Over the air management of payment application installed in mobile device
Systems, apparatus, and methods for managing a payment application installed on a mobile device, such as a mobile phone are provided. An Issuer of a payment device can remotely control the payment application by instructing a wireless network carrier or operator to transmit a message to the mobile phone, where the message contains an instruction to perform an operation related to the payment application. The Issuer can remotely reset a counter or a password associated with the payment application, lock or unlock a payment application, and set the access control data to a predetermined value, to prevent unauthorized use of the payment application in the situation in which the mobile phone is lost or stolen, or the Issuer desires to limit access to the payment application for other reasons, such as limiting its exposure to unauthorized uses of the payment device.
1. A method in a mobile communication device, the method comprising:
receiving, by the mobile communication device, an input from a user, the input indicative of a password for access to a payment application resident on the mobile communication device, wherein the payment application allows a predetermined number of password entry attempts;
determining, by the mobile communication device, that the password is not correct;
responsive to the determining that the password is not correct, determining, by the mobile communication device, that the predetermined number of password entry attempts has been reached; and
responsive to the determining that the predetermined number of password entry attempts has been reached, preventing, by the mobile communication device, access to the payment application, wherein the preventing includes:
transmitting, to a remote computer, a lock application request message;
receiving, from the remote computer, an application lock script; and
executing, by the mobile communications device, the application lock script to lock the payment application by modifying an access control data value within a secure memory of the mobile communication device.
2. The method of claim 1 , wherein the remote computer comprises an issuer computer of an issuer of an account configured for use with the payment application.
3. The method of claim 2 , wherein the application lock script is routed through a payment processing network prior to the receipt by the mobile communication device.
4. The method of claim 1 , wherein the transmitting the lock application request message and the receiving the application lock script occurs using an over-the-air communication channel.