Methods and systems for provisioning payment credentials

Abstract

A method and system for provisioning payment credentials usable by a mobile device in conducting a payment. The method is conducted at a provisioning system and comprises the steps of: receiving payment credentials from a receiving device, the payment credentials having been obtained from a portable payment device presented by a consumer at the receiving device; receiving, from the receiving device, an identifier entered by the consumer; identifying a mobile device or a secure element corresponding to the identifier; and communicating the payment credentials or a derivation of the payment credentials to the identified mobile device or the secure element to be securely stored in association with the mobile device. The method may include: encrypting the received payment credentials, the encrypted payment credentials having a unique decryption key; and wherein communicating a derivation of the payment credentials communicates the unique decryption key.

1 .- 30 . (canceled) 
     
     
         31 . A method comprising the steps of:
 storing, by a mobile device or a secure element associated with the mobile device, a decryption key;   receiving, by the mobile device or the secure element associated with the mobile device from a remote server computer, a request for the decryption key; and   providing, by the mobile device to the remote server computer, the decryption key, wherein the remote server computer decrypts encrypted payment credentials stored by the remote server computer to form decrypted payment credentials, and transmits the decrypted payment credentials to a receiving device.   
     
     
         32 . The method of  claim 31 , further comprising:
 storing the encrypted payment credentials at the remote server computer.   
     
     
         33 . The method of  claim 31 , wherein the remote server computer further communicates additional credentials to the receiving device, wherein the additional credentials are required in use in addition to the decrypted payment credentials or derivation of the decrypted payment credentials to carry out a transaction. 
     
     
         34 . The method of  claim 31 , wherein the secure element is one of the group of: a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device. 
     
     
         35 . The method of  claim 31 , wherein the decrypted payment credentials comprise a PAN. 
     
     
         36 . The method of  claim 31 , wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message. 
     
     
         37 . The method of  claim 31 , wherein the method further includes:
 determining whether or not the mobile device or the secure element corresponding to a personal identifier has been registered with the remote server computer.   
     
     
         38 . The method of  claim 31 , wherein the decrypted payment credentials are also on a portable payment device used by a user of the mobile device. 
     
     
         39 . A mobile device comprising:
 a processor; and   a computer readable medium, the computer readable medium comprising code, executable by the processor for implementing a method comprising:   storing, by the mobile device, a decryption key, receiving, by the mobile device from a remote server computer, a request for the decryption key; and   providing, by the mobile device to the remote server computer, the decryption key, wherein the remote server computer decrypts encrypted payment credentials stored by the remote server computer to form decrypted payment credentials, and transmits the decrypted payment credentials to a receiving device.   
     
     
         40 . The mobile device of  claim 39 , wherein the method further comprises:
 storing the encrypted payment credentials at the remote server computer.   
     
     
         41 . The mobile device of  claim 39 , wherein the remote server computer further communicates additional credentials to the receiving device, wherein the additional credentials are required in use in addition to the decrypted payment credentials or derivation of the decrypted payment credentials to carry out a transaction. 
     
     
         42 . The mobile device of  claim 39 , wherein the mobile device comprises a secure element, the secure element is one of the group of: a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device. 
     
     
         43 . The mobile device of  claim 39 , wherein the decrypted payment credentials comprise a PAN. 
     
     
         44 . The mobile device of  claim 39 , wherein the decrypted payment credentials are transmitted to the receiving device in a single secure transaction message. 
     
     
         45 . The mobile device of  claim 39 , wherein the method further includes:
 determining whether or not the mobile device corresponding to a personal identifier has been registered with the remote server computer.   
     
     
         46 . The mobile device of  claim 39 , wherein the decrypted payment credentials are also on a portable payment device used by a user of the mobile device. 
     
     
         47 . A secure element associated with a mobile device, the secure element comprising:
 a computer readable medium, the computer readable medium comprising code, executable by a processor for implementing a method comprising:   storing, by the secure element associated with the mobile device, a decryption key,   receiving, the secure element associated with the mobile device from a remote server computer, a request for the decryption key; and   providing, by the secure element to the remote server computer, the decryption key, wherein the remote server computer decrypts encrypted payment credentials stored by the remote server computer to form decrypted payment credentials, and transmits the decrypted payment credentials to a receiving device.   
     
     
         48 . The secure element of  claim 47 , wherein the method further comprises:
 storing the encrypted payment credentials at the remote server computer.   
     
     
         49 . The secure element of  claim 47 , wherein the remote server computer further communicates additional credentials to the receiving device, wherein the additional credentials are required in use in addition to the decrypted payment credentials or derivation of the decrypted payment credentials to carry out a transaction. 
     
     
         50 . The secure element of  claim 47 , wherein the secure element is one of the group of: a secure element provided in the mobile device, a secure element embedded in a layer which sits between a communication component of the mobile device and a communication component interface of the mobile device, a secure element provided in a communication component of the mobile device, and a cloud-based secure element associated with the mobile device.