Visa International Service Association

Mastercard International Incorporated

Vivotech, Inc.

Philippe Martin

Yuexi Chen

Marc B Kekicheff

Mohammad A Khan

Pradeep Kumar

Jean-Christophe Raynon

Roshan Vijayshankar

Kaushik Roy

Dickey B Singh

Ming-Li Liu

Fahimeh Rezaei

Kiushan Pirzadeh

Mustafa Cemal Top

Eric Le Saint

Sergey Smirnoff

Kuen Mee Summers

Aron Clark

Michael Lindbeck

Methods and systems are disclosed for enabling transaction processing utilizing a single device. A mobile device can store an application comprising first and second software modules. One module may execute acceptance processing while another software module may emulate a transaction device associated with a user. One or more identifiers (e.g., QR codes, bar codes) may be obtained corresponding to one or more physical items. Authorization may be requested via the mobile device. In response, data may be exchanged between the software modules and this data (e.g., transaction data, a payment token, a cryptogram, etc.) may be provided to a remote computer (e.g., a cloud based acceptance service) that can generate an authorization request message for the transaction.

Mobile application integration

Systems and methods are disclosed for performing a secure exchange of encryption keys (e.g., public keys) between two devices. One or more initialization keys are stored at both devices. In some embodiments, at least one device (e.g., a reader device) stores the initialization key(s) (e.g., a symmetric key, an asymmetric key pair) in local memory as part of performance of a manufacturing process for the device. The second device (e.g., a thin client device) may receive the initialization key(s) from an acceptance cloud (e.g., a server computer configured to perform terminal processing). The initialization key(s) are utilized to perform a secure exchange of the devices' respective public keys. Once these public keys are exchanged, the devices may proceed to establishing a secure connection with which subsequent operations may be performed.

Techniques for secure data exchanges

A method conducted using a mobile device is disclosed. The mobile device comprises a contactless application including a bridging module, a computer readable medium comprising a contactless kernel, wherein the contactless kernel includes a transceiver interface coupled to a processor. The mobile device includes a contactless element coupled to the processor. The method includes receiving a trigger signal indicative of a transaction to be executed. In response to receiving the trigger signal, the contactless kernel transmits first data to the bridging module. The contactless kernel is operable in a first mode of communication. The bridging module transforms the first data in the first mode of communication to first data in a second mode of communication and passes the first data to the contactless element. The contactless element transmits the first data to a user device, and thereafter receives second data from the user device to execute the transaction.

Method and system for adaptive transceiver in mobile devices

A method includes receiving, by a server computer, a thin client identifier from a thin client on a communication device. The server computer can then retrieve an encrypted first cryptographic key based on the thin client identifier. The encrypted first cryptographic key is a first cryptographic key that is encrypted with a second cryptographic key. The server computer can initiate the sending of the encrypted first cryptographic key to the thin client. The server computer then receives an encrypted secret from the thin client, the encrypted secret being a secret encrypted with the first cryptographic key.

Online secret encryption

A thin client may be utilized to facilitate data exchanges between two devices (e.g., a remote computer and a portable device). In some embodiments, the two devices may utilize differing communications protocols. The thin client may further be configured with a rules engine that determines one or more actions to be performed in response to one or more stimuli. The thin client may manage the processing flow between the two devices according to one or more predefined rules that are interpretable by the rules engine. The rules may be pushed to the thin client via any suitable device enabling the functionality of the thin client to be configured and/or modified without having to update the hardware and/or software of the thin client.

Rules engine for communication round trips optimization of kernel-in-cloud payment transaction

A method for conducting a transaction is disclosed. A processor in a thin client may receive transaction data from a portable device of a first portable device type. The processor may determine that the portable device is the first portable device type. The processor may apply an encryption protocol associated with a second portable device type to the transaction data to create encrypted data. The processor may transmit the encrypted data to a remote computer, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter process the transaction data to conduct the transaction.

Techniques for secure channel communications

Embodiments of the invention are directed to enabling access transaction systems to accept different communication protocols. In some embodiment, an access device receives, from a portable device, an indication that a transaction is to be performed by exchanging transaction information between the portable device and a remote computer, wherein the remote computer is configured to communicate using a first communication protocol. Next, the access device determines that the portable device is configured to communicate using a second communication protocol. The access device then converts communications between the portable device and the remote computer from the second communication protocol to the first communication protocol to assist the portable device and the remote computer in exchanging the transaction information.

Adapter for providing unified transaction interface

A bridge device acts as a link between generic wireless protocols of mobile devices and available communication components of access devices. The bridge device can be an attachment to existing access devices and enables a transaction using any available communication components on an access device and a bridge device mobile application on a mobile device. The bridge device notifies the mobile device which communication components are available for the transaction. The mobile device then sends a selection of a communication component to the bridge device. To conduct the transaction, the bridge device converts data received from the mobile device and sends it to the access device using a protocol compatible with the selected communication component. The bridge device also converts data received from the access device and sends it to the mobile device using a generic wireless protocol supported by the mobile device.

Bridge device for linking wireless protocols

A device updating system may store data from an application to be updated, especially personalization data that is to be persisted beyond the version update. After the data is stored, the application may be deleted and a migration application is installed. The migration application may use a matrix or the like characterizing differences between prior editions of the application and the one being installed. The migration application may determine the previous edition and updates the personalization data according to the matrix. After the data is updated, the migration application may be deleted and the new application installed. The new application may retrieve the updated data and may be ready to operate without concern about what the previous edition may have been. Memory space may be conserved by not requiring the new application to carry the version matrix and all possible changes between the current edition and all possible previous editions.

Update migration system and method

Methods, systems, and computer readable media for utilizing and provisioning an aggregated soft card are disclosed. One method includes receiving a request for an aggregated soft card from a mobile device, wherein the aggregated soft card includes a primary component soft card and at least one secondary component soft card. The method also includes requesting component soft card data associated with each of the primary component soft card and the at least one secondary component soft card from a plurality of issuing system servers. The method further includes generating aggregated soft card data by establishing a link among the component soft card data received from the plurality of issuing system servers and sending the aggregated soft card data to the mobile device.

Methods, systems, and computer readable media for provisioning and utilizing an aggregated soft card on a mobile device

Methods, systems, and computer readable media for utilizing and provisioning an aggregated soft card are disclosed. In one embodiment, the method includes receiving a request for an aggregated soft card from a mobile device, wherein the aggregated soft card includes a primary component soft card and at least one secondary component soft card. The method also includes requesting component soft card data associated with each of the primary component soft card and the at least one secondary component soft card from a plurality of issuing system servers. The method further includes generating aggregated soft card data by establishing a link among the component soft card data received from the plurality of issuing system servers and sending the aggregated soft card data to the mobile device.

Growing community of inventors

San Jose, CA, United States of America

Philippe Martin