# US 2014/0095382 A1 · Deploying an issuer-specific widget to a secure wallet container on a client device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0095382 A1 - Document ID: US20140095382A1 - Status: Published application - Kind: A1 - Application number: 14/103,054 - Filed: 2013-12-11 - Published: 2014-04-03 - Earliest claimed: 2005-10-06 - Assignees: C-Sam, Inc. - Applicants: C-SAM, Inc. - Inventors: Mehul Desai; Satyan G. Pitroda; Nehal Maniar - Web page: https://patentgrep.com/patent/US20140095382A1 ## CPC - G06Q 20/3674: {involving authentication} - G06F 3/08: from or to individual record carriers, e.g. punched card {, memory card, integrated circuit [IC] card or smart card} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06K 7/0065: {comprising keyboard or display, e.g. a pocket calculator sized casing suitable for off-line checking the remaining money on a smart banking card} - G06Q 10/067: Enterprise or organisation modelling - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR} - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/36: using electronic wallets or electronic money safes - G06Q 20/367: {involving electronic purses or money safes} - G06Q 30/06: Buying, selling or leasing transactions - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - G05B 2219/25107: Pluggable card, magnetic or smart with configuration data, staying in device - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract Deploying an issuer-specific widget to a wallet container on a client device is accomplished by configuring a widget to provide access to an issuer-specific service group of services that are accessible in a service tier of a multi-tier platform for providing secure transactions, determining service-provider specific resource access requirements for operating the widget, configuring a widget descriptor with the access requirements, and communicating with wallet container to ensure successful deployment of the configured widget that meets the access requirements in the widget descriptor. ## Claims ### Claim 1 A method comprising: configuring a widget, at least partially, by a networked server to provide access to an issuer-specific service group of services accessible via a service tier of a multi-tier platform for providing secure transactions, the platform comprising at least enabling, service, and personalization tiers; determining service provider-specific platform resource access requirements that facilitate securely operating the widget on a client device; configuring a widget descriptor with the access requirements and associating the widget descriptor with the widget; requesting a secure wallet container operating on a client mobile device to deploy the configured widget by sending at least one of the configured widget and the widget descriptor from an issuer-specific server to the client mobile device; and receiving a confirmation of successful deployment of the configured widget, wherein the successful deployment meets the access requirements configured in the widget descriptor. ### Claim 2 (depends on 1) The method of claim 1, further comprising communicating from the server to the deployed widget to provide at least one service from the issuer-specific service group, wherein the at least one service comprises following a service provider-specific workflow. ### Claim 3 (depends on 2) The method of claim 2, wherein the service provider-specific workflow facilitates a trust model-based secure personalized transaction using each of the enabling, service, and personalization tiers. ### Claim 4 (depends on 1) The method of claim 1, wherein the widget descriptor comprises access requirements for a service provider-specific workflow, device operating system actions, domains, user interface code, and widget persistent data. ### Claim 5 (depends on 1) The method of claim 1, wherein the widget descriptor comprises a data structure that is signed by the issuer-specific server. ### Claim 6 (depends on 1) The method of claim 1, wherein platform resources for which access requirements are determined comprise at least one of Secure Element applets and mobile wallet accounts. ### Claim 7 A method comprising: configuring a widget, at least partially, by a networked server to provide access to an issuer-specific service group of services accessible via a service tier of a multi-tier platform for providing secure transactions, the platform comprising at least enabling, service, and personalization tiers; determining service provider-specific platform resource access requirements that facilitate securely operating the widget on a client device; configuring a widget descriptor with the access requirements and associating the widget descriptor with the widget; receiving a request from a component of the multi-tier platform operating on a client mobile device to deploy the configured widget and in response thereto sending at least one of the configured widget and the widget descriptor from an issuer-specific server to the client mobile device; and receiving a confirmation of successful deployment of the configured widget on the client mobile device, wherein the successful deployment meets the access requirements configured in the widget descriptor. ### Claim 8 (depends on 7) The method of claim 7, further comprising communicating from the server to the deployed widget to provide at least one service from the issuer-specific service group, wherein the at least one service comprises following a service provider-specific workflow. ### Claim 9 (depends on 8) The method of claim 8, wherein the service provider-specific workflow facilitates a trust model-based secure personalized transaction using each of the enabling, service, and personalization tiers. ### Claim 10 (depends on 7) The method of claim 7, wherein the widget descriptor comprises access requirements for a service provider-specific workflow, device operating system actions, domains, user interface code, and widget persistent data. ### Claim 11 (depends on 7) The method of claim 7, wherein the widget descriptor comprises a data structure that is signed by the issuer-specific server. ### Claim 12 (depends on 1) The method of claim 1, wherein platform resources for which access requirements are determined comprise at least one of Secure Element applets and mobile wallet accounts. ### Claim 13 A method comprising: receiving in a secure wallet container operating on a client mobile device an indication of availability of a mobile device executable widget configured to provide access to an issuer-specific service group of services accessible in a service tier of a multi-tier platform for providing secure transactions, the platform comprising at least enabling, service, and personalization tiers; determining service provider-specific platform resource access requirements that facilitate securely operating the widget on the client device to provide at least one service from the issuer-specific service group of services, wherein the service provider-specific access requirements are based on a widget descriptor that is associated with the widget; receiving a request that the configured widget be installed with the secure wallet container; receiving at least one of the configured widget and the widget descriptor from an issuer-specific server at the client mobile device; and installing the configured widget, based on the access requirements, on the mobile device through the secure wallet container. ### Claim 14 (depends on 13) The method of claim 13, wherein installing the configured widget comprises determining widget isolation requirements for operating the widget on the client device and configuring the secure wallet container to ensure that the widget isolation requirements are met. ### Claim 15 (depends on 13) The method of claim 13, further comprising transmitting a confirmation of successful deployment of the configured widget on the client mobile device, wherein the successful deployment meets the access requirements configured in the widget descriptor. ### Claim 16 (depends on 13) The method of claim 13, further comprising communicating from the deployed widget to a server to provide at least one service from the issuer-specific service group, wherein the at least one service comprises following a service provider-specific workflow. ### Claim 17 (depends on 16) The method of claim 16, wherein the issuer-specific service facilitates a trust model-based secure personalized transaction using each of the enabling, service, and personalization tiers. ### Claim 18 (depends on 13) The method of claim 13, wherein the widget descriptor comprises access requirements for a service provider-specific workflow, device operating system actions, domains, user interface code, and widget persistent data. ### Claim 19 (depends on 13) The method of claim 13, wherein the widget descriptor comprises a data structure that is signed by the issuer-specific server. ### Claim 20 (depends on 13) The method of claim 13, wherein platform resources for which access requirements are determined comprise at least one of Secure Element applets and mobile wallet accounts.