In-market personalization of payment devices

• US 9,172,539 B2
• Filed: 10/07/2011
• Issued: 10/27/2015
• Est. Priority Date: 09/14/2011
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Tanner, Colin, Evans, Paul Michael, Smith, Theresa L.
• Primary Examiner(s): Wang, Harris C
• Application Number:
  US13/268,155
• Publication Number:
  US 20130067216A1
• Time in Patent Office: 1,481 Days
• Field of Search: 713/155
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3558 Preliminary personalisation for transfer to user
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for remotely personalizing payment devices for consumers are described. In an embodiment, a system includes a MOTAPS server computer that provides data preparation functions and a trusted service provider (TSP) personalization server computer. The system also includes a service provider computer operably coupled to the TSP personalization server computer, and a remote personalization device (RPD) operably coupled to the service provider computer. The RPD transmits personalization requests, receives personalization data, and personalizes a payment device before providing the personalized payment device to a consumer.

Claims

1. A system for remotely personalizing payment devices for consumers, comprising:

a Mobile Over-the-Air Provisioning Service (MOTAPS) server computer;

a trusted service provider (TSP) personalization server computer operatively coupled to the MOTAPS server computer, the TSP personalization server computer receiving personalization data from the MOTAPS server computer and transmitting personalization data and instructions;

a hardware security module (HSM) operatively coupled to the TSP personalization server computer;

an issuer server computer operably coupled to at least one of the MOTAPS server computer and the TSP personalization server computer;

a service provider server computer operably coupled to the TSP personalization server computer; and

a remote personalization device (RPD) operably coupled to the service provider server computer, the RPD receiving a request from a consumer to provide a personalized payment device to the consumer;

and wherein the TSP personalization server;

receives a personalization request from the RPD via the service provider server computer;

requests personalization data from the issuer server computer;

transmits commands to the RPD via the service provider server computer to obtain payment device data to identify an issuers'"'"' personalization key and to obtain diversification data for generating a diversified personalization key;

receives the requested payment device data and diversification data from the RPD via the service provider server computer;

generates, in concert with the HSM, session keys and converts data from the MOTAPS server computer into a payment device application process data unit (ADDU);

transmits the ADDU and personalization data via the service provider server computer to the RPD for loading onto a payment device associated with the RPD; and

receives a response from the RPD via the service provider server computer confirming that the payment device has been personalized.

2. The system of claim 1, wherein the HSM is coupled to the TSP personalization server computer via a dedicated local area network.

3. The system of claim 1, further comprising a hardware security token (HST) operably coupled to the RPD, the HST storing at least one cryptographic key required to authenticate the RPD to the TSP Personalization Server computer.

4. The system of claim 3, wherein the HST further comprises volatile memory for storing the at least one cryptographic key so that a power loss terminates a personalization session.

5. The system of claim 1, wherein the RPD is a kiosk comprising:

a housing;

a user interface located on an outside portion of the housing that is accessible to a consumer;

a card reader operably coupled to the user interface, the card reader also located on an outside portion of the housing that is accessible to a consumer;

a central processing unit (CPU) within the housing and operably coupled to the user interface and to a communication link, wherein the communication link provides for communications between the CPU and the service provider server computer;

a hardware security token (HST) operably coupled to the CPU;

a communication link operably connected to the CPU; and

a dispenser means for at least one of dispensing a personalized payment device to a consumer or retaining a faulty payment device.

6. The system of claim 5, wherein the dispenser means comprises:

a payment device reader operably coupled to the CPU;

a payment device storage and feed mechanism for transporting a stored payment device to the payment device reader;

a faulty payment device storage bin; and

a payment device dispenser.

7. The system of claim 5, wherein the CPU and the HST are housed within a secure enclosure within the housing.

8. The system of claim 1, wherein the TSP Personalization server computer is located within a secure hosting facility.

9. The system of claim 1, wherein the RPD comprises at least one of a kiosk, a desk top unit, or an industrial unit for personalizing payment devices in a batch mode.

10. The system of claim 3, wherein the HST supports X509 certificate application to initialize a Secure Socket Layer (SSL) session.

11. The system of claim 3, wherein the HST operates to hold at least on cryptograph in volatile memory such that a personalization session terminates when power is lost.

12. The system of claim 1, wherein the TSP personalization server computer is operated on behalf of a financial institution that issued a payment card account to a consumer.

13. The system of claim 1, wherein the RPD is configured to provide additional services comprising at least one of mobile phone top-up, informational services, advertising, coupon issuing, and coupon redemption.

14. The system of claim 5, further comprising a secure enclosure containing the CPU and the HST within the housing.

15. The system of claim 5, wherein the housing comprises a lockable protective casing that is tamper evident.

16. The system of claim 5, wherein the communications link comprises a mobile telephone link.