Apparatuses and methods for using a random authorization number to provide enhanced security for a secure element

Patent metadata

Field	Value
Publication number	US-10546293-B2
Application number	US-201414475375-A
Country	US
Kind code	B2
Filing date	Sep 2, 2014
Priority date	May 29, 2014
Publication date	Jan 28, 2020
Grant date	Jan 28, 2020

Abstract

A system for provisioning credentials onto an electronic device is provided. The system may include a payment network subsystem, a service provider subsystem, and one or more user devices that can be used to perform mobile transactions at a merchant terminal. The user device may communicate with the service provider subsystem in order to obtained commerce credentials from the payment network subsystem. The user device may include a secure element and a corresponding trusted processor. The trusted processor may generate a random authorization number and inject that number into the secure element. Mobile payments should only be completed if the random authorization number on the secure element matches the random authorization number at the trusted processor. The trusted processor may be configured to efface the previous random authorization number and generate a new random authorization number when detecting a potential change in ownership at the user device.

First claim

What is claimed is:

1. A method of operating a portable electronic device, wherein the electronic device includes a secure element and an associated trusted processor, the method comprising:
with the trusted processor, storing an authorization value;
receiving one or more commerce credentials at the electronic device;
detecting, at the electronic device, a potential ownership change of the electronic device; and
in response to detecting the potential ownership change at the electronic device:
disabling use of at least one of the one or more commerce credentials so that the at least one disabled commerce credential can no longer be used to conduct mobile payment transactions;
effacing the authorization value from the trusted processor;
generating by the trusted processor a new authorization value and writing the newly generated authorization value into the secure element;
detecting that the newly generated authorization value has been written into the secure element; and
in response to detecting that the newly generated authorization value has been written into the secure element, removing the one or more commerce credentials from the electronic device.

2. The method defined in claim 1 , further comprising:
storing the authorization value only at the secure element.

3. The method defined in claim 1 , further comprising:
after removing the one or more commerce credentials from the electronic device, receiving one or more new commerce credentials to be provisioned onto the electronic device.

4. The method defined in claim 1 , wherein detecting the potential ownership change at the electronic device comprises receiving a remote notification from a network-based service module.

5. The method defined in claim 4 , further comprising:
using backup data on the network-based service module to restore a previously provisioned commerce credential onto the electronic device.

6. The method defined in claim 1 , further comprising:
in response to detecting that an authorized user is still in possession of the electronic device, enabling use of the one or more commerce credentials so that the electronic device can be used to conduct mobile payment transactions without having to re-provision the one or more commerce credentials.

7. The method defined in claim 1 , further comprising determining whether the authorization number stored at the processor compares in a predetermined manner to the authorization number stored at the secure element, in order to conduct a mobile payment transaction.

8. A portable electronic device, comprising:
a secure element on which payment card information is stored, wherein the secure element is configured to store a secure element authorization value; and
a trusted processor configured to detect a potential ownership change at the electronic device, to generate a new authorization value, to write the new authorization value into the secure element in response to detecting the potential ownership change, and to delete the payment card information from the secure element upon writing the new authorization value into the secure element.

9. The portable electronic device defined in claim 8 , wherein the trusted processor comprises a main processor on the electronic device.

10. The portable electronic device defined in claim 9 , wherein the trusted processor is configured to maintain a keychain that includes encrypted information, and wherein the newly generated authorization value is stored in association with the keychain.

11. The portable electronic device defined in claim 8 , further comprising:
an applications processor that is interposed between the trusted processor and the secure element, wherein the trusted processor comprises a secure enclave processor.

12. The portable electronic device defined in claim 11 , wherein the trusted processor is configured to maintain a keychain having a universal unique identifier, wherein the trusted processor includes a monotonic counter that outputs a value, and wherein the trusted processor is configured to derive in real time the processor authorization value based at least in part on the universal unique identifier in the keychain and based at least in part on the value output by the monotonic counter.

13. A method of operating an electronic device that includes a secure element and an associated trusted processor, the method comprising:
storing payment card information on the secure element;
generating, with the trusted processor, an authorization number;
detecting a potential ownership change at the electronic device;
in response to detecting the potential ownership change, effacing the authorization number from the trusted processor so that the electronic device can no longer be used to conduct mobile payment transactions with the stored payment card information and generating by the trusted processor a new authorization number;
writing the new authorization number into the secure element and deleting the stored payment card information; and
conducting a mobile payment transaction by determining whether the authorization number generated by the trusted processor matches the authorization number stored at the secure element.

14. The method of claim 13 , further comprising:
enabling a lock function at the electronic device prior to storing the payment card information on the secure element.

15. The method of claim 14 , wherein detecting the potential ownership change comprises detecting that the lock function has been disabled.

16. The method of claim 13 , further comprising detecting that a remote device management feature on the electronic device has been disabled.

17. The method of claim 13 , wherein detecting the potential ownership change comprises detecting that the electronic device has been placed in a lost mode.

18. The method of claim 13 , wherein detecting the potential ownership change comprises detecting that software on the secure element has been updated without migration support.

19. The method of claim 13 , wherein detecting the potential ownership change comprises detecting a log-off event at a network-based service module that stores data remotely for the electronic device.

20. The method of claim 13 , wherein detecting the potential ownership change comprises detecting that one or more items of user content have been erased from the electronic device.

21. The method of claim 13 , wherein detecting the potential ownership change comprises detecting a selected one of: a device firmware update or a recovery mode installation at the electronic device.

Assignees

• Apple Inc

Inventors

• Khan Ahmer A
• Hauck Jerrold V
• Dicker George R
• Lee Jeffrey C
• Adler Mitchell D
• Benson Wade

Classifications

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/3226

  Use of secure elements separate from M-devices · CPC title

• G06Q20/354

  Card activation or deactivation · CPC title

• H04N21/812

  involving advertisement data (advertising per se G06Q30/02) · CPC title