011
• Issued: 09/23/2014
• Est. Priority Date: 12/30/2010
• Status: Active Grant

• Current Assignee: Fintiv, Inc.
• Original Assignee: SK C&C Company Limited (SK Inc.)
• Inventors: Kwon, Yongsung, Hong, Hyungjoon, Kang, Jiwon, Kim, Hyunjin
• Primary Examiner(s): Bhattacharya, Sam
• Application Number:
  US13/310,091
• Publication Number:
  US 20120172026A1
• Time in Patent Office: 1,026 Days
• Field of Search: 455/410, 455/418, 455/419, 455/558, 705/16, 705/39, 705/41
• US Class Current: 455/419
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for provisioning a contactless card applet in a mobile device with a mobile wallet application, including activating the mobile wallet application, connecting to a Trusted Service Manager (TSM) system, synchronizing the mobile wallet application with the TSM system, displaying a contactless card applet based on attributes of the mobile device, receiving a selection of a contactless card applet, retrieving a widget and a wallet management applet (WMA) corresponding to the contactless card applet, and provisioning the selected contactless card applet, the widget, and the WMA. A wallet management system (WMS) in a non-transitory storage medium to store and manage mobile wallet account information including a wallet client management component, a widget management component, a device profile management component, and a rule engine.

Claims

1. A method for installing a wallet application in a mobile device, comprising:

requesting, by the mobile device, a mobile wallet application comprising a corresponding Over-the-Air (OTA) proxy;

receiving mobile wallet application installation information;

installing the mobile wallet application in the mobile device;

capturing mobile device information by using the OTA proxy, the mobile device information comprising secure element (SE) information; and

transmitting the mobile device information for registering the installed mobile wallet application.

2. The method of claim 1, wherein installing the mobile wallet application in the mobile device comprises automatically installing upon receipt of the mobile wallet application installation information.

3. The method of claim 1, further comprising provisioning a wallet management applet (WMA) container into the SE of the mobile device.

4. The method of claim 1, wherein receiving mobile wallet application installation information comprises:

receiving a Wireless Application Protocol (WAP) message with an embedded Uniform Resource Locator (URL) from a Short Message Service (SMS) platform.

5. The method of claim 1, wherein capturing mobile device information comprises:

capturing at least one of an International Mobile Equipment Identity (IMEI), a Mobile Equipment Identifier (MEID), a Mobile Subscriber Integrated Services Digital Network Number (MSISDN), a Card Production Life Cycle (CPLC), a Card Serial Number (CSN), a Card Image Number (CIN), and an Integrated Circuit Card Identification (ICCID).

6. The method of claim 3, wherein provisioning a WMA container into the SE comprises:

transmitting a request to provision the WMA container; and

receiving the WMA container installation information in Application Protocol Data Unit (APDU) commands; and

provisioning the converted APDU commands to the SE.

7. A method for managing mobile wallet accounts installed on mobile devices, comprising:

receiving a request for a mobile wallet application from a mobile device;

transmitting the mobile wallet application to the mobile device;

receiving mobile device information, the mobile device information comprising secure element (SE) information; and

registering the mobile device and the corresponding mobile wallet application in a trusted service manager (TSM).

8. The method of claim 7, wherein registering the mobile device and the corresponding mobile wallet application in a TSM comprises:

checking for registered account information corresponding to the requesting mobile device in the TSM system; and

registering the mobile device in the TSM system in response to no corresponding registered account information being found in the TSM system, or updating account information in response to finding the corresponding registered account information in the TSM system.

9. The method of claim 7, further comprising transmitting an accompanying over-the-air (OTA) proxy application to the mobile device.

10. The method of claim 8, wherein registering the mobile device comprises:

creating a mobile identifier for the installed mobile wallet application;

storing the mobile device information; and

connecting the mobile device information with the mobile identifier.

11. A method for provisioning a contactless card applet in a mobile device comprising a mobile wallet application, the method comprising:

activating the mobile wallet application;

connecting to a Trusted Service Manager (TSM) system;

synchronizing the mobile wallet application with the TSM system;

displaying a contactless card applet based on attributes of the mobile device;

receiving a selection of a contactless card applet;

retrieving a widget and a wallet management applet (WMA) corresponding to the contactless card applet; and

provisioning the selected contactless card applet, the widget, and the WMA.

12. The method of claim 11, wherein synchronizing the mobile wallet application with the TSM system comprises:

receiving a change made to a mobile wallet application user account on the TSM system; and

provisioning the changed information.

13. The method of claim 11, wherein synchronizing the mobile wallet application with the TSM system comprises:

checking for a change made to a configuration of the mobile wallet application; and

transmitting the change to the TSM system.

14. The method of claim 11, wherein displaying a contactless card applet based on attributes of the mobile device comprises:

retrieving mobile device information comprising SE information;

transmitting the mobile device information; and

receiving filtered contactless card applet for provisioning, wherein the contactless card applet is filtered based on the mobile device information.

15. The method of claim 14, wherein displaying the contactless card applet further comprises:

receiving filtered contactless card applet for provisioning, wherein the contactless card applet is filtered based on the business rules.

16. The method of claim 11, wherein provisioning the selected contactless card applet, WMA and widget comprises:

transmitting a request for installation of the contactless applet and the corresponding widget and WMA to be installed, wherein the WMA is a software application configured to store account specific information and the widget is an application configured to interface with a user of the mobile device; and

receiving the contactless applet, the WMA, and the widget information through OTA proxy.

17. The method of claim 16, wherein account specific information comprises at least one of a payment card number, a security code, an expiration date, and a personal identification number (PIN).

18. A wallet management system (WMS) in a non-transitory storage medium to store and manage mobile wallet account information, comprising:

a wallet client management component configured to store and to manage a mobile wallet application;

a widget management component configured to store and to manage widgets;

a device profile management component configured to store mobile device information; and

a rule engine configured to filter a widget based on the mobile device information,

wherein said wallet management system is configured to receive the mobile device information from a mobile device and store the mobile device information in the device profile management component, and

wherein said wallet management system is configured to register the mobile device and the mobile wallet application in a Trusted Service Manager (TSM) system.

19. The WMS of claim 18, wherein the wallet client management component further stores wallet application specific information comprising at least wallet application type and wallet application manufacturer information.

20. The WMS of claim 18, wherein the mobile device information comprises at least one of a mobile device type, a supporting Operating System (OS), a mobile service provider, a mobile device manufacturer, and a secure element (SE) type.

21. The WMS of claim 18, further comprising a user profile management component to capture and manage user identifying information.

22. The WMS of claim 18, wherein the WMS is hosted on the TSM system.

23. A mobile device, comprising:

a secure element (SE);

a mobile wallet application configured to store a widget corresponding to a contactless card applet, wherein the contactless card applet is stored in the SE;

a wallet management applet (WMA) corresponding to the contactless card applet, wherein the WMA is stored in the SE; and

an over-the-air (OTA) proxy configured to provision the contactless card applet, a widget corresponding to the contactless card applet, and the WMA,

wherein said OTA proxy is configured to capture mobile device information comprising SE information; and

wherein said OTA proxy is configured to transmit the mobile device information for registering the mobile wallet application.

24. The mobile device of claim 23, wherein WMA is configured to store account information associated with the contactless card applet, and the widget is configured to include a user interface.

25. The mobile device of claim 24, wherein the account information comprises at least one of a card number to access financial information, a security code, a personal identification number (PIN), and an expiration date.