# US 10,372,440 B1 · Tokenized mobile device update systems and methods > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,440 B1 - Document ID: US10372440B1 - Status: Granted - Kind: B1 - Application number: 16/186,457 - Filed: 2018-11-09 - Granted: 2019-08-06 - Earliest claimed: 2018-11-09 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Adam Koeppel - Web page: https://patentgrep.com/patent/US10372440B1 ## CPC - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 8/61: Installation - H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC} - H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/102: {Entity profiles} - H04W 4/50: Service provisioning or reconfiguring - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/06: Authentication - H04W 12/08: Access security - G06F 8/62: {Uninstallation} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 2209/80: Wireless - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 76/10: Connection setup - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods are provided for managing mobile device updates. In some embodiments, the disclosed systems can include a key provisioning system, a key system, and mobile devices. The key provisioning system can provide keys to the mobile devices and the key system. The key system can receive a key from the key provisioning system, receive a request from an application system, calculate a first token, and provide the first token to the application system for transmission to a mobile device. The mobile device can receive a key from the key provisioning system, establish a local connection with a connected device, receive an application and the first token from the connected device, generate a second token using the application and the key, compare the first token and the second token, and update the mobile device according to the application based on a result of the comparison. ## Claims ### Claim 1 A method for updating a mobile device performed by the mobile device, comprising: storing, in a secure element of the mobile device, a key received from a key provisioning system; establishing a local connection with a connected device; receiving an application and a first token from the connected device, the application including a command; generating a second token using the application and the key; comparing the first token and the second token; updating the mobile device according to the application based on a result of the comparison, the updating comprising executing the command on the mobile device. ### Claim 2 (depends on 1) The method of claim 1, wherein the connected device is a first smart phone and the mobile device is a smart watch, a smart card, or a second smart phone. ### Claim 3 (depends on 1) The method of claim 1, the method further comprising providing, to the connected device, instructions to retrieve the application from an application system, and wherein the application is received in response to providing the instructions to retrieve the application. ### Claim 4 (depends on 3) The method of claim 3, wherein the application system is distinct from the key provisioning system. ### Claim 5 (depends on 1) The method of claim 1, the method further comprising providing instructions to display an authorization message on the connected device. ### Claim 6 (depends on 1) The method of claim 1, wherein receiving the application and the first token from the connected device comprises decrypting the at least one of the application and the first token. ### Claim 7 (depends on 1) The method of claim 1, wherein updating the mobile device according to the application comprises installing, uninstalling, or modifying an applet on the mobile device. ### Claim 8 (depends on 1) The method of claim 1, wherein the first token comprises a hash of the application, and wherein the application comprises a firmware update. ### Claim 9 (depends on 1) The method of claim 1, wherein the mobile device establishes the connection according to a predetermined schedule or in response to a signal received from the connected device. ### Claim 10 A system for managing mobile device updates, comprising: a key provisioning system comprising a first processor and a first memory storing first instructions that when executed by the first processor cause the key provisioning system to perform first operations comprising: providing a key to a mobile device and to a key system; wherein the key system comprises a second processor and a second memory storing second instructions that when executed by the second processor cause the key system to perform second operations comprising: receiving the key from the key provisioning system; receiving a request from an application system, the request including an application, the application including a command; calculating a first token using the key and the application; and providing the first token to the application system for transmission to the mobile device, and wherein the mobile device comprises a third processor and a third memory storing third instructions that when executed by the third processor cause the mobile device to perform third operations comprising: receiving the key from the key provisioning system; establishing a local connection with a connected device; receiving the application and the first token from the connected device; generating a second token using the application and the key; comparing the first token and the second token; and updating the mobile device according to the application based on a result of the comparison, the updating comprising executing the command on the mobile device.