Authentication token for wallet based transactions

Patent metadata

Field	Value
Publication number	US-10078835-B2
Application number	US-201414469304-A
Country	US
Kind code	B2
Filing date	Aug 26, 2014
Priority date	Mar 5, 2014
Publication date	Sep 18, 2018
Grant date	Sep 18, 2018

Abstract

Transaction address data is received at a point of interaction (POI) device, from a payment-enabled mobile device. The transaction address data includes first address data and second address data. The first address data identifies a wallet service provider that is associated with the payment-enabled mobile device. The second address data indicates an internet address for a server function present in the payment-enabled mobile device. The first address data is used to dispatch the second address data from the POI device to the wallet service provider.

First claim

What is claimed is:

1. A method comprising:
receiving transaction address data in a point of interaction (POI) device of a payment system, from a payment-enabled mobile device that hosts a consumer device server function and initiates and performs payment transactions with the payment system, the transaction address data including first address data and second address data, the first address data identifying a wallet service provider that is associated with the payment-enabled mobile device and stores digitalized payment cards associated with a consumer, the second address data comprising a universal resource identifier that serves as an internet address for a server function present in the payment-enabled mobile device;
connecting, via the first address data, and transmitting the second address data from the POI device to the wallet service provider in a message comprising transaction data and the second address associated with the server function present in the payment-enabled mobile device wherein the POI device routes the message to the wallet service provider and wherein the wallet service provider parameterizes the consumer device server function including the wallet service provider's identifier associated with the payment system and a selected digitalized payment card from the wallet service provider;
establishing, at the wallet service provider, based on the second address data and the parameterized consumer device server function, a cryptographically secured communication channel with the payment enabled mobile device via the server function using mutual authentication of the wallet service provider and the payment enabled mobile device server function; and
completing a purchase transaction using the cryptographically secured communication channel.

2. The method of claim 1 , further comprising:
transmitting transaction detail data and transaction context data from the POI device to the payment-enabled mobile device.

3. The method of claim 2 , further comprising:
dispatching the transaction detail data and the transaction context data with the second address data from the POI device to the wallet service provider.

4. The method of claim 3 , wherein the transaction detail data, the transaction context data and the second address data are routed from the POI device to the wallet service provider via an acquirer device.

5. The method of claim 4 , further comprising:
receiving a transaction confirmation message by the POI device, the transaction confirmation message routed from the wallet service provider to the POI device via the acquirer device.

6. The method of claim 3 , further comprising:
receiving, by the POI device, a transaction confirmation message from the wallet service provider.

7. The method of claim 1 , wherein the POI device receives the first address data and the second address data from the payment-enabled mobile device via one or more of the following types of communication: (a) NFC (near field communication); (b) Wi-Fi; (c) Bluetooth; (d) USSD (Unstructured Supplementary Service Data); (e) SMS (short message service); and (f) QR (Quick Response) code.

8. The method of claim 1 , wherein the cryptographically secured communication channel utilizes a set of cryptographic keys previously loaded into the payment-enabled mobile device during a personalization process performed by the wallet service provider.

9. The method of claim 1 , wherein establishing the cryptographically secured communication channel is further based on a selection of one of a plurality of payment card accounts housed at the wallet service provider.

10. The method of claim 1 , wherein the wallet service provider further parameterizes cryptographic material for forming a secure data communication connection.

11. The method of claim 1 , wherein the transaction data comprises a currency that a transaction amount is denominated in and a date of a transaction.

Assignees

• Mastercard International Inc

Inventors

• Radu Cristian

Classifications

• G06Q20/227

  characterised in that multiple accounts are available, e.g. to the payer · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q20/3672

  initialising or reloading thereof · CPC title

• G06Q20/367

  involving electronic purses or money safes · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title