IP Library Granted Patent US 8,880,886
Granted Patent B2
US 8,880,886 · App. 13/481,433 · Granted Nov 4, 2014

Systems and methods for authenticating mobile devices

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,880,886
App. No.
13/481,433
Granted
Nov 4, 2014
Kind
B2
Abstract

Embodiments of the invention provide systems and methods for authenticating mobile devices. A registration request and identifying information for a mobile device or a secure element associated with the mobile device may be received. Based upon the received identifying information and a base level key, a rotated key for the mobile device may be determined. The determined rotated key may then be provided to the mobile device, and the rotated key may be utilized for subsequent authentication of the mobile device.

Claims (49)

1. A computer-implemented method for authenticating mobile devices, the method comprising:

receiving, by a service manager computer comprising one or more processors, from a mobile device, a registration request and identifying information for the mobile device, the identifying information comprising information for a secure element associated with the mobile device, wherein the service manager computer is in communication with a plurality of network operators and a plurality of service provider computers;

determining, by the service manager computer based upon the received identifying information and a base level key, a rotated key for the mobile device;

providing, by the service manager computer, the determined rotated key to the mobile device;

receiving, by the service manager computer, from the mobile device after providing the rotated key to the mobile device, a subsequent provisioning request to provision an application to the mobile device, wherein the subsequent provisioning request is encrypted with the rotated key, and the application is provided by a service provider;

authenticating, by the service manager computer in response to the subsequent provisioning request, the mobile device based at least in part on the rotated key; and

provisioning, by the service manager computer upon authentication of the mobile device, the application to the mobile device.

2. The computer-implemented method of claim 1 , further comprising:

establishing, prior to determining the rotated key, a secure communications channel with the secure element; and

authenticating, via the secure communications channel, the secure element.

3. The computer-implemented method of claim 1 , wherein receiving identifying information comprises receiving card production life cycle (CPLC) information.

4. The computer-implemented method of claim 1 , further comprising:

updating the identifying information; and

associating the rotated key with the updated identifying information.

5. The computer-implemented method of claim 4 , wherein updating the identifying information comprises updating a card production life cycle (CPLC) for the mobile device or the secure element.

6. The computer-implemented method of claim 4 , further comprising:

communicating the updated identifying information and information associated with the rotated key to the service provider for subsequent authentication of the mobile device.

7. The computer-implemented method of claim 6 , further comprising:

receiving, from the service provider, a request to provision the mobile device; and

provisioning the mobile device in response to the received request,

wherein the request is received following the authentication of the mobile device by the service provider based at least in part upon the rotated key.

8. The computer-implemented method of claim 7 , wherein the service provider authenticates the mobile device by reconstructing the rotated key utilizing the updated identifying information.

9. The computer-implemented method of claim 7 , wherein provisioning the mobile device comprises provisioning the secure element of the mobile device with a financial account.

10. A system, comprising:

at least one memory operable to store computer-executable instructions; and

at least one processor configured to access the at least one memory and execute the computer-executable instructions to:

receive communication from a plurality of network operators and a plurality of service provider computers;

receive, from a mobile device, a registration request and identifying information for the mobile device, the identifying information comprising information for a secure element associated with the mobile device;

determine, based upon the received identifying information and a base level key, a rotated key for the device;

provide the determined rotated key to the mobile device;

receive, from the mobile device after providing the rotated key to the mobile device, a subsequent provisioning request to provision an application to the mobile device, wherein the subsequent provisioning request is encrypted with the rotated key, and the application is provided by a service provider;

authenticate, in response to the subsequent provisioning request, the mobile device based at least in part on the rotated key; and

provision, upon authentication of the mobile device, the application to the mobile device.

11. The system of claim 10 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

establish, prior to determining the rotated key, a secure communications channel with the secure element; and

authenticate, via the secure communications channel, the secure element.

12. The system of claim 10 , wherein the received identifying information comprises card production life cycle (CPLC) information.

13. The system of claim 10 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

update the identifying information; and

associate the rotated key with the updated identifying information.

14. The system of claim 13 , wherein the updated identifying information comprises an updated card production life cycle (CPLC) for the mobile device or the secure element.

15. The system of claim 13 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

direct communication of the updated identifying information and information associated with the rotated key to the service provider for subsequent authentication of the mobile device.

16. The system of claim 15 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

receive, from the service provider, a request to provision the mobile device; and

direct provisioning of the mobile device in response to the received request,

wherein the request is received following the authentication of the mobile device by the service provider based at least in part upon the rotated key.

17. The system of claim 16 , wherein the service provider authenticates the mobile device by reconstructing the rotated key utilizing the updated identifying information.

18. The system of claim 16 , wherein a financial account is provisioned to the secure element of the mobile device.

Assignments (5)
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS Recorded Aug 19, 2019
From: WELLS FARGO BANK, NATIONAL ASSOCIATION
To: FIRST DATA CORPORATION
Reel/Frame 050094/0455 →
RELEASE OF SECURITY INTEREST Recorded Jul 30, 2019
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: FIRST DATA CORPORATION; CLOVER NETWORK, INC.; MONEY NETWORK FINANCIAL, LLC
Reel/Frame 049899/0001 →
SECURITY INTEREST Recorded Sep 22, 2015
From: FIRST DATA CORPORATION
To: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS COLLATERAL AGENT
Reel/Frame 036656/0224 →
SECURITY AGREEMENT Recorded Mar 25, 2013
From: FIRST DATA CORPORATION; CLOVER NETWORKS, INC.; MONEY NETWORK FINANCIAL, LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 030080/0531 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 7, 2012
From: KEAN, BRIAN; CAMBRIDGE, DEVIN MICHAEL; MEYERS, STEPHEN M.; MUSFELDT, ROGER LYNN; ADKISSON, BRENT DEWAYNE; DAVIS JR., NORMAN THEODORE
To: FIRST DATA CORPORATION
Reel/Frame 028741/0713 →