Provisioning of credentials on an electronic device using passwords communicated over verified channels

Patent metadata

Field	Value
Publication number	US-10861090-B2
Application number	US-201414475273-A
Country	US
Kind code	B2
Filing date	Sep 2, 2014
Priority date	Nov 27, 2013
Publication date	Dec 8, 2020
Grant date	Dec 8, 2020

Abstract

Systems, methods, and computer-readable media for provisioning credentials on an electronic device are provided. In one example embodiment, a secure platform system may be in communication with an electronic device and a financial institution subsystem. The secure platform system may be configured to, inter alia, detect a selection of a particular commerce credential, access communication mechanism data indicative of at least one communication mechanism of the device, where the at least one mechanism is configured to receive a communication on the device, transmit information to the financial subsystem, where the information includes the mechanism data and the selection of the particular commerce credential, and instruct the financial subsystem to provision the particular commerce credential in a disabled state on the device and communicate credential enablement data to the device using a particular communication mechanism of the at least one communication mechanism indicated by the communication mechanism data.

First claim

What is claimed is:

1. A method comprising:
receiving, with a financial institution subsystem, a selection of a particular commerce credential to be enabled on an electronic device;
receiving, with the financial institution subsystem, communication mechanism data indicative of at least one communication technique of the electronic device;
identifying, with the financial institution subsystem, a particular communication technique of the at least one communication technique indicated by the received communication mechanism data that matches a verified communication technique associated with the particular commerce credential;
transmitting provisioning data associated with the particular commerce credential from the financial institution subsystem to the electronic device using an other particular communication technique that is different than the particular communication technique;
responsive to transmitting the provisioning data, generating, based at least in part on the provisioning data, credential enablement data associated with the particular commerce credential from the financial institution subsystem; and
transmitting the credential enablement data to the electronic device using the particular communication technique,
wherein the transmitted credential enablement data is configured to update on the electronic device the transmitted provisioning data on the electronic device for updating the particular commerce credential on the electronic device from a disabled state on the electronic device to an enabled state on the electronic device.

2. The method of claim 1 , wherein the particular communication technique comprises one of a text messaging communication technique or an e-mail messaging communication technique.

3. The method of claim 1 , wherein the transmitting the provisioning data to the electronic device using the other particular communication technique comprises communicating the provisioning data to the electronic device via a commercial entity subsystem.

4. The method of claim 3 , wherein the transmitting the credential enablement data to the electronic device comprises transmitting one of a text message communication to the electronic device or an e-mail message communication to the electronic device.

5. The method of claim 1 , wherein:
the receiving the selection of the particular commerce credential comprises receiving selection data from the electronic device; and
the selection data is generated by an interaction of a user of the electronic device with an online resource running on the electronic device.

6. The method of claim 5 , wherein:
the online resource comprises one of an application or a website; and
the online resource is related to financial institution subsystem.

7. The method of claim 5 , wherein the transmitting the provisioning data comprises transmitting the provisioning data to the online resource running on the electronic device using the other particular communication technique.

8. The method of claim 1 , wherein the transmitted credential enablement data is configured to be utilized by the electronic device to update on the electronic device the transmitted provisioning data on the electronic device for updating the particular commerce credential on the electronic device from the disabled state on the electronic device to the enabled state on the electronic device automatically.

9. The method of claim 1 , wherein the transmitted credential enablement data is configured to be utilized by the electronic device to update, on the electronic device and responsive to receipt of the credential enablement data, the transmitted provisioning data on the electronic device for updating the particular commerce credential on the electronic device from the disabled state on the electronic device to the enabled state on the electronic device.

10. The method of claim 1 , wherein the transmitted credential enablement data is configured to be utilized by the electronic device to update, on the electronic device the transmitted provisioning data on the electronic device for updating the particular commerce credential on the electronic device from the disabled state on the electronic device to the enabled state on the electronic device.

11. The method of claim 1 , wherein the provisioning data comprises a locked passcode for an applet provisioned on the electronic device for the particular commerce credential.

12. The method of claim 11 , wherein the credential enablement data comprises a password operative to unlock the locked passcode.

13. The method of claim 1 , wherein generating, based at least in part on the provisioning data, the credential enablement data comprises:
generating, based at least in part on a provisioning data element of the provisioning data, the credential enablement data, wherein the credential enablement data is configured to interact with the provisioning data element.

14. The method of claim 13 , wherein the provisioning data element comprises a specific reciprocal data element corresponding to the credential enablement data.

15. The method of claim 1 , wherein the received communication mechanism data comprises a hash of a communication address and identifying, with the financial institution subsystem, the particular communication technique of the at least one communication technique indicated by the received communication mechanism data that matches the verified communication technique associated with the particular commerce credential comprises:
hashing the verified communication technique associated with the particular commerce credential; and
verifying that the hash of the communication address matches the hashed verified communication technique.

16. A financial entity system in communication with an electronic device, the financial entity system comprising:
a processor circuit;
a memory circuit; and
one or more communications circuits coupled to the processor circuit and to the memory circuit, the financial entity system configured to:
receive, with any of the one or more communications circuits, a selection of a particular commerce credential to be enabled on an electronic device;
receive, with any of the one or more communications circuits, communication mechanism data indicative of at least one communication technique of the electronic device;
identify, with the processor circuit, a particular communication technique of the at least one communication technique indicated by the received communication mechanism data that matches a verified communication technique associated with the particular credential;
transmit, with any of the one or more communications circuits, provisioning data associated with the particular commerce credential from the financial entity system to the electronic device using an other particular communication technique that is different than the particular communication technique, wherein the transmitted provisioning data is configured to add on the electronic device a disabled pass associated with the particular commerce credential; and
responsive to transmission of the provisioning data, transmit, with any of the one or more communications circuits, components, credential enablement data associated with the particular commerce credential from the financial entity system to the electronic device using the particular communication technique, wherein the transmitted credential enablement data is configured to update on the electronic device the disabled pass associated with the particular commerce credential to an enabled pass associated with the particular commerce credential.

17. The

Assignees

• Apple Inc

Inventors

• Haggerty David T
• Dicker George R
• Linde Joakim
• Khan Ahmer A
• Hurley Timothy S

Classifications

• H04L2101/37

  E-mail addresses · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q30/0185

  Product, service or business identity fraud · CPC title

• G06Q20/3821

  Electronic credentials · CPC title