Source: https://patents.google.com/patent/US10115099B2/en
Timestamp: 2019-06-18 06:00:06
Document Index: 16382236

Matched Legal Cases: ['§ 119', 'Application No. 61', 'Application No. 61', 'Application No. 61', 'Application No. 2011115811', 'Application No. 2015215930', 'Application No. 09815352', 'Application No. 2009292991', 'Application No. 09815352', 'Application No. 2011115811', 'Application No. 2011115811', 'Application No. 2009292991', 'Application No. 2009292991']

US10115099B2 - Over the air management of payment application installed in mobile device - Google Patents
US10115099B2
US10115099B2 US15/010,641 US201615010641A US10115099B2 US 10115099 B2 US10115099 B2 US 10115099B2 US 201615010641 A US201615010641 A US 201615010641A US 10115099 B2 US10115099 B2 US 10115099B2
US15/010,641
US20160224971A1 (en
2016-01-29 Application filed by Visa International Service Association filed Critical Visa International Service Association
2016-01-29 Priority to US15/010,641 priority patent/US10115099B2/en
2016-08-04 Publication of US20160224971A1 publication Critical patent/US20160224971A1/en
2018-10-30 Publication of US10115099B2 publication Critical patent/US10115099B2/en
Systems, apparatus, and methods for managing an application installed on a mobile device, such as a mobile phone are provided, so as to prevent or limit unauthorized use of the application, for example, when the mobile device is lost, stolen, or otherwise subject to unauthorized use. A request to enable or disable user access to a function of the application can be received by a server computer. A command message responsive to the request can be generated by the server computer, the command message comprising control data for enabling or disabling user access to the function of the application. The generated command message can be transmitted to the mobile device over a wireless network.
The present application is a Divisional Application of U.S. application Ser. No. 12/563,540, filed Sep. 21, 2009, entitled “OVER THE AIR MANAGEMENT OF PAYMENT APPLICATION INSTALLED IN MOBILE DEVICE”, which claims benefit under 35 U.S.C. § 119(e) to U.S. Provisional Patent Application No. 61/099,060, entitled “Contactless Phone With Secret Data”, filed Sep. 22, 2008, U.S. Provisional Patent Application No. 61/220,540, entitled “Customizable Passcode Feature”, filed Jun. 25, 2009, and U.S. Provisional Patent Application No. 61/220,550, entitled “Mobile Communication Channel Induced Functionality”, filed on Jun. 25, 2009. The contents of the above applications are hereby incorporated by reference in their entirety for all purposes.
In a conventional system, when a user reaches the maximum number of off-line transactions as determined by the internal counter, no more off-line transactions are allowed. Currently there is no process for performing a contactless refresh/reset of the internal counter in the payment application. The user has to present his card at a point of sale (POS) terminal that can connect to the Issuer and request a counter reset through the POS terminal or any other suitable terminal that can accept the contactless card and communicate with the Issuer. Once the counter is reset, the user can once again perform off-line transactions. However, there are instances where the user may not have access to a POS terminal in order to request a counter reset. In such instances, the user is prevented from conducting offline transactions thereby limiting his access to goods and services.
Mobile phones are also becoming useful as payment devices. A mobile device such as a mobile phone may include a transaction payment application to enable the phone to be used as a portable consumer payment device when making purchases. The payment application typically permits a user to make payment for goods or services, and may be linked to a payment account of the device owner. A problem may arise in situations in which the mobile device is lost or stolen because someone other than the owner of the device may then have access to the payment application and be able to execute transactions without the approval of the payment account owner. This can be particularly troublesome if the payment account is a prepaid account, as whoever is in possession of the device may be able to make purchases as long as the account balance is positive.
According to an embodiment of the present invention, a method for requesting an over-the-air reset of a counter associated with a payment application resident on a mobile device is provided. The method includes sending a counter reset request to an Issuer, over-the-air, using the mobile device, receiving a script from the Issuer, the script configured to reset the counter, and resetting the counter by executing the script sent by the Issuer.
