Patent ID: 9059980
Filing Date: 2015-06-16
Classification: G06Q,H04L,H04W

Abstract:
1. A computer-implemented method for authenticating mobile devices, the method comprising: receiving, from a mobile device, device identifying information stored in a secure element included in a memory of the mobile device; provisioning the mobile device with a near field communication (NFC) payment application configured to derive unique transaction specific keys, the provisioning comprising: communicating, to the mobile device during the provisioning of the NFC payment application, a base level key utilized by the NFC payment application to derive unique transaction specific keys to encrypt subsequent communications output by the mobile device; receiving, from the mobile device, a communication encrypted with a unique transaction specific key; generating, based at least in part upon the device identifying information and the base level key, a derived key by combining the base level key with at least a portion of the device identifying information to derive an intermediary key used to generate the derived key; and utilizing the derived key to decrypt the received communication and authenticate the mobile device, wherein the above operations are performed by one or more computers associated with a service provider.