Secure distributed single action payment system

Abstract

Methods and systems for enabling and performing secured, single action payments from a mobile device are disclosed. One method includes receiving user credentials at an application installed on a mobile device, and transmitting the user credentials from the mobile device to a server alongside a device identifier. The method includes receiving data at least partially defining encrypted personal payment information and saving the encrypted personal payment information in a memory of the mobile device in association with the application. At least prior to receiving a user request to make a payment via the application, the mobile device lacks a decryption key capable of decrypting the encrypted personal payment information.

1 - 23 . (canceled) 
     
     
         24 . A method of user authentication in connection with a single action payment for an item at a server computing device communicatively connected to a mobile device, the method comprising:
 receiving, by the server computing device, a set of user credentials associated with a user and a device identifier associated with the mobile device from an application on the mobile device;   determining, by the server computing device, whether the mobile device is known by the server computing device by comparing the device identifier to a set of device codes managed at the server computing device;   when the mobile device is not known by the server computing device, retrieving by the server computing device via a network, encrypted personal payment information from a second device associated with the user, wherein the second device is remote from the server computing device and is known by the server computing device;   transmitting, by the server computing device, the encrypted personal payment information from the server computing device to the mobile device via the network; and   cooperating with the mobile device to decrypt the encrypted personal payment information, wherein the decrypted personal payment information is useable to initiate a payment transaction, wherein cooperating includes transmitting, by the server computing device to the mobile device, a decryption key for decrypting the encrypted personal payment information, wherein the decryption key is useable to decrypt personal payment information.   
     
     
         25 . The method of  claim 24 , further comprising:
 wherein retrieving the encrypted personal payment information from the second device associated with the user is performed responsive to the determining that the received user credentials are associated with a known user and the determining that the mobile device is not known by the server computing device.   
     
     
         26 . The method of  claim 24  further comprising decrypting the encrypted personal payment information at the server, and transmitting the personal payment information to the payment authority. 
     
     
         27 . The method of  claim 24  comprising tracking, at the server, one or more users of encrypted personal payment information. 
     
     
         28 . The method of  claim 24  comprising managing, at the server, distribution of decryption keys. 
     
     
         29 . The method of  claim 24  comprising providing at the server a device code table that stores unique device codes for devices. 
     
     
         30 . The method of  claim 24  comprising providing at the server a user code table that stores a listing of unique user identities. 
     
     
         31 . The method of  claim 24  comprising providing at the server a device application pair code that stores unique codes for each application pair useable to distinguish at the server among multiple applications on a same device. 
     
     
         32 . The method of  claim 24  comprising providing at the server an encryption key manager that generates encryption key pairs useable to encrypt a user's personal payment information. 
     
     
         33 . A server computing device for user authentication in connection with a single action payment for an item, wherein the server is communicatively connected to a mobile device and is configured to:
 receive a set of user credentials associated with a user and a device identifier associated with the mobile device from an application on the mobile device;   determine whether the mobile device is known by the server computing device by comparing the device identifier to a set of device codes managed at the server computing device;   when the mobile device is not known by the server computing device, retrieve by the server computing device via a network, encrypted personal payment information from a second device associated with the user, wherein the second device is remote from the server computing device and is known by the server computing device;   transmit the encrypted personal payment information from the server computing device to the mobile device via the network; and   cooperate with the mobile device to decrypt the encrypted personal payment information, wherein the decrypted personal payment information is useable to initiate a payment transaction, wherein cooperation includes the server being configured to transmit to the mobile device a decryption key for decrypting the encrypted personal payment information, wherein the decryption key is useable to decrypt personal payment information.   
     
     
         34 . The server of  claim 33 , wherein the server is configured to:
 retrieve the encrypted personal payment information from the second device associated with the user performed responsive to the determining that the received user credentials are associated with a known user and the determining that the mobile device is not known by the server computing device.   
     
     
         26 . The server of  claim 33  wherein the server is configured to decrypt the encrypted personal payment information at the server, and transmitting the personal payment information to the payment authority. 
     
     
         35 . The server of  claim 33  wherein the server is configured to track one or more users of encrypted personal payment information. 
     
     
         36 . The server of  claim 33  wherein the server is configured to manage distribution of decryption keys. 
     
     
         37 . The server of  claim 33  comprising a device code table that stores unique device codes for devices. 
     
     
         38 . The server of  claim 33  comprising a user code table that stores a listing of unique user identities. 
     
     
         39 . The server of  claim 33  comprising a device application pair code that stores unique codes for each application pair useable to distinguish at the server among multiple applications on a same device. 
     
     
         40 . The server of  claim 33  comprising an encryption key manager that generates encryption key pairs useable to encrypt a user's personal payment information.