Mobile payment application architecture

• US 11,057,229 B2
• Filed: 09/06/2019
• Issued: 07/06/2021
• Est. Priority Date: 09/30/2009
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Pirzadeh, Kiushan, Kekicheff, Marc B.
• Primary Examiner(s): Kanevo, Virpi H
• Application Number:
  US16/563,652
• Publication Number:
  US 20190394054A1
• Time in Patent Office: 669 Days
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1467 involving prepayment

Abstract

A system, apparatus, and method for conducting payment transactions using a mobile device. Embodiments of the invention are directed to an architecture or system design for the functional elements residing in a mobile device that may be used to conduct a payment transaction. The inventive architecture may be implemented as a set of functional modules resident in a secure element that is embedded or otherwise incorporated into the mobile device.

Claims

1. An apparatus for conducting a payment transaction, comprising:

a mobile device;

an electronic processor configured to execute a set of instructions, wherein the electronic processor is incorporated into the mobile device;

a secure element incorporated into the mobile device, wherein the secure element is secure at least with respect to a user of the mobile device;

a user interface application installed on the mobile device, wherein the user interface application is external to the secure element, and Wherein the user interface application includes instructions which, when executed by the electronic processor, generate a user interface enabling the user of the mobile device to interact with a mobile payment module; and

a plurality of functional modules installed in the secure element, wherein the plurality of functional modules includes;

the mobile payment module, the mobile payment module interacting with the user interface application which is outside of, the secure element, including instructions which, when executed by the electronic processor, enable the user of the mobile device to conduct the payment transaction;

a process message module, the process message module including instructions which, when executed by the electronic processor, convert messages received from a mobile gateway into commands that are executable by other of the plurality of functional modules and convert responses from the other of the plurality of functional modules into messages that are understood by the mobile gateway; and

a multi-access module, the multi-access module including instructions which, when executed by the electronic processor, maintain a plurality of multi-access instances at the mobile device, wherein each of the plurality of multi-access instances represents a unique account of a plurality of accounts of the user of the mobile device, wherein each of the multi-access instances includes unique data, wherein the multi-access module maintains non-unique shared data such that each of the plurality of multi-access instances including unique data shares the non-unique shared data with the other multi-access instances whereby a storage requirement for the plurality of instances of the multi-access module is reduced.

2. The apparatus of claim 1, wherein the non-unique shared data further comprises one or more of:

cryptographic keys, data used for a consumer verification, account related data, and payment transaction data.

3. The apparatus of claim 1, further comprising a cryptography function module, wherein the cryptography function module includes instructions which, when executed by the electronic processor, encrypt or decrypt data or messages.

4. The apparatus of claim 1, wherein a first multi-access instance of the plurality of multi-access instances corresponds to a domestic account of the user of the mobile device, and a second multi-access instance of the plurality of multi-access instances corresponds to an international account of the user of the mobile device.

5. The apparatus of claim 1, wherein the secure element is secured at least in part by requiring that external access to the secure element is performed with a defined set of access commands.

6. The apparatus of claim 5, wherein the defined set of access commands comprises a select command that selects a particular account of the plurality of accounts stored on the secure element.

7. The apparatus of claim 6, wherein select command response data includes file control information.

8. The apparatus of claim 7, wherein the unique data of each of the multi-access instances maintained by the multi-access module comprises interchange profile data.

9. The apparatus of claim 5, wherein the defined set of access commands comprises a get processing options command that obtains options with respect to accessing the secure element, and wherein get processing options command response data contains at least one of:

file location data with respect to a selected account, and interchange profile data with respect to processing capabilities of the secure element.

10. The apparatus of claim 1, wherein fraud control with respect to the plurality of accounts of the user of the mobile device is based at least in part on the non-unique shared data.

