Over the air management of payment application installed in mobile device

Patent metadata

Field	Value
Publication number	US-10115100-B2
Application number	US-201615010728-A
Country	US
Kind code	B2
Filing date	Jan 29, 2016
Priority date	Sep 22, 2008
Publication date	Oct 30, 2018
Grant date	Oct 30, 2018

Abstract

Systems, apparatus, and methods for managing an application installed on a mobile device, such as a mobile phone are provided, so as to prevent or limit unauthorized use of the application, for example, when the mobile device is lost, stolen, or otherwise subject to unauthorized use. An input indicative of a password to access the application can be received. It may be determined that a predetermined number of password entry attempts has been reached based on the input. A request message to disable access to the application can be transmitted from the mobile device to a remote computer. One or more lock instructions for disabling access to the application can be received by the mobile device from the remote computer. The one or more lock instructions can be executed by the mobile device by modifying control data within a secure memory of the mobile device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by a mobile device, an input indicative of a password to access an application installed on the mobile device;
determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;
in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, by the mobile device to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;
receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and
executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

2. The computer-implemented method of claim 1 , wherein the one or more lock instructions are received using an over-the-air communication channel.

3. The computer-implemented method of claim 1 , wherein the application is a payment application used to conduct payment transactions.

4. The computer-implemented method of claim 1 , further comprising:
receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and
executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

5. A mobile device, comprising:
a memory that stores one or more computer-executable instructions; and
a processor configured to access the memory and execute the computer-executable instructions to implement a method comprising:
receiving an input indicative of a password to access an application installed on the mobile device;
determining that a predetermined number of password entry attempts has been reached based on the input;
in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;
receiving, from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and
executing the one or more instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

6. The mobile device of claim 5 , wherein the one or more lock instructions are received using an over-the-air communication channel.

7. The mobile device of claim 5 , where the control data is used by the application to permit or deny access to one or more functions of the application.

8. The mobile device of claim 5 , wherein the method further comprises:
receiving, from the remote computer, one or more unlock instructions for enabling access to the application; and
executing the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

9. A non-transitory computer-readable storage medium comprising one or more computer-executable instructions to implement a method, the method comprising:
receiving, by a mobile device, an input indicative of a password to access an application installed a mobile device;
determining, by the mobile device, that a predetermined number of password entry attempts has been reached based on the input;
in response to determining that the predetermined number of password entry attempts has been reached based on the input, transmitting, by the mobile device to a remote computer, a request message to disable access to the application, wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the application;
receiving, by the mobile device from the remote computer, one or more lock instructions for disabling access to the application automatically in response to the remote computer receiving the request message, wherein the one or more lock instructions are routed through a payment processing network prior to being received by the mobile device; and
executing, by the mobile device, the one or more lock instructions to disable access the application by modifying control data within a secure memory of the mobile device, wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values, wherein the secure memory is in a contactless element in the mobile device, and wherein the contactless element is configured to communicate with an access device using NFC (near field communications).

10. The non-transitory computer-readable storage medium of claim 9 , wherein the one or more lock instructions are received using an over-the-air communication channel.

11. The non-transitory computer-readable storage medium of claim 9 , where the method further comprises:
receiving, by the mobile device from the remote computer, one or more unlock instructions for enabling access to the application; and
executing, by the mobile device, the one or more unlock instructions to enable access the application by modifying the control data within the secure memory of the mobile device.

12. The method of claim 1 , wherein the application is a payment application, and wherein disabling access to the application only disables access to a feature of the payment application, such that only a predetermined value or number of transactions can be conducted using the payment application.

Assignees

• Visa Int Service Ass

Inventors

• Aabye Christian
• Brand Olivier
• Lindelsee Michael
• Mirizzi Joseph J
• Ngo Hao
• White Lauren
• Wilson David William

Classifications

• H04L63/102

  Entity profiles · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q40/00

  Finance; Insurance; Tax strategies; Processing of corporate or income taxes · CPC title

• G06Q20/3227 Primary

  using secure elements embedded in M-devices · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title