Passive cardholder verification method in mobile device

Abstract

In a payment-enabled smartphone, a customer verification method (CVM) may be performed without prompting the user to provide any input. An outcome of the resulting passive CVM process may be an input to a risk based decision process performed by the smartphone, by a point of sale terminal and/or by an issuer of a payment card account accessed via the payment-enabled smartphone. The risk based decision process may determine whether a payment transaction is approved or declined.

What is claimed is: 
     
         1 . A mobile device, comprising:
 a processor;   a memory in communication with the processor; and   a radio receiver receiving CVM (cardholder verification method) data from an electronic device worn by a user who is carrying the mobile device, the electronic device different from the mobile device, the radio receiver in communication with the processor;   the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
 receiving the CVM data from the radio receiver, the CVM data indicative of at least one characteristic and/or attribute of the user; 
 initiating a CVM data evaluation process using the received CVM data as an input, the CVM data evaluation process being initiated, performed and completed without the user being or having been prompted to submit input for CVM processing; and 
 providing a result of the CVM data evaluation process. 
   
     
     
         2 . The mobile device of  claim 1 , wherein the at least one characteristic and/or attribute of the user is the user's heartbeat. 
     
     
         3 . The mobile device of  claim 1 , wherein the processor is further operative with the program instructions to reset a CVM accumulator in response to successful completion of the CVM data evaluation process. 
     
     
         4 . The mobile device of  claim 3 , further comprising a secure element in communication with the processor, and wherein the CVM accumulator is implemented in the secure element. 
     
     
         5 . The mobile device of  claim 3 , wherein the CVM accumulator is maintained in a server computer that is remote from the mobile device. 
     
     
         6 . The mobile device of  claim 1 , further comprising a secure element in communication with the processor;
 wherein:
 a payment application runs in the secure element; and 
 at least one payment credential is stored in the secure element. 
   
     
     
         7 . The mobile device of  claim 1 , wherein the program instructions include a payment application for controlling said processor. 
     
     
         8 . The mobile device of  claim 1 , wherein the processor is operative with the program instructions to interact with a remote server in connection with the CVM data evaluation process. 
     
     
         9 . The mobile device of  claim 1 , wherein the CVM data evaluation process includes heartbeat analysis. 
     
     
         10 . The mobile device of  claim 1 , wherein the mobile device is a smartphone. 
     
     
         11 . A mobile device, comprising:
 a processor;   a memory in communication with the processor; and   a radio receiver receiving CVM (cardholder verification method) data from an electronic device worn by a user who is carrying the mobile device, the electronic device different from the mobile device, the radio receiver in communication with the processor;   the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
 receiving the CVM data from the radio receiver, the CVM data indicative of at least one characteristic and/or attribute of the user; 
 initiating a CVM data evaluation process using the received CVM data as an input, the CVM data evaluation process being initiated, performed and completed without the user being or having been prompted to submit input for CVM processing; 
 providing a result of the CVM data evaluation process; and 
 setting a passive CVM flag in response to the result of the CVM data evaluation process;
 wherein:
 the memory stores a first accumulator, the first accumulator for counting up to a number of payment transactions permitted to be performed using the mobile device at a time when the passive CVM flag is set and without requiring entry of a PIN (personal identification number) by the user of the mobile device; and 
 the memory stores a second accumulator in the mobile device, the second accumulator for counting up to a number of payment transactions permitted to be performed using the mobile device at a time when the passive CVM flag is not set. 
 
 
   
     
     
         12 . The mobile device of  claim 11 , wherein the at least one characteristic and/or attribute of the user is the user's heartbeat. 
     
     
         13 . The mobile device of  claim 11 , further comprising a secure element in communication with the processor;
 wherein:
 a payment application runs in the secure element; and 
 at least one payment credential is stored in the secure element. 
   
     
     
         14 . The mobile device of  claim 11 , wherein the program instructions include a payment application for controlling said processor. 
     
     
         15 . The mobile device of  claim 11 , wherein the processor is operative with the program instructions to interact with a remote server in connection with the CVM data evaluation process. 
     
     
         16 . The mobile device of  claim 11 , wherein the CVM data evaluation process includes heartbeat analysis. 
     
     
         17 . The mobile device of  claim 11 , wherein the mobile device is a smartphone. 
     
     
         18 . A mobile device, comprising:
 a processor;   a memory in communication with the processor; and   a radio receiver receiving CVM (cardholder verification method) data from an electronic device worn by a user who is carrying the mobile device, the electronic device different from the mobile device, the radio receiver in communication with the processor;   the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
 receiving the CVM data from the radio receiver, the CVM data indicative of at least one characteristic and/or attribute of the user; 
 initiating a CVM data evaluation process using the received CVM data as an input, the CVM data evaluation process being initiated, performed and completed without the user being or having been prompted to submit input for CVM processing; and 
 providing a result of the CVM data evaluation process; 
 said initiating of the CVM data evaluation process being in response to at least one of: (a) the mobile device transitioning from a sleep state to a waking state; (b) the user opening a wallet application on the mobile device; (c) the user interacting with a payment application on the mobile device; and (d) the mobile device detecting that it has been carried into a retail store. 
   
     
     
         19 . The mobile device of  claim 18 , further comprising a secure element in communication with the processor;
 wherein:
 a payment application runs in the secure element; and 
 at least one payment credential is stored in the secure element. 
   
     
     
         20 . The mobile device of  claim 18 , wherein the program instructions include a payment application for controlling said processor.