Automated account provisioning

• US 9,516,487 B2
• Filed: 11/18/2014
• Issued: 12/06/2016
• Est. Priority Date: 11/19/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Powell, Glenn Leon, Sheets, John F., Karpenko, Igor
• Primary Examiner(s): Afshar, Kamran
• Assistant Examiner(s): Seyedvosoghi, Farid
• Application Number:
  US14/546,955
• Publication Number:
  US 20150140960A1
• Time in Patent Office: 749 Days
• Field of Search: 455/406, 455/407, 455/558, 379/114.01, 725/14.1, 705/41, 705/71, 705/44, 705/39, 705/72, 705/35, 705/76, 705/64, 726/26
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/1457 using an account
• CPC Class Codes: H04L 12/1464 using a card, such as credit card, prepay card or SIM
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/75 Account location specifications
• CPC Class Codes: H04M 15/751 Card based account, e.g. smart card, SIM card or USIM
• CPC Class Codes: H04M 15/755 Account identification
• CPC Class Codes: H04M 15/7556 by SIM, e.g. smart card account in SCP, SDP or SN
• CPC Class Codes: H04M 15/8044 Least cost routing
• CPC Class Codes: H04M 17/02 Coin-freed or check-freed systems , e.g. mobile- or card-operated phones, public telephones or booths
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/24 : Accounting or billing
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring

Abstract

Embodiments of the present invention are directed to systems, methods, and apparatus for allowing an issuer to initiate account provisioning on a mobile device without interacting with an accountholder. The issuer may initiate the process by sending a provisioning information request message to a mobile device with a secure element. The mobile device may recognize the provisioning request message and gather the requisite provisioning information without requiring user input. The provisioning information may include information associated with the secure element of the mobile device. The mobile device may then send a provisioning request message to a provisioning system. The provisioning request message may include the requisite provisioning information to allow the provisioning system to provision the financial account on the secure element of the mobile device.

Claims

1. A method comprising:

receiving, by a mobile communication device, an information request message from an issuer server computer thereby initiating provisioning of a payment account on the mobile communication device without a user interacting with the mobile communication device, wherein the issuer server computer is associated with an issuer that issued the payment account to the user;

automatically determining, by the mobile communication device, provisioning information associated with a secure memory in response to the information request message and without input of the user operating the mobile communication device;

generating, by the mobile communication device, a provisioning request message including the provisioning information;

sending, by the mobile communication device, the provisioning request message including the provisioning information to a provisioning system or the issuer server computer;

receiving, by the mobile communication device, a provisioning response message including provisioning data from the provisioning system, wherein the provisioning data is generated using the provisioning information associated with the secure memory; and

storing, by the mobile communication device, the provisioning data in the secure memory, wherein the provisioning data associates the mobile communication device with the payment account.

2. The method of claim 1, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

3. The method of claim 1, wherein the information request message includes one or more of an authorization code, an account identifier and a mobile device identifier.

4. The method of claim 3, wherein the provisioning request message includes one or more of the authorization code, the account identifier and the mobile device identifier.

5. The method of claim 1, further comprising:

encrypting the provisioning request message prior to sending the provisioning request message to the provisioning system.

6. The method of claim 1 further comprising:

identifying the information request message as a provisioning information request message based on an identifier included in the information request message, and without interacting with the user.

7. The method of claim 1, wherein the provisioning data includes a primary account number or a payment token.

8. A mobile communication device comprising:

a secure memory;

a processor, and

a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, that when executed by the processor, causes the processor to;

receive an information request message from an issuer server computer thereby initiating provisioning of a payment account on the mobile communication device without a user interacting with the mobile communication device, wherein the issuer server computer is associated with an issuer that issued the payment account to the user;

automatically determine provisioning information associated with the secure memory in response to the information request message and without input of the user operating the mobile communication device;

generate a provisioning request message including the provisioning information;

send the provisioning request message including the provisioning information to a provisioning system or the issuer server computer;

receive a provisioning response message including provisioning data from the provisioning system, wherein the provisioning data is generated using the provisioning information associated with the secure memory; and

store the provisioning data in the secure memory, wherein the provisioning data associates the mobile communication device with the payment account.

9. The mobile communication device of claim 8, wherein the provisioning information associated with the secure memory includes one or more of secure domain information, network operator information, user information, trusted service manager information and encryption key information.

10. The mobile communication device of claim 8, wherein the information request message includes one or more of an authorization code, an account identifier and a mobile device identifier.

11. The mobile communication device of claim 10, wherein the provisioning request message includes one or more of the authorization code, the account identifier and the mobile device identifier.

12. The mobile communication device of claim 8, wherein the code, when executed by the processor, further causes the processor to:

encrypt the provisioning request message prior to sending the provisioning request message to the provisioning system or the issuer server computer.

13. The mobile communication device of claim 8, wherein the code, when executed by the processor, further causes the processor to:

identify the information request message as a provisioning information request message based on an identifier included in the information request message without interacting with the user.

14. The mobile communication device of claim 8, wherein the provisioning data includes a primary account number or a payment token.