# US 12,764,530 B2 · System and method for provisioning mobile credentials > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,764,530 B2 - Document ID: US12764530B2 - Status: Granted - Kind: B2 - Application number: 18/196,067 - Filed: 2023-05-11 - Published: 2024-08-22 - Granted: 2026-10-13 - Earliest claimed: 2023-02-17 - Assignees: Illumia, LLC - Applicants: Transact Campus Inc. - Inventors: Shane O'Connor; Raghu Rudra; Dietmar Glenn Tonn; Adan Estevan Perez; James Stephen Sadlier; Daniel Mel Farrell; Praveen Talari; Collen Nqabutho Ndlovu - Web page: https://patentgrep.com/patent/US12764530B2 ## CPC - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04W 12/47: using near field communication [NFC] or radio frequency identification [RFID] modules - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method for provisioning mobile credentials in digital wallets of mobile devices is disclosed. A mobile device uses an invocation URL to launch a micro application that performs the mobile credential provisioning process. In some embodiments, the micro application is configured for use by users associated with a plurality of different institutions and optional service portals. In this case, the invocation URL includes a unique parameter that identifies an institution and optional service portal so that the mobile device is able to customize the login experience for each institution. As such, users associated with different institutions and optional service portals are able to quickly provision mobile credentials without having to access an application store and locate, download and install a mobile application and then go through a cumbersome institution/service portal selection process just to perform this single task. ## Claims ### Claim 1 A non-transitory computer readable medium storing instructions that, when executed by one or more processors of a computing device, cause the one or more processors to perform a plurality of operations comprising: launching a micro application, wherein an operating system of the computing device manages a lifecycle of the micro application and unloads the micro application without user action; identifying a unique parameter associated with an institution; identifying, based on the unique parameter at launch time, a configuration set corresponding to the institution, wherein the configuration set controls generation of a user interface by identifying customized content for the institution; causing the micro application to display the user interface that includes the customized content for the institution and one or more data input fields for entry of login credentials by a user, wherein the login credentials entered into the data input fields enable authentication of the user; identifying one or more identifiers associated with the user; and creating mobile credential data that includes the one or more identifiers, wherein the mobile credential data enables provisioning of a mobile credential in a digital wallet of the computing device. ### Claim 2 (depends on 1) The non-transitory computer readable medium of claim 1, wherein the computing device comprises one of a mobile phone, a wearable computing device, or a personal computing tablet. ### Claim 3 (depends on 1) The non-transitory computer readable medium of claim 1, wherein the unique parameter associated with the institution comprises a portion of an invocation Uniform Resource Locator (URL). ### Claim 4 (depends on 3) The non-transitory computer readable medium of claim 3, wherein the mobile device is configured to decode the invocation URL from a machine-readable code to thereby launch the micro application. ### Claim 5 (depends on 3) The non-transitory computer readable medium of claim 3, wherein the mobile device is configured to read the invocation URL from a Near-Field Communication (NFC) tag to thereby launch the micro application. ### Claim 6 (depends on 3) The non-transitory computer readable medium of claim 3, wherein the mobile device is configured to render an interface that presents a link or button directed to the invocation URL, wherein selection of the link or button causes launch of the micro application. ### Claim 7 (depends on 1) The non-transitory computer readable medium of claim 1, wherein the operations further comprise: generating the user interface based on a predetermined format configured for use with a plurality of different institutions, wherein the predetermined format includes the data input fields and enables dynamic inclusion of the customized content for the institution. ### Claim 8 (depends on 1) The non-transitory computer readable medium of claim 1, wherein the customized content comprises one or more of a name of the institution, a logo associated with the institution, and a color associated with the institution. ### Claim 9 (depends on 1) The non-transitory computer readable medium of claim 1, wherein the customized content comprises textual information configured for the institution. ### Claim 10 (depends on 1) The non-transitory computer readable medium of claim 1, wherein identifying the configuration set corresponding to the unique parameter comprises: transmitting the unique parameter to a mapping service in communication with a mapping database, wherein the mapping database stores a plurality of unique parameters and corresponding configuration sets, and wherein the mapping service (a) accesses the mapping database to identify