Multi-path communication of electronic device secure element data for online payments

Patent metadata

Field	Value
Publication number	US-11748746-B2
Application number	US-201615274841-A
Country	US
Kind code	B2
Filing date	Sep 23, 2016
Priority date	Sep 30, 2013
Publication date	Sep 5, 2023
Grant date	Sep 5, 2023

Abstract

Systems, methods, and computer-readable media for communicating electronic device secure element data over multiple paths for online payments are provided. In one example embodiment, a method includes, inter alia, at a commercial entity subsystem, receiving, from an electronic device, device transaction data that includes credential data indicative of a payment credential on the electronic device for funding a transaction with a merchant subsystem, accessing a transaction identifier, deriving a transaction key based on transaction key data that includes the accessed transaction identifier, transmitting, to one of the merchant subsystem and the electronic device, merchant payment data that includes a first portion of the credential data and the accessed transaction identifier, and sharing, with a financial institution subsystem using the transaction key, commercial payment data that includes a second portion of the credential data that is different than the first portion of the credential data. Additional embodiments are also provided.

First claim

What is claimed is:

1. A method comprising:
receiving, by a commercial entity subsystem, device transaction data from an electronic device performing a transaction with a merchant subsystem, wherein the device transaction data comprises:
token information indicative of a payment credential on the electronic device;
crypto information indicative of the electronic device; and
transaction information indicative of a transaction between the electronic device and a merchant subsystem;

deriving, by the commercial entity subsystem, a transaction key based on transaction key data, wherein the transaction key data comprises:
the token information; and
a first portion of the transaction information;

transmitting, by the commercial entity subsystem, merchant payment data via a first communication path that comprises the merchant subsystem, wherein the merchant payment data comprises:
the token information; and
a second portion of the transaction information; and

communicating, by the commercial entity subsystem, commercial payment data to a financial institution subsystem based at least in part on an association between the commercial payment data and the transaction key and via a second communication path that bypasses the merchant subsystem, wherein the commercial payment data comprises the crypto information, the commercial payment data being different from the merchant payment data, and the commercial entity subsystem is separate from the financial institution subsystem, the electronic device, and the merchant subsystem.

2. The method of claim 1 , wherein the token information comprises at least one of:
a primary account number of the payment credential; or
an expiry date of the payment credential.

3. The method of claim 1 , wherein:
the transaction information comprises merchant information indicative of the merchant subsystem; and
the first portion of the transaction information comprises the merchant information.

4. The method of claim 3 , wherein the second portion of the transaction information comprises the merchant information.

5. The method of claim 3 , wherein the second portion of the transaction information does not comprise the merchant information.

6. The method of claim 3 , wherein the merchant information comprises a merchant identification element associated with an acquiring bank of the merchant subsystem.

7. The method of claim 1 , wherein the transaction information comprises at least one of:
an amount of a cost of the transaction; or
a currency of the transaction.

8. The method of claim 1 , further comprising, at the commercial entity subsystem, generating a transaction identifier, wherein the transaction key data further comprises the generated transaction identifier.

9. The method of claim 8 , wherein the merchant payment data further comprises the generated transaction identifier.

10. The method of claim 1 , wherein the communicating comprises communicating the commercial payment data with the financial institution subsystem in response to receiving a key from the financial institution subsystem at the commercial entity subsystem that is the same as the transaction key.

11. The method of claim 1 , wherein the communicating comprises communicating the commercial payment data and the transaction key with the financial institution subsystem.

12. The method of claim 1 , wherein the commercial payment data further comprises transaction-enhancer information that comprises at least one of:
a partial shipment indicator; or
a recurring billing indicator.

13. The method of claim 1 , wherein the commercial payment data further comprises transaction-enhancer information that comprises at least one of:
an amount restriction; or
a time restriction.

14. The method of claim 1 , wherein the crypto information is based on a shared secret between the electronic device and the financial institution subsystem.

15. A non-transitory machine-readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, by a commercial entity subsystem, device transaction data from an electronic device, wherein the device transaction data comprises credential data indicative of a payment credential on the electronic device to be used for funding a transaction with a merchant subsystem;
accessing, by the commercial entity subsystem, a transaction identifier;
deriving, by the commercial entity subsystem, a transaction key based on transaction key data, wherein the transaction key data comprises the accessed transaction identifier;
transmitting, by the commercial entity subsystem, merchant payment data via a first communication path that comprises the merchant subsystem, wherein the merchant payment data comprises:
a first portion of the credential data; and
the accessed transaction identifier; and

transmitting, by the commercial entity subsystem, commercial payment data to a financial institution subsystem based at least in part on an association between the commercial payment data and the transaction key, and via a second communication path that excludes the merchant subsystem, wherein the commercial payment data comprises a second portion of the credential data that is different than the first portion of the credential data, and the commercial entity subsystem is separate from the financial institution subsystem, the electronic device, and the merchant subsystem.

16. The non-transitory machine-readable medium of claim 15 , wherein both the first portion of the credential data and the second portion of the credential data are required by the financial institution subsystem to validate the credential data for funding the transaction.

17. The non-transitory machine-readable medium of claim 15 , wherein:
the first portion of the credential data comprises an account number of the payment credential; and
the second portion of the credential data comprises a cryptogram generated using a shared secret of the electronic device and the financial institution subsystem.

18. The non-transitory machine-readable medium of claim 15 , wherein the second portion of the credential data links the first portion of the credential data to the electronic device and to the transaction.

19. The non-transitory machine-readable medium of claim 15 , wherein:
the first portion of the credential data comprises a cryptogram generated using a shared secret of the electronic device and the financial institution subsystem; and
the second portion of the credential data comprises an account number of the payment credential.

20. The method of claim 1 , wherein both the token information and the crypto information are required by the financial institution subsystem to validate the payment credential for funding the transaction.

21. The method of claim 1 , wherein:
the token information comprises an account number of the payment credential; and
the crypto information comprises a cryptogram generated using a shared secret of the electronic device and the financial institution subsystem.

22. The method of claim 1 , wherein the crypto information links the token information to the electronic device and to the transaction.

23. A commercial entity subsystem comprising:
a memory; and
at least one processor configured to:
receive device transaction data from an electronic device, wherein the device transaction data comprises:
token information indicative of a payment c

Assignees

• Apple Inc

Inventors

• Pillai Manoj K Thulaseedharan
• Khan Ahmer A
• Elliott Thomas
• Hurley Timothy S
• Bailey Jennifer J
• Brudnicki David E

Classifications

• G06Q20/3227

  using secure elements embedded in M-devices · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title