US 11,687,639 B2Granted

Credential management for mobile devices

AssigneeMastercard International Incorporated

InventorsJames Noe, John Tierney

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present disclosure relates to credential management for mobile devices that can be used for access to secured physical environments. One aspect comprises a computer implemented method comprising a mobile computing device: receiving, from a server system, and storing, on the mobile computing device: one or more application sequence counter values, one or more limited use credentials (LUCs), each LUC being bound to a corresponding one of the application sequence counter values; one or more emergency credentials, and an account token; subsequently receiving an authentication request from a terminal; in response to receiving the authentication request, determining that no LUC is available for fulfilling the request; and in response to determining that no LUC is available for fulfilling the request: transmitting, to the terminal, the account token and an application cryptogram generated from an emergency credential of said one or more emergency credentials; and updating a current application sequence counter.

Claims8

Dependent claims

A computer-implemented method for managing access credentials, the method comprising:

receiving, at a mobile computing device, from a server system, and storing, by the mobile computing device, in memory associated with the mobile computing device:
multiple application sequence counter values;
multiple limited use credentials (LUCs), each LUC bound to a corresponding one of the multiple application sequence counter values;
one or more emergency credentials;
and
an account token;
and then,
receiving, by the mobile computing device, an authentication request from a terminal;
in response to receiving the authentication request:
determining, by the mobile computing device, that none of the multiple LUCs is available in the memory for fulfilling the request;
and
determining that the mobile computing device is unable to receive one or more additional LUCs from the server system;
and then,
in response to (i) determining that none of the multiple LUCs is available in the memory for fulfilling the request and (ii) determining that the mobile computing device is unable to receive the one or more additional LUCs from the server system:
transmitting, by the mobile computing device, to the terminal, the account token and an application cryptogram generated from an emergency credential of said one or more emergency credentials;
and
updating, by the mobile computing device, a current application sequence counter.

14 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/667,177Filed 29 Oct 2019
Priority: EP 820625314 Nov 2018
Published: US 2020/0151311 A114 May 2020
Granted: 27 Jun 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification22 codes

G06F 21/33
User authentication: using certificates
G06Q 20/3227
Aspects of commerce using mobile devices [M-devices]: using secure elements embedded in M-devices
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06Q 20/325
Using wireless devices: using wireless networks