Secure distributed single action payment system

A method of user authentication in connection with a single action payment for an item at a server computing device communicatively connected to a mobile device, the method comprising:

• receiving, by the server computing device, a set of user credentials associated with a user and a device identifier associated with the mobile device from an application on the mobile device;
• determining, by the server computing device, whether the mobile device is known by the server computing device by comparing the device identifier to a set of device codes managed at the server computing device;
• when the mobile device is not known by the server computing device, retrieving by the server computing device via a network, encrypted personal payment information from a second device associated with the user, wherein the second device is remote from the server computing device and is known by the server computing device;
• transmitting, by the server computing device, the encrypted personal payment information from the server computing device to the mobile device via the network;
• and
• cooperating with the mobile device to decrypt the encrypted personal payment information, wherein the decrypted personal payment information is useable to initiate a payment transaction, wherein cooperating includes transmitting, by the server computing device to the mobile device, a decryption key for decrypting the encrypted personal payment information, wherein the decryption key is useable to decrypt personal payment information.

A server computing device for user authentication in connection with a single action payment for an item, wherein the server is communicatively connected to a mobile device and is configured to:

• receive a set of user credentials associated with a user and a device identifier associated with the mobile device from an application on the mobile device;
• determine whether the mobile device is known by the server computing device by comparing the device identifier to a set of device codes managed at the server computing device;
• when the mobile device is not known by the server computing device, retrieve by the server computing device via a network, encrypted personal payment information from a second device associated with the user, wherein the second device is remote from the server computing device and is known by the server computing device;
• transmit the encrypted personal payment information from the server computing device to the mobile device via the network;
• and
• cooperate with the mobile device to decrypt the encrypted personal payment information, wherein the decrypted personal payment information is useable to initiate a payment transaction, wherein cooperation includes the server being configured to transmit to the mobile device a decryption key for decrypting the encrypted personal payment information, wherein the decryption key is useable to decrypt personal payment information.