Secure distributed single action payment system
Methods and systems for enabling and performing secured, single action payments from a mobile device are disclosed. One method includes receiving user credentials at an application installed on a mobile device, and transmitting the user credentials from the mobile device to a server alongside a device identifier. The method includes receiving data at least partially defining encrypted personal payment information and saving the encrypted personal payment information in a memory of the mobile device in association with the application. At least prior to receiving a user request to make a payment via the application, the mobile device lacks a decryption key capable of decrypting the encrypted personal payment information.
1. A method of enabling a single action payment for an item at a mobile device, the method comprising:
associating, by the mobile device, a memory of the mobile device with an application installed on the mobile device;
receiving, by the mobile device, user credentials at the application installed on the mobile device;
obtaining, by the application, a device identifier associated with the mobile device;
transmitting, by the mobile device, the user credentials and the obtained device identifier from the application installed on the mobile device to a payment management server;
receiving, from the payment management server, an encryption key;
receiving, by the mobile device, data to be included in personal payment information;
encrypting the data using the received encryption key;
creating, by the mobile device, an encrypted personal payment information;
saving, by the mobile device, the encrypted personal payment information in a memory of the mobile device associated with the application;
discarding the received encryption key and any unencrypted data included in the personal payment information from the mobile device;
determining, by the mobile device, that the encrypted personal payment information has been saved and that the encryption key has been discarded;
based on a determination that the encrypted personal payment information has been saved and that the encryption key has been discarded, receiving, by the mobile device, a single action from a user;
wherein the single action defines a user request to make a payment; and
obtaining, at the mobile device, a decryption key used to decrypting the encrypted personal payment information.
2. The method of claim 1 , wherein the personal payment information is received at the mobile device from a user.
3. The method of claim 2 , further comprising capturing the personal payment information using a camera incorporated with the mobile device.
4. The method of claim 3 , wherein capturing the personal payment information includes extracting characters from an image using optical character recognition.
5. The method of claim 1 ,
determining, by the mobile device, that an action was received at the mobile device;
based on a determination, by the mobile device, that an action was received at the mobile device:
transmitting the encrypted personal payment information to the payment management server to transact the payment.
6. The method of claim 1 , further comprising,
determining, by the mobile device, that an action was received at the mobile device;
based on a determination, by the mobile device, that an action was received at the mobile device:
receiving at the mobile device a decryption key from the payment management server;
decrypting the encrypted personal payment information at the mobile device; and
transmitting the personal payment information from the mobile device to a payment authority, thereby initiating a payment transaction.
7. The method of claim 1 , further comprising,
determining, by the mobile device, that an action was received at the mobile device;
based on a determination, by the mobile device, that an action was received at the mobile device:
receiving at the mobile device a decryption key from the payment management server;
decrypting the encrypted personal payment information at the mobile device; and
providing the unencrypted personal payment information to the requesting application, thereby initiating a payment transaction.