Mastercard International Incorporated

Theresa L Smith

Colin Tanner

Paul Michael Evans

David Anthony Roberts

Christina E Sheppard

David John Sylvester

German Blanco

John M Mwangi

Methods and systems are disclosed for providing a plurality of virtual secure elements (virtual SEs) to mobile devices with secure elements (SEs). A method generates and forwards a certificate authority security domain (CASD) key for a plurality of virtual SEs to an SE supplier that created the CASD. The method receives a card serial number (CSN) and a card production life cycle (CPLC) key from the SE supplier and forwards these to a mobile device maker. An updated CSN and CPLC data is received from the device maker with an International Mobile Equipment Identity (IMEI) and an issuer security domain key (ISD key) is added to the CSN and CPLC data by a master secure element issuer trusted service manager (master SEI TSM). An application is provisioned to the device that retrieves the CSN, CPLC data, and the IMEI, which are used for to verify and activate the virtual SE.

Systems and method for providing multiple virtual secure elements in a single physical secure element of a mobile device

A method and system for transmitting multiple payment accounts for use by a payment device. The method includes allocating a cryptographic personal account number (CPAN) and producing at least one cryptographic master key set relating to this CPAN and transmitting, by a transmitting device, at least one produced cryptographic master key set for storage in a payment device. Further, the method includes receiving, by a receiving device, at least one device personal account number (DPAN), wherein each of the at least one DPAN is associated with a payment account associated with a consumer; generating, by a processing device, a repersonalization script for each of the at least one DPAN, wherein the repersonalization script includes a set of data associated with the corresponding DPAN; and transmitting, by the transmitting device, at least one repersonalization script to the payment device. The payment device is configured to use the CPAN for selected cryptographic calculations, and use the DPAN and the associated set of data for other aspects of a financial transaction.

System and method for using multiple payment accounts using a single payment device

Described are methods and systems for remotely personalizing a payment device. In an embodiment, a trusted service provider (TSP) personalization server receives a payment device personalization request from a remote personalization device (RPD), determines that a hardware security token (HST) permits issuance of the payment device, and transmits a personalization data request to an issuer. The TSP personalization server then receives the requested personalization data from a Mobile Over-the-Air Provisioning Service (MOTAPS) server, generates session keys, converts data from the MOTAPS server into payment device application process data unit (APDU) data, and then transmits the personalization data and APDU data to the RPD to load onto a payment device.

In-market personalization of payment devices

According to some embodiments, an over-the-air ('OTA') provision services receives a request to provision a temporary payment account to a customer's mobile device. The request includes customer data and a temporary primary account number ('PAN'). A process includes mapping the temporary PAN to a mobile PAN, storing the temporary PAN in a mapping database, generating a software package comprising a payment application and the mobile PAN, and transmitting the software package OTA to the customer's mobile device. The software package personalizes the customer's mobile device with the mobile PAN enabling use of that mobile device to utilize the temporary PAN to complete payment transactions shortly after the processor receives the request.

Methods and systems for payment account issuance over a mobile network

Systems and methods for remotely personalizing payment devices for consumers are described. In an embodiment, a system includes a MOTAPS server computer that provides data preparation functions and a trusted service provider (TSP) personalization server computer. The system also includes a service provider computer operably coupled to the TSP personalization server computer, and a remote personalization device (RPD) operably coupled to the service provider computer. The RPD transmits personalization requests, receives personalization data, and personalizes a payment device before providing the personalized payment device to a consumer.

A system, method, and computer-readable storage medium configured to enable the pooling and sharing of funds to cover shared expenses. An electronic basket is created. The electronic basket includes a virtual prepaid payment card with a unique identifier and associated with a user. The user is prompted for potential contributors to the electronic basket. A network interface electronically contacts the potential contributors, and the electronic basket is stored in a user-card database.

Fund sharing method and apparatus

According to some embodiments, a request for a new payment account may be received in connection with a mobile device, such as a wireless telephone. A temporary payment account number ('PAN') may then be automatically assigned to the request. The temporary PAN may be mapped to a mobile PAN, and data to facilitate a personalization of the mobile device with the mobile PAN may be transmitted. The mobile device may then be used, for example, in connection with a near field communications enabled purchasing transaction.

Growing community of inventors

St. Albans, United Kingdom

Theresa L Smith