Secure remote payment transaction processing using a secure element

Patent metadata

Field	Value
Publication number	US-11062306-B2
Application number	US-201715490191-A
Country	US
Kind code	B2
Filing date	Apr 18, 2017
Priority date	Aug 15, 2013
Publication date	Jul 13, 2021
Grant date	Jul 13, 2021

Abstract

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device. The method comprises receiving, by a mobile payment application on a secure memory of the mobile device, transaction data from a transaction processor application on the mobile device. The method further comprises validating that the transaction processor application is authentic and in response to validating the transaction processor application, providing encrypted payment credentials to the transaction processor application. The transaction processor application further initiates a payment transaction with a transaction processor server computer using the encrypted payment credentials.

First claim

What is claimed is:

1. A method comprising:
selecting, by a transaction processor application in a communication device, items for purchase in a transaction at a merchant server computer;
wherein the communication device is a mobile phone;
wherein the communication device comprises a secure element;
identifying, by the transaction processor application in the communication device, a payment account;
communicating, by the transaction processor application, transaction data associated with the transaction to a payment application in the secure element on the communication device;
retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account;
sending, by the payment application in the secure element, the payment credential to the transaction processor application;
transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer;
receiving, by the merchant server computer, the transmitted payment credential; and
initiating, by the merchant server computer, a payment transaction with the payment credential.

2. The method of claim 1 , wherein the payment credential comprises a token.

3. The method of claim 2 , wherein the transaction processor application is a merchant application.

4. The method of claim 1 , further comprising:
receiving, by the communication device, a selection of the payment account, the selection identifying the payment account.

5. The method of claim 1 , wherein the payment credential is in encrypted form as the payment credential is transmitted from the communication device to the merchant server computer.

6. The method of claim 1 , further comprising:
receiving, by the payment application, signed transaction data from the transaction processor application; and
validating, by the payment application, the signed transaction data using a transaction processor public key before retrieving the payment credential from the secure element in the communication device.

7. A system comprising:
a communication device comprising:
a first processor; and
a first non-transitory medium, the first non-transitory medium comprising instructions when executed by the first processor, causes the first processor to perform the steps of:
selecting, by a transaction processor application in the communication device, items for purchase in a transaction at a merchant server computer;
wherein the communication device is a mobile phone;
wherein the communication device comprises a secure element;
identifying, by the transaction processor application in the communication device, a payment account;
communicating, by the transaction processor application in the communication device, transaction data associated with the transaction to a payment application in the secure element on the communication device;
retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account;
sending, by the payment application in the secure element, the payment credential to the transaction processor application; and
transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer; and
the merchant server computer, the merchant server computer comprising a second processor, and a second computer readable medium comprising code, executable by the second processor for performing steps including: initiating a payment transaction with the payment credential.

8. The system of claim 7 , wherein the payment credential comprises a token.

9. The system of claim 7 , wherein the transaction processor application is a merchant application.

10. The system of claim 7 , wherein initiating the payment transaction with the payment credential includes generating an authorization request message comprising the payment credential.

11. The system of claim 7 , wherein the steps further comprise:
receiving a selection of the payment account from a user, the selection identifying the payment account.

Assignees

• Visa Int Service Ass

Inventors

• Karpenko Igor
• Makhotin Oleg
• Pirzadeh Kiushan
• Powell Glenn
• Sheets John
• Wong Erick

Classifications

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• G06Q20/3825

  Use of electronic signatures · CPC title

• G06Q20/367

  involving electronic purses or money safes · CPC title

• G06Q20/401

  Transaction verification · CPC title

• G06Q20/3227

  using secure elements embedded in M-devices · CPC title