Data storage 312 may be a memory that stores data, and may be in any suitable form including a magnetic stripe, a memory chip, etc. The memory may be used to store data such as user identification or authentication information, user account information, transaction data, etc. Stored financial information may include information such as bank account information, bank identification number (BIN), credit or debit card number information, account balance information, expiration date, consumer information such as name, date of birth, etc. Note that such data may instead or also be stored in a secure data storage element, such as secure data storage 110 of FIG. 2 or a secure memory that is part of contactless element 316. As described, data storage 312 may also contain instructions which when executed by processor 304 implement operations or processes that are part of the operation of the device or of an application that is installed in the device. Further, a secure memory that is part of contactless element 316 may also store instructions which when executed by processor 304 implement an application, operations or processes related to operation of the device or execution of an application installed in the device.
In some embodiments, the user may be given some period to establish his authenticity after a password reset request is issued. In an embodiment, if the user does not respond to an authentication request by the Issuer during the period, e.g., 24 hours, the password reset request may be purged from the system and the user may have to resent the request if he needs the password to be reset.
1. A computer-implemented method of controlling use of a payment application installed on a mobile device comprising a processor and a contactless element coupled to the processor, the method comprising:
receiving, by a server computer, a request to enable or disable user access to features or functions of the payment application;
generating, by the server computer, a command message responsive to the request, the command message comprising control data that when executed by the processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and
transmitting, by the server computer, the generated command message to the mobile device over a wireless network, wherein the processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,
wherein the control data includes one or more of an access control indicator, an alphanumeric data string, or a set of data values; and
wherein the mobile device is configured to extract the control data from the command message and store the control data in a secure data storage of the mobile device.
2. The computer-implemented method of claim 1, wherein the request is received from a payment authorizing entity of the payment application.
3. The computer-implemented method of claim 1, wherein control data is used by the mobile device to enable payment transactions for one or more of a prepaid account, a credit account, or a debit account.
4. A server computer, comprising:
a first processor configured to access the memory and execute the computer-executable instructions to implement a method comprising:
receiving a request to enable or disable user access to features or functions of a payment application on a mobile device comprising a second processor and a contactless element coupled to the second processor;
generating a command message responsive to the request, the command message comprising control data that when executed by the second processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and
transmitting the generated command message to the mobile device over a wireless network, wherein the second processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,
5. The server computer of claim 4, wherein the request is received from a payment authorizing entity of the payment application.
6. The server computer of claim 4, wherein control data is used by the mobile device to enable payment transactions for one or more of a prepaid account, a credit account, or a debit account.
7. A non-transitory computer-readable storage medium comprising one or more computer-executable instructions to implement a method, the method comprising:
receiving a request to enable or disable user access to features or functions of a payment application on a mobile device comprising a processor and a contactless element coupled to the processor;
generating a command message responsive to the request, the command message comprising control data that when executed by the processor, permits or denies access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases; and
transmitting the generated command message to the mobile device over a wireless network, wherein the processor executes the control data causing the payment application in the mobile device to permit or deny access to the features or functions of the payment application, so that the mobile device including the payment application can only be used to conduct only certain types or amounts of purchases at a terminal comprising a contactless reader in short range communication with the mobile device,
8. The non-transitory computer-readable storage medium of claim 7, wherein the request is received from a payment authorizing entity of the payment application.
9. The method of claim 1, the secure data storage is a secure memory.
10. The method of claim 1, wherein only certain types of transactions can be conducted with the mobile device after the control data is executed.
11. The method of claim 1, wherein the mobile device authenticates a user of the mobile device before allowing the mobile device to conduct a transaction with the terminal.
12. The method of claim 1, wherein the short range communication comprises NFC.
13. The method of claim 1, wherein the mobile device is a mobile phone and the terminal is a payment terminal at a merchant.
