Microsoft Technology Licensing, LLC

Matt Pisut

Sean Gary Nordberg

Jeremy Corley

Steve Lunsman

J Sage Schreiner

Rahul Dhar

Tal Goldbloom

Malcolm Erik Pearson

Tolga Acar

Patrick Joseph Derks

Matthias Baer

Alex McKelvey

Doug Barlow

Trent J Byfield

David Manci Gardner

Ashish Virmani

Yoav Sion

Gene Michael DeClark

Anubhav Kale

Ori Bar-Niv

Nancy Sedora

Derrick Tan

Michael Stark

James Oleinik

Example apparatus and methods provide a device (e.g., smartphone) that is more secure for electronic commerce. An example device includes a trusted platform module (TPM) that stores a public key and a private key. The device is provisioned with account information, user information, and device information. The TPM uses the account, user, and device information to acquire attestation credentials and endorsement credentials. The device uses the account, user and device information along with the attestation credentials and endorsement credentials to acquire limited use keys (LUKs) that are encrypted with the public key. The LUKs will only be decrypted as needed to support an actual transaction at the time of the transaction. Before decrypting an LUK, the TPM will authenticate a user of the device at the time of the transaction using. for example, a personal identification number (PIN), fingerprint, or other personal information.

Trusted platform module (TPM) protected device

A method of payment using a client device is disclosed. The payment can be made through a payment method service that can control the payment flow and options available to the user of a client device. Using the payment method service, new payment options with new data schemas and/or new process flows can be used by the client device, but without any need to update software stored on the client device. The payment method service can utilize the look and feel of the client device, such that the user views payment options in the native UI of the client device.

Payment processing for client devices

A mobile device can send a mobile operator identification request to a mobile operator identification server to determine the mobile network operator for a mobile device. The request comprises mobile operator identifier data, which can include data stored at mobile device smart cards and in mobile device memory. The identification server comprises an identification engine that determines whether the identifier data satisfies one of a plurality of mobile operator rules. If a rule is satisfied, mobile operator identification data is sent to and stored at the mobile device. The mobile device can share the mobile operator identification data with mobile device provider online marketplaces to take advantage of business relationships between the mobile operator and the mobile device provider. Identification of the mobile operator is also useful for determining the appropriate billing methods and ensuring the proper mobile operator branding information is presented at the mobile device.

Mobile network operator identification

Growing community of inventors

Issaquah, WA, United States of America

Matt Pisut