Method and system for provisioning access data to mobile device

Patent metadata

Field	Value
Publication number	US-10798571-B2
Application number	US-201816057361-A
Country	US
Kind code	B2
Filing date	Aug 7, 2018
Priority date	May 8, 2014
Publication date	Oct 6, 2020
Grant date	Oct 6, 2020

Abstract

A method and system for provisioning access data in a second application on a mobile device using a first application on the mobile device. Authentication data may be input into the first application, and an authentication code may be requested from a remote server. After the authentication code is received by the first application in the mobile device, it can pass the authentication code to a second application that initiates an access data provisioning process.

First claim

What is claimed is:

1. A method comprising:
receiving, by an authorization computer system and from a mobile device, authentication data from a first application on the mobile device;
validating, by the authorization computer system, the authentication data;
in response to determining that the authentication data are valid, creating, by the authorization computer system, an authentication code, by concatenating a first portion comprising encrypted information and a second portion comprising unencrypted information, the unencrypted information comprising a key index and the encrypted information including an encrypted account number, a date and time when the authentication data was validated, and an authorization code;
providing, by the authorization computer system, the authentication code to a validation entity computer using a communication path that does not involve the mobile device; and
transmitting, by the authorization computer system, the authentication code to the validation entity computer via the first application and a second application on the mobile device, the validation entity computer locating a key using the key index in the authentication code, decrypting the encrypted information with the key to determine the account number, the date and time when the authentication data was validated, and the authorization code, determining that the authentication code is valid using at least the authentication code received from the authorization computer system, the authorization code, and the date and time when the authentication data was validated, and then instructing a provisioning server computer to provision the second application on mobile device with access data related to the account number.

2. The method of claim 1 wherein the access data is account data permitting the mobile device to conduct a transaction.

3. The method of claim 1 wherein the unencrypted information comprises information regarding a type of authentication code.

4. The method of claim 1 wherein the mobile device is a mobile phone.

5. The method of claim 1 , wherein the access data comprises a payment token.

6. The method of claim 1 , wherein the account number if a primary account number that is sixteen digits long.

7. The method of claim 1 , wherein the first application is an online banking application and the second application is a digital wallet application.

8. The method of claim 1 , wherein the authentication data is a password.

9. The method of claim 1 , wherein the key is a private key of a public private key pair.

10. An authorization computer system comprising:
a processor; and
a computer readable medium, the computer readable medium comprising code, executable by the processor to implement a method comprising receiving, by the authorization computer system and from a mobile device, authentication data from a first application on the mobile device;
validating, by the authorization computer system, the authentication data;
in response to determining that the authentication data are valid, creating, by the authorization computer system, an authentication code, by concatenating a first portion comprising encrypted information and a second portion comprising unencrypted information, the unencrypted information comprising a key index and the encrypted information including an encrypted account number, a date and time when the authentication data was validated, and an authorization code;
providing, by the authorization computer system, the authentication code to a validation entity computer using a communication path that does not involve the mobile device; and
transmitting, by the authorization computer system, the authentication code to the validation entity computer via the first application and a second application on the mobile device, the validation entity computer validating the authentication code, locating a key using the key index in the authentication code, decrypting the encrypted information with the key to determine the account number, the date and time when the authentication data was validated, and the authorization code, determining that the authentication code is valid using at least the authentication code received from the authorization computer system, the authorization code, and the date and time when the authentication data was validated, and then instructing a provisioning server computer to provision the second application on the mobile device with access data related to the account number.

11. The authorization computer system of claim 10 wherein the access data is account data permitting the mobile device to conduct a transaction.

12. The authorization computer system of claim 10 wherein the unencrypted information comprises information regarding a type of authentication code.

Assignees

• Visa Int Service Ass

Inventors

• Powell Glenn
• Sheets John F

Classifications

• G06Q20/3265

  characterised by personalisation for use · CPC title

• G06Q20/3263

  characterised by activation or deactivation of payment capabilities · CPC title

• H04W12/37

  Managing security policies for mobile devices or for controlling mobile applications · CPC title

• H04W12/35

  Protecting application or service provisioning, e.g. securing SIM application provisioning · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title