Mobile secure element based shared cardholder verification

Patent metadata

Field	Value
Publication number	US-9978060-B2
Application number	US-201715601650-A
Country	US
Kind code	B2
Filing date	May 22, 2017
Priority date	Jan 23, 2014
Publication date	May 22, 2018
Grant date	May 22, 2018

Abstract

In a payment-enabled smartphone, a shared cardholder verification method (CVM) applet serves a number of mobile payment cardlets. The shared CVM applet validates CVM information input by a user of the smartphone and in response issues a CVM token. The CVM token is passed to a particular one of the mobile payment cardlets that is selected for a current transaction. The selected mobile payment cardlet submits the CVM token back to the shared CVM applet for verification. Upon verifying the CVM token, the shared CVM applet enables the selected mobile payment cardlet to perform the current transaction.

First claim

What is claimed is:

1. A method comprising:
validating user verification data by a verification software entity, said user verification data having been input into a mobile device;
generating a token by the verification software entity in response to the validating of the user verification data;
storing use limitation data for said token in association with the verification software entity, said use limitation data indicating a maximum number of times said token is permitted to be used, said maximum number of times greater than one;
outputting said token;
receiving said outputted token at the verification software entity from a second software entity, said second software entity different from said verification software entity; and
in response to said receiving step, determining whether said token has been used said maximum number of times.

2. The method of claim 1 , wherein the verification software entity runs on said mobile device.

3. The method of claim 2 , wherein said mobile device is a smartphone.

4. The method of claim 3 , wherein said second software entity is a payment card applet.

5. The method of claim 4 , further comprising:
in response to a result of the determining step, enabling the payment card applet to perform a transaction.

6. The method of claim 5 , wherein said outputting step includes transmitting the token to a software entity that is configured to receive user authentication input.

7. The method of claim 5 , wherein said outputting step includes transmitting the token to a wallet midlet.

8. A method comprising:
validating user verification data by a verification software entity, said user verification data having been input into a mobile device;
generating a token by the verification software entity in response to the validating of the user verification data;
storing expiration time data for said token in association with the verification software entity, said expiration time data indicating a data and/or time after which said token is not permitted to be used;
outputting said token;
receiving said outputted token at the verification software entity from a second software entity, said second software entity different from said verification software entity; and
in response to said receiving step, determining whether said date and/or time indicated by said expiration time data has passed.

9. The method of claim 8 , wherein the verification software entity runs on said mobile device.

10. The method of claim 9 , wherein said mobile device is a smartphone.

11. The method of claim 10 , wherein said second software entity is a payment card applet.

12. The method of claim 11 , further comprising:
in response to a result of the determining step, enabling the payment card applet to perform a transaction.

13. The method of claim 12 , wherein said outputting step includes transmitting the token to a software entity that is configured to receive user authentication input.

14. The method of claim 12 , wherein said outputting step includes transmitting the token to a wallet midlet.

15. A mobile device, comprising:
at least one processor; and
at least one memory in communication with the at least one processor and storing a plurality of software entities for programming said at least one processor, said stored software entities including:
a first set of payment cardlets;
a first verification software entity associated with the first set of payment cardlets, said first verification software entity for validating user verification data and issuing tokens to be submitted to the first verification software entity by payment applets included in said first set of payment applets;
a second set of payment cardlets; and
a second verification software entity associated with the second set of payment cardlets, said second verification software entity for validating user verification data and issuing tokens to be submitted to the second verification software entity by payment applets included in said second set of payment applets.

16. The mobile device of claim 15 , wherein said mobile device is embodied as a smartphone.

17. The mobile device of claim 16 , wherein the at least one memory stores a wallet midlet.

18. The mobile device of claim 17 , wherein the at least one memory stores a plurality of software entities configured to receive user authentication input.

19. The mobile device of claim 18 , wherein the at least one memory includes a secure memory residing in a secure element, said first set of payment applets and said first verification software entity stored in said secure memory.

20. The mobile device of claim 19 , wherein said second set of payment applets and said second verification software entity are stored in said secure memory.

Assignees

• Mastercard International Inc

Inventors

• Maddocks Ian David Alan
• Phillips Simon
• Main Jonathan James

Classifications

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/3672 Primary

  initialising or reloading thereof · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title