Mastercard International Incorporated

Google Inc.

Mastercard International Incorporated Purchase

Jvl Ventures, LLC

Florent Hay

Patrick Mestre

Michael J Gargiulo

Eddy Van De Velde

Kuan Hua Chen

David Anthony Roberts

Patrik Smets

John Tierney

Enda Rice

Shilpa Harvey

A method for contactless payment relay attack protection includes receiving an online authorization request including a cryptogram, a measured processing time, and a reference processing time from a terminal. The cryptogram is verified, and a determination is performed as to whether the measured processing time exceeds the reference processing time. An online authorization response authorizing or declining a monetary transaction is transmitted, based on the determination. An artificial intelligence transaction analysis can be performed based on past and current conditions (e.g., battery level, operating system, open applications) of a payment device such as a mobile phone, past and current conditions of a terminal, and/or a monetary amount. The online authorization response can be based on the artificial intelligence transaction analysis.

Contactless payment relay attack protection

A bridge service is provided to support multi-user simulated contactless cards that in response to receiving a request to provision a secure element with payment card profile information of a user, provisions a token representing the payment card profile, converts the token representing the payment card profile into a format for the payment application; and provides the payment card profile to the payment application, the payment card profile comprising a single use key. The bridge service enables simulated contactless cards to store payment card information for a user on volatile memory instead of the persistent, secure element memory.

Simulated contactless payment cards providing multiple temporary profiles and corresponding credentials

There is presented a method and a computing device for user authentication and transaction staging on a user device. The method comprises authenticating a user of the user device by a first device verification method and generating transaction credentials at the user device. The method further comprises generating at least one optical code data corresponding to the transaction credentials and displaying the at least one optical code on the user device in a form suitable for scanning by a second device to progress a transaction with the second device.

User authentication and transaction staging

Application management services for simulated contactless cards support applying payment when a provisioned card (cardholder profile) is stored in volatile memory of a computing device by maintaining a first channel open between a payment application and a provisioning service while communicating payment information to a point of sale terminal over a second channel.

Application management for simulated contactless payment cards

During recent years, chip-based transactions has been changing from mainly physical, like a chipcard, to mainly virtual, such as a software application on a mobile device. Although such mobile devices are very powerful compared to a conventional chip card, the data interactions with POI terminals must still be compliant with relevant specifications and standards such as the EMV standards. A computer implemented transaction method is provided that enables a first application to be switched with a second application whilst the transaction is in progress, and without loss of information relating to the transaction. The switching process can be facilitated by either instructing a user to remove an identification device, such as a mobile phone or a chipcard, out of a field produced by a terminal and subsequently return the identification device to within the field produced by the terminal, or turning an antenna of the identification device off, waiting a predetermined length of time and turning the antenna back on again. This enables the transaction to be completed using an optimal application whilst also providing a positive user experience throughout.

Non-default application selection during a transaction

During recent years, chip-based payment has been changing from mainly physical, like a chipcard, to mainly virtual, such as a software application on a mobile device. Although such mobile devices are very powerful compared to a conventional chip card, the data interactions with POI terminals must still be compliant with the EMV specifications and standards. A computer-implemented payment transaction method is provided comprising: providing a standard EMV Contactless payment transaction protocol POI terminal, receiving from the user interface a selection of either the first or second payment application and modifying the PPSE accordingly; continuing, by the POI terminal, said EMV-compliant payment transaction by selecting the modified PPSE of the identification device; and selecting, by the POI terminal, the user-selected payment application to continue the payment transaction. By implementing such a function selection, new non-EMV compliant functionalities may be quickly added to existing payment-system specific kernels. In addition, by restarting the existing payment transaction instead of starting a new one, it may be quickly restarted using the same amount and the same currency without the need of any merchant interaction. By using existing mechanism already present in the EMV specifications and protocols, Users are given a higher degree of control over the payment applications used to complete payment transactions, and unexpected payments and/or unexpected terminations of payments are less likely to occur when a conflict arises between the contents of the PPSE and the POI terminal capabilities.

Non-default payment application selection during EMV-compliant payment transaction method

A method of enhanced interaction between a first computing device and a second computing device is described. A first channel for connection between the first computing device and the second computing device using a short range communication technology and a second channel for communication between the first computing device and the second computing device using a communication technology are established. A first interaction is performed using the first channel and an additional interaction is performed using the second channel. Suitable first and second computing devices are also described.

Enhanced device interaction

Systems, methods, and computer program products are provided for performing content management operations. At least one memory stores data, and a central security domain manages instructions on behalf of one or more service provider security domains. The instructions are received, over a network, from a trusted service manager. The instructions are processed in at least one of the one or more determined service provider security domains, using the data stored in the at least one memory. The data includes one or more generic applications, each of which can be instantiated for one or more service providers.

Systems, methods, and computer program products for managing secure elements

Systems, methods, and computer program products are provided for managing installation of services on a secure element having a secure element profile. A request to install a service on the secure element is received. There is a determination of a preferred version of the service corresponding to the secure element profile of the secure element. There is also a determination of an existing version of the service loaded on the secure element. Using a rules engine, there is a determination of whether to install on the secure element either the existing version of the service or the preferred version of the service. A command is transmitted to either (a) install the existing version of the service or (b) delete the existing version of the service and load and install the preferred version of the service, based on the determination using the rules engine.

Growing community of inventors

Jette, Belgium

Florent Hay