Over the air management of payment application installed in mobile device

• US 9,286,604 B2
• Filed: 09/21/2009
• Issued: 03/15/2016
• Est. Priority Date: 09/22/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aabye, Christian, Brand, Olivier, Lindelsee, Mike, Mirizzi, Joseph J., Ngo, Hao, White, Lauren, Wilson, David William
• Primary Examiner(s): Liu, Marissa
• Application Number:
  US12/563,540
• Publication Number:
  US 20100198728A1
• Time in Patent Office: 2,367 Days
• Field of Search: 726/4, 705 1- 80
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems, apparatus, and methods for managing a payment application installed on a mobile device, such as a mobile phone are provided. An Issuer of a payment device can remotely control the payment application by instructing a wireless network carrier or operator to transmit a message to the mobile phone, where the message contains an instruction to perform an operation related to the payment application. The Issuer can remotely reset a counter or a password associated with the payment application, lock or unlock a payment application, and set the access control data to a predetermined value, to prevent unauthorized use of the payment application in the situation in which the mobile phone is lost or stolen, or the Issuer desires to limit access to the payment application for other reasons, such as limiting its exposure to unauthorized uses of the payment device.

Claims

1. A method in a mobile communication device, the method comprising:

receiving, by the mobile communication device, an input from a user, the input indicative of a password for access to a payment application resident on the mobile communication device, wherein the payment application allows a predetermined number of password entry attempts;

determining, by the mobile communication device, that the password is not correct;

responsive to the determining that the password is not correct, determining, by the mobile communication device, that the predetermined number of password entry attempts has been reached; and

responsive to the determining that the predetermined number of password entry attempts has been reached, preventing, by the mobile communication device, access to the payment application, wherein the preventing includes;

transmitting, to a remote computer, a lock application request message;

receiving, from the remote computer, an application lock script; and

executing, by the mobile communications device, the application lock script to lock the payment application by modifying an access control data value within a secure memory of the mobile communication device.

2. The method of claim 1, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the payment application.

3. The method of claim 2, wherein the application lock script is routed through a payment processing network prior to the receipt by the mobile communication device.

4. The method of claim 1, wherein the transmitting the lock application request message and the receiving the application lock script occurs using an over-the-air communication channel.