Systems, methods, and computer program products for managing states

• US 9,544,759 B2
• Filed: 02/18/2014
• Issued: 01/10/2017
• Est. Priority Date: 11/01/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Gargiulo, Michael J.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US14/183,137
• Publication Number:
  US 20140164475A1
• Time in Patent Office: 1,057 Days
• Field of Search: 726/2, 726/3, 726/4, 726/5, 726/6
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

System, methods, and computer program products are provided for managing mobile entity states. A first notification is received over a communications network, the first notification including data indicating that a first service associated with a mobile device has been suspended. State information stored in a memory is updated based on the data included in the first notification. A second notification is transmitted over a communications network, the second notification indicating that the state information has been updated.

Claims

1. A system to suspend mobile wallet application functions on secure elements using a central trusted service manager that interfaces between a plurality of service providers and secure elements, comprising:

a mobile computing device comprising a secure element; and

a central trusted service manager computing system that interfaces between a plurality of service providers and a plurality of secure elements, the central trusted service manager computing system comprising a storage device and at least one processor communicatively coupled to the storage device, wherein the at least one processor executes application code instructions that are stored in the storage device to cause the central trusted service manager computing system to;

receive a first instruction to suspend a mobile wallet application associated with the mobile computing device secure element;

process the first instruction by modifying a mobile wallet application state maintained by the central trusted service manager computing system to a suspended state;

transmit a second instruction to the mobile computing device to suspend at least one security domain of the mobile computing device secure element that is associated with the suspended mobile wallet application; and

receive a response from the mobile computing device confirming that the at least one security domain of the mobile computing device secure element has been suspended.

2. The system of claim 1, wherein the first instruction is received from a mobile network operator computing system associated with the mobile computing device.

3. The system of claim 1, wherein the processor is further configured to execute application code instructions that are stored in the storage device to cause the central trusted service manager computing system to transmit a notification to one or more service provider computing systems that the at least one security domain of the mobile computing device or of a secure element has been suspended.

4. The system of claim 3, wherein the one or more service providers comprises an issuer computing system.

5. The system of claim 1, wherein the mobile wallet application state comprises a state of the mobile wallet application associated with the mobile computing device secure element that identifies whether the mobile wallet application can conduct transactions.

6. The system of claim 1, wherein the processor is further configured to execute application code instructions that are stored in the storage device to cause the central trusted service manager to:

receive a third instruction to reactivate the mobile wallet application associated with the mobile computing device secure element;

process the third instruction by modifying the mobile wallet application state from a suspended state to an active state;

transmit a fourth instruction to the mobile computing device to reactivate the at least one suspended security domain of the mobile computing device secure element; and

receive a second response from the mobile computing device, the second response confirming that the at least one suspended security domain of the mobile computing device secure element has been activated.

7. The system of claim 6, wherein activating the at least one suspended security domain of the mobile computing device secure element comprises unlocking or permitting access to the at least one security domain of the mobile computing device secure element.

8. The system of claim 1, wherein suspending the at least one security domain of the mobile computing device secure element comprises locking or preventing access to the at least one security domain of the mobile computing device secure element.

9. A method to suspend mobile wallet application functions on secure elements using a central trusted service manager that interfaces between a plurality of service providers and secure elements, comprising:

receiving, by a central trusted service manager computing system, a first instruction to suspend a mobile wallet application associated with a mobile computing device secure element;

processing, by the central trusted service manager computing system, the first instruction by modifying a mobile wallet application state maintained by the central trusted service manager computing system to a suspended state;

transmitting, by the central trusted service manager computing system, a second instruction to a mobile computing device to suspend at least one security domain of the mobile computing device secure element that is associated with the suspended mobile wallet application; and

receiving, by the central trusted service manager computing system, a response from the mobile computing device, the response confirming that the at least one security domain of the mobile computing device secure element has been suspended.

10. The method of claim 9, wherein the first instruction is received from a mobile network operator computing system associated with the mobile computing device.

11. The method of claim 9, further comprising transmitting a notification to one or more service provider computing systems that the at least one security domain of the mobile computing device secure element has been suspended.

12. The method of claim 11, wherein the one or more service providers comprises an issuer computing system.

13. The method of claim 9, wherein the mobile wallet application state comprises a state of the mobile wallet application associated with the mobile computing device secure element that identifies whether the mobile wallet application can conduct transactions.

14. The method of claim 9, further comprising:

receiving, by the central trusted service manager computing system, a third instruction to reactivate the mobile wallet application associated with the mobile computing device secure element;

processing, by the central trusted service manager computing system, the third instruction by modifying the mobile wallet application state from a suspended state to an active state;

transmitting, by the central trusted service manager computing system, a fourth instruction to the mobile computing device to reactivate the at least one suspended security domain of the mobile computing device secure element; and

receiving, by the central trusted service manager computing system, a second response from the mobile computing device, the second response confirming that the at least one suspended security domain of the mobile computing device secure element has been activated.

15. A computer program product, comprising:

a non-transitory computer-readable medium having computer-readable program instructions embodied therein that when executed by a computer cause the computer to suspend mobile functions, the computer-readable program instructions comprising;

computer-readable program instructions to receive, by a central trusted service manager computing system, a first instruction to suspend a mobile wallet application associated with a mobile computing device secure element;

computer-readable program instructions to process, by the central trusted service manager computing system, the first instruction by modifying a mobile wallet application state maintained by the central trusted service manager computing system to a suspended state;

computer-readable program instructions to transmit, by the central trusted service manager computing system, a second instruction to a mobile computing device to suspend at least one security domain of the mobile computing device secure element that is associated with the suspended mobile wallet application; and

computer-readable program instructions to receive, by the central trusted service manager computing system, a response from the mobile computing device, the response confirming that the at least one security domain of the mobile computing device secure element has been suspended.

16. The computer program product of claim 15, wherein the first instruction is received from a mobile network operator computing system associated with the mobile computing device.

17. The computer program product of claim 15, further comprising computer-readable program instructions to transmit a notification to one or more service provider computing systems that the at least one security domain of the mobile computing device secure element has been suspended.

18. The computer program product of claim 17, wherein the one or more service providers comprises an issuer computing system.

19. The computer program product of claim 15, wherein the mobile wallet application state comprises a state of the mobile wallet application associated with the mobile computing device secure element that identifies whether the mobile wallet application can conduct transactions.

20. The computer program product of claim 15, further comprising:

computer-readable program instructions to receive, by a central trusted service manager computing system, a third instruction to reactivate the mobile wallet application associated with modify data stored on the mobile computing device secure element;

computer-readable program instructions to process, by the central trusted service manager computing system, the third instruction by modifying the mobile wallet application state from a suspended state to an active state;

computer-readable program instructions to transmit, by the central trusted service manager computing system, a fourth instruction to the mobile computing device to reactivate the at least one suspended security domain of the mobile computing device secure element; and

computer-readable program instructions to receive, by the central trusted service manager computing system, a second response from the mobile computing device, the second response confirming that the at least one suspended security domain of the mobile computing device secure element has been activated.