11. A method of conducting a payment transaction, comprising:

maintaining, within a secure element of a mobile device, a multi-access module, the multi-access module including instructions which, when executed by an electronic processor of the mobile device, maintain a plurality of multi-access instances at the mobile device, wherein each of the plurality of multi-access instances represents a unique account of a plurality of accounts of a user of the mobile device, wherein each of the multi-access instances includes unique data, wherein the multi-access module maintains non-unique shared data such that each of the plurality of multi-access instances including unique data shares the non-unique shared data with the other multi-access instances whereby a storage requirement for the plurality of instances of the multi-access module is reduced;

maintaining, within the secure element of the mobile device, a process message module, the process message module including instructions which, when executed by the electronic processor, convert messages received from a mobile gateway into commands that are executable by other functional modules of a plurality of functional modules maintained within the secure element of the mobile device and convert responses from the other functional modules of the plurality of functional modules into messages that are understood by the mobile gateway;

maintaining, within the secure element of the mobile device, a mobile payment module including instructions which, when executed by the electronic processor, enable the user of the mobile device to conduct the payment transaction with the process message module and the multi-access module;

maintaining, external to the secure element of the mobile device, a user interface application installed on the mobile device, wherein the user interface application includes instructions which, when executed by the electronic processor of the mobile device, generate a user interface enabling the user of the mobile device to interact with the mobile payment module within the secure element of the mobile device;

receiving, by the user interface application maintained external to the secure element of the mobile device, an indication to conduct the payment transaction, the indication including an indication of a selected account of the plurality of accounts of the user of the mobile device; and

conducting, by the mobile payment module maintained within the secure element of the mobile device, the payment transaction with respect to the selected account in accordance with the indication.

12. The method of claim 11, wherein the multi-access module enables multi-account functionality based at least in part on information pertaining to the plurality of accounts collectively.

13. The method of claim 12, wherein the multi-account functionality comprises multi-account fraud control.

14. The method of claim 12, wherein the multi-account functionality comprises marketing based on multi-account information.

15. The method of claim 11, wherein the secure element is a computer chip different from the electronic processor of the mobile device.

16. The method of claim 11, wherein the secure element is incorporated into a subscriber identity module (SIM) card.

17. The method of claim 11, wherein the user interface application enables the user to select the selected account from among the plurality of accounts.

18. The method of claim 11, wherein the mobile device interacts with a plurality of wireless networks of different types to conduct the payment transaction.

19. One or more non-transitory computer readable media collectively storing instructions, which when executed by one or more processors of a computer system, collectively cause the computer system to, at least:

maintain, within a secure element of a mobile device, a multi-access module, the multi-access module including instructions which, when executed by an electronic processor of the mobile device, maintain a plurality of multi-access instances at the mobile device, wherein each of the plurality of multi-access instances represents a unique account of a plurality of accounts of a user of the mobile device, wherein each of the multi-access instances includes unique data, wherein the multi-access module maintains non-unique shared data such that each of the plurality of multi-access instances including unique data shares the non-unique shared data with the other multi-access instances whereby a storage requirement for the plurality of instances of the multi-access module is reduced;

maintain, within the secure element of the mobile device, a process message module, the process message module including instructions which, when executed by the electronic processor, convert messages received from a mobile gateway into commands that are executable by other functional modules of a plurality of functional modules maintained within the secure element of the mobile device and convert responses from the other functional modules of the plurality of functional modules into messages that are understood by the mobile gateway;

maintain, within the secure element of the mobile device, a mobile payment module including instructions which, when executed by the electronic processor, enable the user of the mobile device to conduct a payment transaction with the process message module and the multi-access module;

maintain, external to the secure element of the mobile device, a user interface application installed on the mobile device, wherein the user interface application includes instructions which, when executed by the electronic processor of the mobile device, generate a user interface enabling the user of the mobile device to interact with the mobile payment module within the secure element of the mobile device;

receive, by the user interface application maintained external to the secure element of the mobile device, an indication to conduct the payment transaction, the indication including an indication of a selected account of the plurality of accounts of the user of the mobile device; and

conduct, by the mobile payment module maintained within the secure dement of the mobile device, the payment transaction with respect to the selected account in accordance with the indication.