Mobile secure element based shared cardholder verification

Patent metadata

Field	Value
Publication number	US-9704156-B2
Application number	US-201414162055-A
Country	US
Kind code	B2
Filing date	Jan 23, 2014
Priority date	Jan 23, 2014
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

In a payment-enabled smartphone, a shared cardholder verification method (CVM) applet serves a number of mobile payment cardlets. The shared CVM applet validates CVM information input by a user of the smartphone and in response issues a CVM token. The CVM token is passed to a particular one of the mobile payment cardlets that is selected for a current transaction. The selected mobile payment cardlet submits the CVM token back to the shared CVM applet for verification. Upon verifying the CVM token, the shared CVM applet enables the selected mobile payment cardlet to perform the current transaction.

First claim

What is claimed is:

1. A method comprising:
receiving user verification data in a mobile device;
providing the received user verification data to a verification software entity in the mobile device;
validating the user verification data by the verification software entity;
generating a token by the verification software entity in response to the validating of the user verification data;
transmitting the token from the verification software entity to another software entity in the mobile device;
selecting a transaction software entity from among a plurality of transaction software entities stored in the mobile device;
transmitting the token from the another software entity to the selected transaction software entity;
transmitting the token from the selected transaction software entity to the verification software entity;
receiving the token by the verification software entity from the selected transaction software entity;
verifying, by the verification software entity, the token received by the verification software entity from the selected transaction software entity;
enabling, by the verification software entity, the selected transaction software entity to perform a transaction; and
performing a transaction by the enabled selected transaction software entity.

2. The method of claim 1 , wherein the token includes an unpredictable number generated by the verification software entity.

3. The method of claim 1 , wherein the token includes a cryptogram generated by the verification software entity using a private key stored in association with the verification software entity.

4. The method of claim 1 , wherein the verification software entity stores data that indicates a time when the token expires.

5. The method of claim 1 , wherein the verification software entity stores data that indicates a remaining number of transactions for which the token is authorized.

6. The method of claim 1 , wherein the verification software entity is configured such that the token is authorized for only one transaction.

7. The method of claim 1 , wherein the selected transaction software entity is a payment transaction software entity and the performed transaction is a payment transaction.

8. The method of claim 7 , wherein the payment transaction software entity stores a payment card account number issued to a user of the mobile device.

9. The method of claim 7 , wherein the plurality of transaction software entities consists of a plurality of payment transaction software entities, each of said plurality of payment transaction software entities storing a respective payment card account number issued to a user of the mobile device.

10. The method of claim 7 , wherein the another software entity is a wallet midlet.

11. The method of claim 10 , wherein the token is transmitted from the verification software entity to the wallet midlet via a CVM capture software module.

12. The method of claim 1 , wherein the verification software entity is configured such that the token contains details readable but not modifiable outside the verification software entity, said details including CVM technology used and usage constraints for the token.

13. The method of claim 1 , wherein the selected transaction software entity is an access transaction software entity and the performed transaction is a physical access to an enclosure.

14. The method of claim 1 , wherein the verification software entity is stored in and runs on a secure element in the mobile device.

15. The method of claim 14 , wherein the plurality of transaction software entities are all stored in and run on the secure element.

16. The method of claim 1 , wherein the mobile device is a mobile telephone.

17. The method of claim 1 , wherein a plurality of verification software entities are operative in the mobile device, each of said plurality of verification software entities for verifying tokens submitted from a respective subset of said plurality of transaction software entities.

18. A method comprising:
issuing a user verification token from a CVM applet running in a secure element in a mobile device; said CVM applet for performing a cardholder verification method function, the cardholder verification method function including obtaining a PIN (personal identification number) or biometric information from a user of the mobile device;
receiving the issued user verification token back in the CVM applet from a payment card applet running in the secure element;
verifying, by the CVM applet, the received issued user verification token; and
in response to the verifying of the received issued user verification token, enabling the payment card applet to perform a payment transaction.

19. The method of claim 18 , further comprising:
prior to the receiving step, selecting said payment card applet from among a plurality of payment card applets stored in the secure element.

20. The method of claim 19 , further comprising:
after the selecting step and prior to the receiving step, transmitting the issued user verification token to the selected payment card applet.

21. A method comprising:
issuing a user verification token from a CVM applet running in a secure element in a mobile device; said CVM applet for performing a cardholder verification method function, the cardholder verification method function including obtaining a PIN (personal identification number) or biometric information from a user of the mobile device;
receiving the issued user verification token in a wallet midlet running in the mobile device outside of the secure element;
selecting a payment card applet from among a plurality of payment card applets stored in the secure element; and
transmitting the received issued user verification token from the wallet midlet to the selected payment card applet.

Assignees

• Mastercard International Inc

Inventors

• Maddocks Ian David Alan
• Phillips Simon
• Main Jonathan James

Classifications

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title

• G06Q20/3672 Primary

  initialising or reloading thereof · CPC title