Methods and systems for provisioning payment credentials

Patent metadata

Field	Value
Publication number	US-10198728-B2
Application number	US-201414889714-A
Country	US
Kind code	B2
Filing date	May 15, 2014
Priority date	May 15, 2013
Publication date	Feb 5, 2019
Grant date	Feb 5, 2019

Abstract

A method and system for provisioning payment credentials usable by a mobile device in conducting a payment. The method is conducted at a provisioning system and comprises the steps of: receiving payment credentials from a receiving device, the payment credentials having been obtained from a portable payment device presented by a consumer at the receiving device; receiving, from the receiving device, an identifier entered by the consumer; identifying a mobile device or a secure element corresponding to the identifier; and communicating the payment credentials or a derivation of the payment credentials to the identified mobile device or the secure element to be securely stored in association with the mobile device. The method may include: encrypting the received payment credentials, the encrypted payment credentials having a unique decryption key; and wherein communicating a derivation of the payment credentials communicates the unique decryption key.

First claim

What is claimed is:

1. A method comprising the steps of:
receiving, at a remote server computer, a request for payment credentials from a receiving device;
receiving, by the remote server computer from the receiving device, a personal identifier entered by a consumer;
identifying, by the remote server computer, a previously registered communication address of a mobile device or a secure element associated with the mobile device corresponding to the personal identifier;
communicating, by the remote server computer, a request for a decryption key to an identified communication address of the mobile device or the secure element associated with the mobile device;
receiving, by the remote server computer from the mobile device, the decryption key;
decrypting, by the remote server computer encrypted payment credentials stored by the remote server computer; and
transmitting, by the remote server computer, the decrypted payment credentials to the receiving device.

2. The method as claimed in claim 1 , including:
storing the encrypted payment credentials at the remote server computer.

3. The method as claimed in claim 1 , including:
requesting authorization from a trusted service manager to access the secure element; and
receiving a security key to access the secure element.

4. The method as claimed in claim 1 , including:
communicating additional credentials to the receiving device, wherein the additional credentials are required in use in addition to the payment credentials or derivation of the payment credentials to carry out a transaction.

5. The method as claimed in claim 4 , including:
obtaining the additional credentials from a remotely accessible server using the personal identifier and forwarding the additional credentials to the receiving device.

6. The method as claimed in claim 4 , wherein the additional credentials are in the form of one or more dynamic verification values.

7. The method as claimed in claim 1 , wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message.

8. The method as claimed in claim 1 , wherein the method further includes:
determining whether or not the mobile device or the secure element corresponding to the personal identifier has been registered with the remote server computer.

9. The method as claimed in claim 1 ,
wherein the secure element is one of the group of: a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device.

10. The method as claimed in claim 1 , wherein the method is repeated for multiple payment credentials.

11. The method as claimed in claim 1 , wherein the payment credentials are also on a portable payment device used by a user of the mobile device.

12. A remote server computer comprising:
a processor; and
a non-transitory computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising:
receiving, a request for payment credentials from a receiving device;
receiving, from the receiving device, a personal identifier entered by a consumer;
identifying a previously registered communication address of a mobile device or a secure element associated with the mobile device corresponding to the personal identifier;
communicating a request for a decryption key to an identified communication address of the mobile device or the secure element associated with the mobile device;
receiving, by the remote server computer from the mobile device, the decryption key;
decrypting, by the remote server computer encrypted payment credentials stored by the remote server computer; and
transmitting, by the remote server computer, the decrypted payment credentials to the receiving device.

13. The server computer of claim 12 , wherein the method comprises storing the encrypted payment credentials.

14. The server computer of claim 12 , wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message.

15. The server computer of claim 12 , wherein the method further includes:
determining whether or not the mobile device or the secure element corresponding to the personal identifier has been registered with the server computer.

16. The server computer of claim 12 ,
wherein the secure element is one of the group of: a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device.

17. The server computer of claim 12 , wherein the method is repeated for multiple payment credentials.

Assignees

• Visa Int Service Ass

Inventors

• Huxham Horatio Nelson
• O'Regan Alan Joseph
• Moss Tara Anne
• Van Wyk Hough Arie
• Sheets John Foxe

Classifications

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06Q20/3229

  Use of the SIM of a M-device as secure element · CPC title

• G06Q20/3227

  using secure elements embedded in M-devices · CPC title

• G06Q20/3829 Primary

  involving key management · CPC title

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title