Remote server encrypted data provisioning system and methods

• US 10,255,456 B2
• Filed: 09/28/2015
• Issued: 04/09/2019
• Est. Priority Date: 09/26/2014
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Guglani, Abhishek, Sharma, Sanjeev, Chitalia, Jalpesh, Destremps, Gerald, Mardikar, Upendra, Xu, Minghua, Trevino, Jose Luis Rios, Singh, Brijendra
• Primary Examiner(s): Mehrmanesh, Amir
• Application Number:
  US14/867,947
• Publication Number:
  US 20160092696A1
• Time in Patent Office: 1,289 Days
• Field of Search: None
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

Embodiments of the invention are directed to methods, systems and devices for providing sensitive user data to a mobile device using an encryption key. For example, a mobile application on a mobile device may receive encrypted sensitive user data from a mobile application server, where the user sensitive data is encrypted with a key from a token server computer. The mobile application may then request that the encrypted payment information be sent to the token server. The mobile device may then receive a payment token associated with the payment information from the token server.

Claims

1. A method comprising:

receiving, by a mobile application provided on a mobile device from a user of the mobile device, an account identifier associated with an account of the user; and

providing, by the mobile application to a remote mobile application server, the account identifier without storing the account identifier on the mobile device;

receiving, by the mobile application from the remote mobile application server, encrypted account identifier associated with the account of the user, wherein the encrypted account identifier is encrypted by the remote mobile application server using an encryption key shared between the remote mobile application server and a token server computer external to the mobile device;

generating, by the mobile application, a token request message, the token request message including the encrypted account identifier;

sending, by the mobile application, the token request message to the token server computer via a token module provided on the mobile device, wherein the token server computer decrypts the encrypted account identifier using the encryption key previously shared with the remote mobile application server, identifies the account associated with decrypted account identifier, generates a token associated with the account, stores the token, and sends the token to the token module provided on the mobile device, wherein the token module interfaces with the token server computer external to the mobile device;

receiving, by the token module stored on mobile device, the token associated with the encrypted account identifier from the token server computer;

storing, by the token module, the token in a secure token memory of the mobile device accessible by the token module;

determining, by the token module, a token key associated with the stored token,

providing, by the token module, the token key to the mobile application for use as a token reference identifier for the token;

upon receiving the token key, initiating, by the mobile application, a transaction with a transacting entity using the token key; and

transmitting, by the token module, the token to the transacting entity to proceed with the transaction.

2. The method of claim 1, further comprising:

requesting, by the mobile device, a status of the token;

receiving, by the mobile device, a token status response from the token server computer; and

storing, by the mobile device, the status associated with the token in the token memory.

3. The method of claim 1, wherein the encryption key and the account identifier associated with the account of the user of the mobile device are stored by the remote mobile application server.

4. The method of claim 1, wherein the token memory is managed by the token module provided on the mobile device, the token module being associated with the token server computer such that the mobile device interfaces with the token server computer via the token module.

5. The method of claim 4, wherein the token module interfaces with an Application Programming Interface (API) of the token server computer.

6. A mobile device comprising:

a processor; and

a memory element comprising code, executable by the processor, for implementing a method comprising;

receiving, by a mobile application provided on the mobile device from a user of the mobile device, an account identifier associated with an account of the user; and

providing, by the mobile application to a remote mobile application server, the account identifier without storing the account identifier on the mobile device;

receiving, by the mobile application from the remote mobile application server, encrypted account identifier associated with the account of the user, wherein the encrypted account identifier is encrypted by the remote mobile application server using an encryption key shared between the remote mobile application server and a token server computer external to the mobile device;

generating, by the mobile application, a token request message, the token request message including the encrypted account identifier;

sending, by the mobile application, the token request message to the token server computer via a token module provided on the mobile device, wherein the token server computer decrypts the encrypted account identifier using the encryption key previously shared with the remote mobile application server, identifies the account associated with decrypted account identifier, generates a token associated with the account, stores the token, and sends the token to the token module provided on the mobile device, wherein the token module interfaces with the token server computer external to the mobile device;

receiving, by the token module stored on mobile device, the token associated with the encrypted account identifier from the token server computer;

storing, by the token module, the token in a secure token memory of the mobile device accessible by the token module;

determining, by the token module, a token key associated with the stored token,

providing, by the token module, the token key to the mobile application for use as a token reference identifier for the token;

upon receiving the token key, initiating, by the mobile application, a transaction with a transacting entity using the token key; and

transmitting, by the token module, the token to the transacting entity to proceed with the transaction.

7. The mobile device of claim 6, wherein the method further comprises:

requesting, by the mobile device, a status of the token;

receiving, by the mobile device, a token status response from the token server computer; and

storing, by the mobile device, the status associated with the token in the token memory.

8. The mobile device of claim 6, wherein the token memory is managed by the token module provided on the mobile device, the token module being associated with the token server computer such that the mobile device interfaces with the token server computer via the token module.

9. The mobile device of claim 8, wherein the token module interfaces with an Application Programming Interface (API) of the token server computer.