US 12,223,502 B2Granted

Instant digital issuance

AssigneeFirst Data Corporation

InventorsVijay Royyuru, Benjamin Rewis, Sr., Lanny Byers, Renee Goodheart, Cindy White, Kelly Urban, Skyler Fox

Life of this patent

Estimating the term…

Loading patent…

Abstract

Described herein are techniques for facilitating push provisioning of a user payment source into a user's digital wallet without the user having a physical card. The techniques allow an issuer to provide a button in an issuer's mobile application for the user to simply push the button to request that the payment source be imported into the user's digital pay wallet. In this way, the payment source information is “pushed” into the pay wallet. Using push provisioning, the user need not enter any physical card information. The described techniques generate a chain of trust that can be used to ensure that a user, through an issuer and using an encryption gateway, authorizes a token service provider to provision the payment source into the user's digital wallet.

Claims21

Dependent claims

One or more non-transitory computer-readable media comprising computer-readable instructions stored thereon that when executed by one or more processors causes the one or more processors to perform a process for provisioning instant digital access to a user payment source using a mobile device pay wallet comprising:

receiving, at a gateway encryption service, from an issuer mobile application server, user information for a user and account information for provisioning the user payment source;
transmitting, by the gateway encryption service, the user information and the account information to a gateway lookup service to request primary account number data for the user payment source from an issuing host platform;
receiving, at the gateway lookup service, from the issuing host platform, the primary account number data comprising an account number for the user payment source;
encrypting, by the gateway encryption service, the primary account number data to generate encrypted provision data by:
identifying a first set of encryption requirements associated with a token service provider, wherein the first set of encryption requirements include a type of encryption algorithm and a minimum length of an encryption key;
identifying, by the gateway encryption service, an encryption key from a plurality of encryption keys stored in a database using the primary account number data, the encryption key set with token service provider information;
identifying, by the gateway encryption service, a second set of encryption requirements for the mobile device pay wallet using wallet data from the mobile device pay wallet;
ensuring that the encryption key complies with the combination of the first set of encryption requirements and the second set of encryption requirements;
and
applying the encryption key set by the token service provider to the primary account number data based on an encryption algorithm and a minimum length of the encryption key identified from the first set of encryption requirements;
transmitting, by the gateway encryption service, the encrypted provision data to the issuer mobile application server.

8 more elements

A gateway system comprising:

one or more processors, and
one or more memories having stored thereon computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to:
receive, by a gateway encryption service, from an issuer mobile application server, user information for a user and account information for a payment source of the user;
transmit, by the gateway encryption service, the user information and the account information to a gateway lookup service;
receive, at the gateway lookup service, from an issuing host platform, primary account number data comprising an account number for the payment source;
transmit, by the gateway lookup service, the primary account number data to the gateway encryption service;
encrypt, by the gateway encryption service, the primary account number data using an encryption key associated with a token service provider to generate encrypted provision data,
wherein the encrypting comprises:
identifying
a first set of encryption requirements associated with a token service provider, wherein the first set of encryption requirements include a type of encryption algorithm and a minimum length of an encryption key;
identifying, by the gateway encryption service, an encryption key from a plurality of encryption keys stored in a database using the primary account number data, the encryption key set with token service provider information;
identifying, by the gateway encryption service, a second set of encryption requirements for the mobile device pay wallet using wallet data from the mobile device pay wallet;
ensuring that the encryption key complies with the combination of the first set of encryption requirements and the second set of encryption requirements;
and
applying the encryption key set by the token service provider to the primary account number data based on an encryption algorithm and a minimum length of the encryption key identified from the first set of encryption requirements;
and
transmitting the encrypted provision data to the issuer mobile application server.

14 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/443,169Filed 17 Jun 2019 · us provisional application
Priority: 18 Jun 2018
Published: US 2019/0385164 A119 Dec 2019
Granted: 11 Feb 2025
Term ends: Not estimatedThe source records don’t support an estimate.

Classification16 codes

G06Q 20/401
Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check…:…
H04L 9/3273
Using challenge-response: for mutual authentication
G06Q 20/027
Involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]: involving a payment switch or gateway
G06Q 20/36
Characterised by the use of specific devices or networks: using electronic wallets or electronic money safes