Mobile secure element based shared cardholder verification

Patent metadata

Field	Value
Publication number	US-10115103-B2
Application number	US-201715602842-A
Country	US
Kind code	B2
Filing date	May 23, 2017
Priority date	Jan 23, 2014
Publication date	Oct 30, 2018
Grant date	Oct 30, 2018

Abstract

In a payment-enabled smartphone, a shared cardholder verification method (CVM) applet serves a number of mobile payment cardlets. The shared CVM applet validates CVM information input by a user of the smartphone and in response issues a CVM token. The CVM token is passed to a particular one of the mobile payment cardlets that is selected for a current transaction. The selected mobile payment cardlet submits the CVM token back to the shared CVM applet for verification. Upon verifying the CVM token, the shared CVM applet enables the selected mobile payment cardlet to perform the current transaction.

First claim

What is claimed is:

1. A mobile device, comprising:
a housing; and
a secure element within the housing, the secure element including a processor component and a memory component in communication with the processor component, the memory component storing program instructions, the processor component operative with the program instructions to perform functions as follows:
issuing a user verification token from a CVM applet running in the secure element;
receiving the issued user verification token back in the CVM applet from a payment card applet running in the secure element;
verifying, by the CVM applet, the received issued user verification token; and
in response to the verifying of the received issued user verification token, enabling the payment card applet to perform a payment transaction.

2. The mobile device of claim 1 , wherein the processor component is further operative with the program instructions to select said payment card applet from among a plurality of payment card applets stored in the secure element, said processor component selecting said payment card applet prior to receiving the issued user verification token.

3. The mobile device of claim 2 , wherein the processor component is further operative with the program instructions to transmit the issued user verification token to the selected payment card applet after selecting said payment card applet and prior to the CVM applet receiving the issued user verification token.

4. The mobile device of claim 3 , wherein the mobile device is embodied as a smartphone.

5. A method comprising:
transmitting a user verification token from a CVM applet running in a secure element in a mobile device to a CVM capture software module running in the mobile device;
transmitting the user verification token from the CVM capture software module to a wallet midlet running in the mobile device;
selecting a payment card applet from among a plurality of payment card applets stored in the secure element; and
transmitting the user verification token from the wallet midlet to the selected payment card applet.

6. The method of claim 5 , further comprising:
transmitting the user verification token from the selected payment card applet to the CVM applet.

7. The method of claim 6 , further comprising:
the CVM applet, after receiving the user verification token from the selected payment card applet, enabling the selected payment card applet to perform a transaction.

8. The method of claim 7 , wherein the CVM capture software module is not stored in and does not execute on the secure element.

9. The method of claim 8 , wherein the wallet midlet is not stored in and does not execute on the secure element.

10. The method of claim 7 , further comprising:
prior to transmitting steps, generating the user verification token by the CVM applet; and
after the transmitting steps and prior to the enabling step, verifying the user verification token by the CVM applet.

11. The method of claim 10 , further comprising:
prior to the generating step:
receiving user verification data in the mobile device;
providing the received user verification data to the CVM capture software module; and
verifying the user verification data in the CVM applet.

12. The method of claim 11 , wherein the user verification data includes a PIN (personal identification number).

13. The method of claim 11 , wherein the user verification data includes biometric data obtained from a user of the mobile device.

14. A method comprising:
transmitting a user verification token from a CVM applet running in a secure element in a mobile device to a wallet midlet running in the mobile device;
selecting a payment card applet from among a plurality of payment card applets stored in the secure element; and
transmitting the user verification token from the wallet midlet to the selected payment card applet.

15. The method of claim 14 , further comprising:
transmitting the user verification token from the selected payment card applet to the CVM applet.

16. The method of claim 15 , further comprising:
the CVM applet, after receiving the user verification token from the selected payment card applet, enabling the selected payment card applet to perform a transaction.

17. The method of claim 16 , wherein the wallet midlet is not stored in and does not execute on the secure element.

18. The method of claim 16 , further comprising:
prior to transmitting steps, generating the user verification token by the CVM applet; and
after the transmitting steps and prior to the enabling step, verifying the user verification token by the CVM applet.

19. The method of claim 18 , further comprising:
prior to the generating step, verifying the user verification data in the CVM applet.

20. The method of claim 19 , wherein the user verification data includes a PIN (personal identification number).

Assignees

• Mastercard International Inc

Inventors

• Maddocks Ian David Alan
• Phillips Simon
• Main Jonathan James

Classifications

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/3672 Primary

  initialising or reloading thereof · CPC title

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title