the configuration set corresponding to the unique parameter and (b) transmits the configuration set to the computing device. ### Claim 11 (depends on 1) The non-transitory computer readable medium of claim 1, wherein identifying the configuration set corresponding to the unique parameter comprises: transmitting the unique parameter to a mapping service in communication with a mapping database, wherein the mapping database stores a plurality of unique parameters and corresponding institution identifiers, and wherein the mapping service (a) accesses the mapping database to identify an institution identifier corresponding to the unique parameter and (b) transmits the institution identifier to the computing device; and transmitting the institution identifier to a configuration service in communication with a configuration database, wherein the configuration database stores a plurality of institution identifiers and corresponding configuration sets, and wherein the configuration service (a) accesses the configuration database to identify the configuration set corresponding to the institution identifier and (b) transmits the configuration set to the computing device. ### Claim 12 (depends on 11) The non-transitory computer readable medium of claim 11, wherein the institution identifier comprises an institution and service portal tuple. ### Claim 13 (depends on 1) The non-transitory computer readable medium of claim 1, wherein identifying the one or more identifiers associated with the user comprises: receiving user information associated with the login credentials from an identity service provider; and identifying the one or more identifiers corresponding to the user information. ### Claim 14 (depends on 13) The non-transitory computer readable medium of claim 13, wherein the configuration set identifies the identity service provider. ### Claim 15 A non-transitory computer readable medium storing instructions that, when executed by one or more processors of a computing device, cause the one or more processors to perform a plurality of operations comprising: launching a micro application, wherein an operating system of the computing device manages a lifecycle of the micro application and unloads the micro application without user action; identifying a unique parameter associated with an institution; identifying, based on the unique parameter at launch time, a configuration set corresponding to the institution, wherein the configuration set controls generation of a user interface by identifying an identity service provider for the institution; causing the micro application to display the user interface that includes one or more data input fields for entry of login credentials by a user, wherein the login credentials entered into the data input fields enable authentication of the user by the identity service provider for the institution; receiving user information associated with the login credentials from the identity service provider for the institution; identifying one or more identifiers corresponding to the user information; and creating mobile credential data that includes the one or more identifiers, wherein the mobile credential data enables provisioning of a mobile credential in a digital wallet of the computing device. ### Claim 16 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the computing device comprises one of a mobile phone, a wearable computing device, or a personal computing tablet. ### Claim 17 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the unique parameter associated with the institution comprises a portion of an invocation Uniform Resource Locator (URL). ### Claim 18 (depends on 17) The non-transitory computer readable medium of claim 17, wherein the mobile device is configured to decode the invocation URL from a machine-readable code to thereby launch the micro application. ### Claim 19 (depends on 17) The non-transitory computer readable medium of claim 17, wherein the mobile device is configured to read the invocation URL from a Near-Field Communication (NFC) tag to thereby launch the micro application. ### Claim 20 (depends on 17) The non-transitory computer readable medium of claim 17, wherein the mobile device is configured to render an interface that presents a link or button directed to the invocation URL, wherein selection of the link or button causes launch of the micro application. ### Claim 21 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the configuration set identifies customized content for the institution, and wherein the user interface includes the customized content. ### Claim 22 (depends on 21) The non-transitory computer readable medium of claim 21, wherein the operations further comprise: generating the user interface based on a predetermined format configured for use with a plurality of different institutions, wherein the predetermined format includes the data input fields and enables dynamic inclusion of the customized content for the institution. ### Claim 23 (depends on 21) The non-transitory computer readable medium of claim 21, wherein the customized content comprises one or more of a name of the institution, a logo associated with the institution, and a color associated with the institution. ### Claim 24 (depends on 21) The non-transitory computer readable medium of claim 21, wherein the customized content comprises textual information configured for the institution. ### Claim 25 (depends on 15) The non-transitory