US 9,491,626 B2Granted

Enhanced data interface for contactless communications

AssigneeVisa Intellectual Service Association

InventorsSanjeev Sharma, Oleg Makhotin, Christian Aabye

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of the invention are directed at an enhanced data interface (EDI) for contactless communications between a mobile application operating on a mobile device and an access device (e.g., contactless reader) that allows for enhanced verification between the mobile device and access device. One embodiment of the invention is directed to a method. The method comprises a mobile device receiving a request for available applets from an access device and providing a list of available applets including trusted applet identifiers and untrusted applet identifiers to the access device. The method further comprises receiving a selection of an untrusted applet identifier from the list and an entity identifier associated with the access device, validating that the access device is authorized to access credentials associated with the selected untrusted applet identifier using the entity identifier, and providing the credentials associated with the selected untrusted applet identifier to the access device.

Claims15

Dependent claims

A method comprising:

sending, by an hardware access device, a request for available applets to a hardware mobile device;
receiving, by the hardware access device, a list of available applets including trusted applet identifiers and untrusted applet identifiers, the list of available applets including a wallet identifier for each of the available applets, wherein the wallet identifier identifies a mobile application that is associated with each of the available applets, and wherein an untrusted applet identifier indicates that an issuer associated with credentials of a corresponding applet did not participate in provisioning of the corresponding applet;
determining, by the hardware access device, supported applet identifiers from the list of available applets;
determining, by the hardware access device, that a highest priority applet of the supported applet identifiers includes an untrusted applet identifier by comparing the highest priority applet identifier to a directory of trusted applet identifiers and untrusted applet identifiers, and matching the highest priority applet identifier to an untrusted applet identifier within the directory;
validating, by the hardware access device, that the wallet identifier is associated with a trusted entity before selecting the untrusted applet from the list;
providing, by the hardware access device, a selection of the untrusted applet identifier from the list;
providing, by the hardware access device, an entity identifier associated with the hardware access device to the hardware mobile device, wherein the mobile application of the hardware mobile device validates that the hardware access device is authorized to access the credentials associated with the selected untrusted applet identifier using the entity identifier by comparing the entity identifier to a list of trusted entity identifiers associated with the mobile application;
and
receiving, by the hardware access device, credentials associated with the selected untrusted applet identifier from the mobile application of the hardware mobile device.

6 more elements

A system comprising:

a hardware mobile device configured to:
receive a request for available applets from an hardware access device;
provide a list of available applets including trusted applet identifiers and untrusted applet identifiers to the hardware access device, wherein an untrusted applet identifier indicates that an issuer associated with credentials of a corresponding applet did not participate in provisioning of the corresponding applet;
receive a selection of an untrusted applet identifier from the list and an entity identifier associated with the hardware access device;
validate that the hardware access device is authorized to access credentials associated with the selected untrusted applet identifier using the entity identifier by comparing the entity identifier to a list of trusted entity identifiers associated with the mobile application;
and
provide the credentials associated with the selected untrusted applet identifier to the hardware access device;
and
the hardware access device configured to:
send the request for available applets to the hardware mobile device;
receive the list of available applets including the trusted applet identifiers and the untrusted applet identifiers;
determine that a highest priority applet of the supported applet identifiers includes an untrusted applet identifier by comparing the highest priority applet identifier to a directory of trusted applet identifiers and untrusted applet identifiers, and matching the highest priority applet identifier to an untrusted applet identifier within the directory;
provide the selection of the untrusted applet identifier from the list;
provide an entity identifier associated with the hardware access device to the hardware mobile device;
and
receive credentials associated with the selected untrusted applet identifier from the mobile application of the hardware mobile device.

13 more elements

An hardware access device comprising:

a contactless interface to interact with a hardware mobile device;
and
an application selection software module configured to:
send a request for available applets to a hardware mobile device;
receive a list of available applets including trusted applet identifiers and untrusted applet identifiers, the list of available applets including a wallet identifier for each of the available applets, wherein the wallet identifier identifies a mobile application that is associated with each of the available applets, and wherein an untrusted applet identifier indicates that an issuer associated with credentials of a corresponding applet did not participate in provisioning of the corresponding applet;
determine supported applet identifiers from the list of available applets;
determine that a highest priority applet of the supported applet identifiers includes an untrusted applet identifier by comparing the highest priority applet identifier to a directory of trusted applet identifiers and untrusted applet identifiers, and matching the highest priority applet identifier to an untrusted applet identifier within the directory;
validate that the wallet identifier is associated with a trusted entity before selecting the untrusted applet from the list;
provide a selection of the untrusted applet identifier from the list;
provide an entity identifier associated with the hardware access device to the hardware mobile device, wherein the mobile application of the hardware mobile device validates that the hardware access device is authorized to access the credentials associated with the selected untrusted applet identifier using the entity identifier by comparing the entity identifier to a list of trusted entity identifiers associated with the mobile application;
and
receive credentials associated with the selected untrusted applet identifier from the mobile application of the hardware mobile device.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/706,818Filed 7 May 2015 · us provisional application
Priority: 7 May 2014
Published: US 2015/0327071 A112 Nov 2015
Granted: 8 Nov 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification19 codes

H04L 63/102
For controlling access to devices or network resources: entity profiles
G06Q 20/105
Specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems: involving programming of a portable…
G06Q 20/20
Payment architectures: point-of-sale [POS] network systems
G06Q 20/227
Payment schemes or models: characterised in that multiple accounts are available, e.g. to the payer