Secure remote payment transaction processing using a secure element

• US 11,062,306 B2
• Filed: 04/18/2017
• Issued: 07/13/2021
• Est. Priority Date: 08/15/2013
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Karpenko, Igor, Makhotin, Oleg, Pirzadeh, Kiushan, Powell, Glenn, Sheets, John, Wong, Erick
• Primary Examiner(s): Ravetti, Dante
• Application Number:
  US15/490,191
• Publication Number:
  US 20170221056A1
• Time in Patent Office: 1,547 Days
• Field of Search: 705 16, 705 21, 705 59, 705 71, 380 44, 380262, 380278, 380279
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing

Abstract

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device. The method comprises receiving, by a mobile payment application on a secure memory of the mobile device, transaction data from a transaction processor application on the mobile device. The method further comprises validating that the transaction processor application is authentic and in response to validating the transaction processor application, providing encrypted payment credentials to the transaction processor application. The transaction processor application further initiates a payment transaction with a transaction processor server computer using the encrypted payment credentials.

Claims

1. A method comprising:

selecting, by a transaction processor application in a communication device, items for purchase in a transaction at a merchant server computer;

wherein the communication device is a mobile phone;

wherein the communication device comprises a secure element;

identifying, by the transaction processor application in the communication device, a payment account;

communicating, by the transaction processor application, transaction data associated with the transaction to a payment application in the secure element on the communication device;

retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account;

sending, by the payment application in the secure element, the payment credential to the transaction processor application;

transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer;

receiving, by the merchant server computer, the transmitted payment credential; and

initiating, by the merchant server computer, a payment transaction with the payment credential.

2. The method of claim 1, wherein the payment credential comprises a token.

3. The method of claim 2, wherein the transaction processor application is a merchant application.

4. The method of claim 1, further comprising:

receiving, by the communication device, a selection of the payment account, the selection identifying the payment account.

5. The method of claim 1, wherein the payment credential is in encrypted form as the payment credential is transmitted from the communication device to the merchant server computer.

6. The method of claim 1, further comprising:

receiving, by the payment application, signed transaction data from the transaction processor application; and

validating, by the payment application, the signed transaction data using a transaction processor public key before retrieving the payment credential from the secure element in the communication device.

7. A system comprising:

a communication device comprising;

a first processor; and

a first non-transitory medium, the first non-transitory medium comprising instructions when executed by the first processor, causes the first processor to perform the steps of;

selecting, by a transaction processor application in the communication device, items for purchase in a transaction at a merchant server computer;

wherein the communication device is a mobile phone;

wherein the communication device comprises a secure element;

identifying, by the transaction processor application in the communication device, a payment account;

communicating, by the transaction processor application in the communication device, transaction data associated with the transaction to a payment application in the secure element on the communication device;

retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account;

sending, by the payment application in the secure element, the payment credential to the transaction processor application; and

transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer; and

the merchant server computer, the merchant server computer comprising a second processor, and a second computer readable medium comprising code, executable by the second processor for performing steps including;

initiating a payment transaction with the payment credential.

8. The system of claim 7, wherein the payment credential comprises a token.

9. The system of claim 7, wherein the transaction processor application is a merchant application.

10. The system of claim 7, wherein initiating the payment transaction with the payment credential includes generating an authorization request message comprising the payment credential.

11. The system of claim 7, wherein the steps further comprise:

receiving a selection of the payment account from a user, the selection identifying the payment account.