Account provisioning authentication

Patent metadata

Field	Value
Publication number	US-9864987-B2
Application number	US-201715432760-A
Country	US
Kind code	B2
Filing date	Feb 14, 2017
Priority date	Mar 15, 2013
Publication date	Jan 9, 2018
Grant date	Jan 9, 2018

Abstract

Embodiments of the present invention are directed to methods, systems, and apparatuses for providing a secure authentication scheme for authenticating users and accounts on behalf of a service provider server computer offering services to a user. Upon determining, by the secure authentication scheme, that the user and/or account identifier associated with the user is authenticate, the service provider server computer may be provided with assurance that the user is authenticate and thereafter provide a service requested by the user.

First claim

What is claimed is:

1. A method comprising:
transmitting, by a communication device, account details to a wallet provider server computer, wherein the wallet provider server computer generates a service provider request message, which is transmitted by an access control server;
receiving, by the communication device, an authentication request message from the access control server;
transmitting, by the communication device, an authentication response message to the access control server, wherein the access control server thereafter generates and sends a service provider response message to the wallet provider server computer, which transmits an activation request message to a trusted service manager system; and
receiving, from the trusted manager system, an account identifier in a provisioning process.

2. The method of claim 1 , wherein the communication device is a mobile communication device.

3. The method of claim 1 , wherein the wallet provider server computer transmits the service provider request message to the access control server via a directory server computer.

4. The method of claim 3 , wherein the access control server transmits the service provider response message to the wallet provider server computer via the directory server computer.

5. The method of claim 1 , wherein the account identifier is a credit card number.

6. The method of claim 1 , wherein the communication device comprises a processor, and a secure element and a contactless element coupled to the processor.

7. The method of claim 6 , wherein the account identifier is a token that is provisioned in the secure element.

8. A communication device comprising:
a processor; and
a computer readable medium, comprising code executable by the processor to implement a method comprising:
transmitting account details to a wallet provider server computer, wherein the wallet provider server computer generates a service provider request message, which is transmitted by an access control server;
receiving an authentication request message from the access control server;
transmitting an authentication response message to the access control server, wherein the access control server thereafter generates and sends a service provider response message to the wallet provider server computer, which transmits an activation request message to a trusted service manager system; and
receiving, from the trusted manager system, an account identifier in a provisioning process.

9. The communication device of claim 8 , wherein the communication device is a mobile communication device.

10. The communication device of claim 8 , wherein the wallet provider server computer transmits the service provider request message to the access control server via a directory server computer.

11. The communication device of claim 8 , wherein the access control server transmits the service provider response message to the wallet provider server computer via a directory server computer.

12. The communication device of claim 8 , wherein the account identifier is a credit card number.

13. The communication device of claim 8 , further comprising:
a secure element and a contactless element coupled to the processor.

14. The communication device of claim 13 wherein the account identifier is a token stored in the secure element.

15. A method comprising:
receiving, by a wallet provider server computer, account details;
transmitting, by the wallet provider server computer, a service provider request message to an access control server computer, wherein the access control server computer sends an authentication request message to a communication device and receives an authentication response message from the communication device;
receiving, by the wallet provider server computer, a service provider response message from the access control server computer; and
generating and sending, by the wallet provider server computer, an activation request message to a trusted manager service system, the trusted manager service system provisioning the communication device with an account identifier.

16. The method of claim 15 , wherein the communication device is a mobile phone.

17. The method of claim 15 , wherein transmitting the service provider request message to the access control server computer occurs via a directory server computer.

18. The method of claim 15 , wherein the communication device comprises a processor, and a contactless element and a secure element coupled to the processor.

19. The method of claim 18 , wherein the account identifier is provisioned to the secure element.

20. The method of claim 15 , wherein the account identifier is a payment token.

Assignees

• Visa Int Service Ass

Inventors

• Mccarthy James
• Sheets John F

Classifications

• G06Q20/3274

  using a pictured code, e.g. barcode or QR-code, being displayed on the M-device · CPC title

• G06Q20/4012

  Verifying personal identification numbers [PIN] · CPC title

• G06Q20/3552

  Downloading or loading of personalisation data · CPC title

• G06Q20/363

  with the personal data of a user · CPC title

• G06Q20/36 Primary

  using electronic wallets or electronic money safes · CPC title