US15/010,641 2008-09-22 2016-01-29 Over the air management of payment application installed in mobile device Active US10115099B2 (en)
US12/563,540 Division US9286604B2 (en) 2008-09-22 2009-09-21 Over the air management of payment application installed in mobile device
US16/145,726 Continuation US20190043036A1 (en) 2008-09-22 2018-09-28 Over the air management of payment application installed in mobile device
US20160224971A1 US20160224971A1 (en) 2016-08-04
US10115099B2 true US10115099B2 (en) 2018-10-30
US8688580B1 (en) 2009-12-08 2014-04-01 Xoom Corporation Expediting electronic funds transfers
Decision on Grant dated Apr. 21, 2015 for RU Patent Application No. 2011115811, with English Translation, 16 pages.
Examiner's Report dated Mar. 3, 2017 in Australian Patent Application No. 2015215930, 5 pages.
Extended European Search Report dated Feb. 24, 2012 for EP Application No. 09815352.1, 7 pages.
Final Office Action, dated Aug. 24, 2017, in U.S. Appl. No. 15/0120,728, 12 pages.
International Search Report and Written Opinion dated May 4, 2010 for PCT Patent Application No. PCT/US2009/057732, 18 pages.
Krista Becker, Mobile Phone: The New Way to Pay? Feb. 2007, Federal Reserve Bank of Boston, web, 1-14.
Krista Becker, Mobile Phone: The New Way to Pay?, Feb. 2007, Federal Reserve Bank of Boston, web, 1-11 (Year: 2007). *
Microsoft System Center Mobile Device Manager 2008—A Technical White Paper, 2008, 8 pages.
Mobile Europe, "Mobile payments-The need for co-operation", downloaded on Jun. 23, 2009 from http://www.mobileeurope.co.uk/features/11490/Mobile_payments_-The_need_for co-op . . . , 1 page.
Mobile Europe, "Mobile payments—The need for co-operation", downloaded on Jun. 23, 2009 from http://www.mobileeurope.co.uk/features/11490/Mobile_payments_-The_need_for co-op . . . , 1 page.
Mobility Ware, "MobileAssist—Remote support for all you mobile devices", downloaded on Jun. 23, 2009 from http://www.mobilityware.com/MobileAssistProduct.htm, 2 pages.
Non-Final Office Action, dated Jan. 26, 2017, in U.S. Appl. No. 15/010,728, 11 pages.
Notice of Acceptance dated May 11, 2015 in Australian Patent Application No. 2009292991, 3 pages.
Office Action dated Feb. 13, 2013 for EP Application No. 09815352.1, 3 pages.
Office Action dated Jul. 31, 2014 in Russian Patent Application No. 2011115811, 13 pages.
Office Action dated Mar. 19, 2014 in Mexican Patent Application No. MX/a/2011/003043, 7 pages.
Office Action dated Sep. 20, 2013 in Russian Patent Application No. 2011115811, 6 pages.
Patent Examination Report dated Apr. 24, 2014 in Australian Patent Application No. 2009292991, 5 pages.
Patent Examination Report dated Dec. 18, 2014 in Australian Patent Application No. 2009292991, 5 pages.
Saunders, T., "Buying into NFC Payments", pp. 26-27. Retail Systems, Apr.-May 2009, pp. 26-27.
Sun Microsystems, "The Road to Mobile Banking—White Paper", Jun. 2008, 10 pages.
Toorhani et al. "SSMS-A Secure SMS Messaging Protocol for the M-Payment Systems," published in IEEE, Symposium on Computers and Communications, ISCC 2008, Date of Conference Jul. 6-9, 2008, Date added to IEEE Xplore: Sep. 16, 2008.
Toorhani et al. "SSMS—A Secure SMS Messaging Protocol for the M-Payment Systems," published in IEEE, Symposium on Computers and Communications, ISCC 2008, Date of Conference Jul. 6-9, 2008, Date added to IEEE Xplore: Sep. 16, 2008.