computer readable medium of claim 15, wherein identifying the configuration set corresponding to the unique parameter comprises: transmitting the unique parameter to a mapping service in communication with a mapping database, wherein the mapping database stores a plurality of unique parameters and corresponding configuration sets, and wherein the mapping service (a) accesses the mapping database to identify the configuration set corresponding to the unique parameter and (b) transmits the configuration set to the computing device. ### Claim 26 (depends on 15) The non-transitory computer readable medium of claim 15, wherein identifying the configuration set corresponding to the unique parameter comprises: transmitting the unique parameter to a mapping service in communication with a mapping database, wherein the mapping database stores a plurality of unique parameters and corresponding institution identifiers, and wherein the mapping service (a) accesses the mapping database to identify an institution identifier corresponding to the unique parameter and (b) transmits the institution identifier to the computing device; and transmitting the institution identifier to a configuration service in communication with a configuration database, wherein the configuration database stores a plurality of institution identifiers and corresponding configuration sets, and wherein the configuration service (a) accesses the configuration database to identify the configuration set corresponding to the institution identifier and (b) transmits the configuration set to the computing device. ### Claim 27 (depends on 26) The non-transitory computer readable medium of claim 26, wherein the institution identifier comprises an institution and service portal tuple. ### Claim 28 A method for provisioning a mobile credential in a digital wallet of a mobile device, comprising: launching a micro application on the mobile device, wherein an operating system of the computing device manages a lifecycle of the micro application and unloads the micro application without user action; and initiating execution of the micro application on the mobile device, wherein the micro application performs a plurality of operations comprising: displaying a user interface that includes one or more data input fields for entry of login credentials by a user, wherein the login credentials entered into the data input fields enable authentication of the user; identifying one or more identifiers associated with the user; and creating mobile credential data that includes the one or more identifiers, wherein the mobile credential data enables provisioning of a mobile credential in a digital wallet of the computing device. ### Claim 29 (depends on 28) The method of claim 28, wherein the mobile device comprises one of a mobile phone, a wearable computing device, or a personal computing tablet. ### Claim 30 (depends on 28) The method of claim 28, wherein the unique parameter associated with the institution comprises a portion of an invocation Uniform Resource Locator (URL). ### Claim 31 (depends on 30) The method of claim 30, wherein the mobile device is configured to decode the invocation URL from a machine-readable code to thereby launch the micro application. ### Claim 32 (depends on 30) The method of claim 30, wherein the mobile device is configured to read the invocation URL from a Near-Field Communication (NFC) tag to thereby launch the micro application. ### Claim 33 (depends on 30) The method of claim 30, wherein the mobile device is configured to render an interface that presents a link or button directed to the invocation URL, wherein selection of the link or button causes launch of the micro application. ### Claim 34 (depends on 28) The method of claim 28, wherein the micro application is configured for use in connection with a plurality of different institutions, and wherein the operations further comprise identifying a unique parameter associated with an institution, wherein the institution comprises one of the plurality of different institutions. ### Claim 35 (depends on 34) The method of claim 34, wherein the operations further comprise identifying customized content for the institution, and wherein the user interface includes the customized content. ### Claim 36 (depends on 35) The method of claim 35, wherein the operations further comprise: generating the user interface based on a predetermined format configured for use with the plurality of different institutions, wherein the predetermined format includes the data input fields and enables dynamic inclusion of the customized content for the institution. ### Claim 37 (depends on 35) The method of claim 35, wherein the customized content comprises one or more of a name of the institution, a logo associated with the institution, and a color associated with the institution. ### Claim 38 (depends on 35) The method of claim 35, wherein the customized content comprises textual information configured for the institution. ### Claim 39 (depends on 28) The method of claim 28, wherein the operations further comprise identifying an identity service provider. ### Claim 40 (depends on 39) The method of claim 39, wherein identifying the one or more identifiers associated with the user comprises: receiving user information associated with the login credentials from the identity service provider; and identifying the one or more identifiers corresponding to the user information.