Trusted Integrity Manager (TIM)

A method for performing a financial transaction from a mobile device in conjunction with a trusted service manager (TSM), the method comprising:

• leveraging a subscriber identity data to the mobile device;
• activating service on the mobile device identified by a secure element and the subscriber identity data;
• receiving a user request via the mobile device through the TSM by a server for enabling payment functions on the mobile device;
• enabling payment functions on the mobile device by the server wherein:
• the server validates an application against the subscriber identity data of the mobile device;
• the server provides the validated application via a trusted third party (TTP) over the air (OTA) to the mobile device;
• and
• the validated application is installed in an embedded secure element (SE) of the mobile device;
• executing the validated application in the SE of the mobile device to request provisioning from a trusted service provider (TSP) of the TSM of a payment instrument on the mobile device;
• requesting by the TSP of the TSM from a bank of validation, verification, and authorization that the requested payment instrument is a legitimate payment instrument for the mobile device identified by the subscriber identity data;
• in response to authorization from the bank being received by the TSM, validating and packaging by the server of information for enabling the payment instrument in a proper format for the embedded SE of the mobile device;
• passing the packaged information from the server to the TTP;
• and
• installing over the air (OTA) the packaged information by the TTP into the embedded SE of the mobile device.

A computer program product comprising a computer readable medium having computer readable code for instructing a processor to perform a method, the method comprising:

• activating service on the mobile device identified by a secure element and a unique identifying data;
• receiving a user request via the mobile device through the TSM by a server for enabling payment functions on the mobile device;
• enabling payment functions by the server on the mobile device wherein:
• the server validates an application against the unique identifying data of the mobile device;
• the server provides the validated application via a trusted third party (TTP) over the air (OTA) to the mobile device;
• and
• the validated application is installed in an embedded secure element (SE) of the mobile device;
• and
• executing the validated application in the SE of the mobile device to request provisioning from a trusted service provider (TSP) of the TSM of a payment instrument on the mobile device.