System and method for authenticating, associating and storing secure information

Patent metadata

Field	Value
Publication number	US-10528946-B2
Application number	US-201414456810-A
Country	US
Kind code	B2
Filing date	Aug 11, 2014
Priority date	Nov 6, 2013
Publication date	Jan 7, 2020
Grant date	Jan 7, 2020

Abstract

The present application discloses a method for authorizing mobile payment from a mobile application installed on a mobile device. After a user logs into a user account at the mobile application, the mobile device receives user information, and obtains payment card information retrieved from a first image of a payment card captured by the mobile device. Then, a request is sent to a server for authorizing the user to make mobile payment using the mobile application. The server is configured to authenticate the request by communicating with a financial institution using the user information and the payment card information. The mobile device receives a confirmation message after the authentication of the user information and the payment card information by the financial institution, and displays the confirmation message to the user of the mobile device such that the user can make mobile payment via the user account at the mobile application.

First claim

What is claimed is:

1. A method for authorizing mobile payment from an instant messenger application installed on a mobile device, comprising:
at the mobile device having one or more processors and memory for storing programs to be executed by the one or more processors:
after logging into a user's account at the instant messenger application:
receiving, by the instant messenger application, user information including user account information at the instant messenger application and the user's personal information, wherein the instant messenger application has a primary function distinct from a payment function, and the user's personal information is used by a financial institution to verify an identity of the user and is independent of the user account information at the instant messenger application, further including automatically retrieving a phone number of the mobile device from local setting information of the mobile phone;
obtaining, by the instant messenger application, information of a payment card provided by the user, the payment card information being retrieved from a first image of the payment card captured by the mobile device;
sending, by the instant messenger application, a request to a server for authorizing the user to make mobile payments using the instant messenger application, the request including the user information and the payment card information, wherein the server is configured to authenticate the request by communicating with the financial institution using the phone number of the mobile device, at least a part of the user information and at least a part of the payment card information;
receiving, by a message box application of the mobile device that is distinct from the instant messenger application, a verification message directly from the financial institution, the verification message including a verification code;
extracting, by the instant messenger application, the verification code from the verification message;
in response to a user action, returning, by the instant messenger application, the verification code extracted from the verification message to the financial institution, wherein the financial institution is configured to authenticate the user information and the payment card information in accordance with a determination whether the returned verification code is consistent with the verification code in the verification message;
receiving, by the instant messenger application, a confirmation message in accordance with a result of the authentication of the user information and the payment card information by the financial institution;
in accordance with the confirmation message, associating, by the instant messenger application, the user's account of the instant messenger application with the user information and the payment card information;
displaying, by the instant messenger application, the confirmation message to the user of the mobile device such that the user can make mobile payments using the user's account at the instant messenger application;
in accordance with the association of the user's account of the instant messenger application with the user information and the payment card information, setting up, by the instant messenger application, a payment password associated with the payment card information for the user's account;
receiving, by the instant messenger application, a mobile payment request and the payment password from the user's account at the instant messenger application; and
in accordance with a verification of the payment password, authorizing, by the instant messenger application, a mobile payment using the payment card information without entering and verifying the user information and the payment card information.

2. The method of claim 1 , wherein the user's personal information further comprises user identification information printed on a user identification (ID) card of the user, and the user identification information on the user ID card is retrieved from a second image that is distinct from the first image and is also captured by the mobile device.

3. The method of claim 2 , wherein the respective information of the payment card information and the user identification information is retrieved by:
capturing a respective image of the payment card or the user ID card using a built-in camera installed on the mobile device;
sending the respective image to a recognition server that further processes the respective image and recognizes the respective information on the user ID card or the payment card based on the respective image; and
receiving the respective information from the recognition server.

4. The method of claim 3 , wherein the recognition server is the same server as the server that is configured to authenticate the mobile payment request.

5. The method of claim 1 , wherein the payment card information is selected from a representation of the financial institution, a card type, an account number of the user's account, a print name of the user, an expiration date, and a card verification value (CVV) that are associated with the payment card.

6. The method of claim 1 , wherein the user's personal information further comprises user identification information printed on a user identification card of the user, and the user identification information comprises a given name, a family name, and a national identification number of the user.

7. The method of claim 1 , further comprising:
providing the retrieved phone number to the instant messenger application to verify whether the retrieved phone number is consistent with the phone number previously provided to the financial institution by the user.

8. The method of claim 1 , wherein extracting the verification code from the verification message further comprises:
monitoring the short message box application to detect that the verification message is received from the financial institution; and
in accordance with the detection of the verification message in the short message box application, automatically identifying the verification code in the verification message and entering the message code into the instant message application.

9. The method of claim 8 , wherein the short message box application in the mobile device is monitored, and in accordance with a detection that the verification message is delivered to the short message box application, the verification code is read from the verification message and entered into the instant messenger application, such that it is returned to the financial institution for verification by the financial institution.

10. The method of claim 1 , wherein the server receives the payment card information and the user information from the mobile device, and determines whether the financial institution indicated by the payment card information is an entity that has been registered with the server; and
wherein in accordance with a determination that the financial institution is not an entity registered with the server, sending the confirmation message to indicate that the financial institution is not an entity that has been registered with the server.

11. A mobile device for processing payment card information in an instant messenger application, comprising:
one or more processors; and
memory having instructions stored thereon, which when executed by the one or more processors cause the processors to perform operations, comprising:
after logging into a user's account at the instant messenger application:
receiving, by the instant messenger application, user information including user account information at the instant messenger application and the user's personal information, wherein the instant messenger applicatio

Assignees

• Tencent Tech Shenzhen Co Ltd

Inventors

• Ye Wa
• Xu Zhenyu

Classifications

• G06Q20/3221

  Access to banking information through M-devices · CPC title

• G06Q20/401 Primary

  Transaction verification · CPC title

• G06Q20/326

  Payment applications installed on the mobile devices · CPC title