System for preventing mobile payment
A method for preventing mobile payment is described. The method comprises generating an authorization request, via a payment module, based on sensitive data on a mobile device. The authorization request is transmitted from the payment module to an issuer system. The issuer system sends a neutralization trigger. In response to receiving the neutralization trigger, the payment module is disabled.
1. A method, comprising:
generating an authorization request, via a payment module of a mobile device, based on a limited use key;
transmitting the authorization request from the payment module to an issuer system via a merchant terminal;
receiving, at the mobile device, an encrypted neutralization trigger from the merchant terminal, the neutralization trigger originating from the issuer system;
in response to receiving the encrypted neutralization trigger at the mobile device:
decrypting the encrypted neutralization trigger; and
changing a user PIN of the payment module.
2. The method of claim 1 , wherein the mobile device is offline when transmitting the authorization request from the payment module to the merchant terminal.
3. The method of claim 1 , wherein the limited use key is camouflaged with a user PIN.
4. The method of claim 1 , wherein changing the user PIN of the payment module disables the payment module in order to prevent use of the payment module on the mobile device.
5. The method of claim 1 , wherein the neutralization trigger is an Application Protocol Data Unit command.
6. The method of claim 1 , wherein the payment module is a digital wallet that includes a plurality of credit cards each being camouflaged using a single user PIN.
7. The method of claim 1 ,
wherein transmitting the authorization request from the payment module to the issuer system further comprises initiating, via the payment module on the mobile device, a contactless transaction with a passive merchant terminal.
8. A computer configured to access a storage device, the computer comprising:
a processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the processor cause the computer to perform:
generating an authorization request, via a payment module on a mobile device, based on a limited use key;
transmitting the authorization request from the payment module to an issuer system via a merchant terminal;
receiving, at the mobile device, an encrypted neutralization trigger from the merchant terminal, the neutralization trigger originating from the issuer system;
in response to receiving the encrypted neutralization trigger at the mobile device:
decrypting the encrypted neutralization trigger; and
changing a user PIN of the payment module.
9. The computer of claim 8 , wherein the mobile device is offline when transmitting the authorization request from the payment module to the merchant terminal.
10. The computer of claim 9 , wherein the limited use key is camouflaged with a user PIN.
11. The computer of claim 9 , wherein changing a user PIN of the payment module disables the payment module in order to prevent use of the payment module on the mobile device.
12. The computer of claim 8 , wherein the neutralization trigger is an Application Protocol Data Unit command.
13. The computer of claim 8 , wherein the payment module is a digital wallet that includes a plurality of credit cards each being camouflaged using a single user PIN.
14. The computer of claim 8 ,
wherein transmitting the authorization request from the payment module to the issuer system further comprises initiating, via the payment module on the mobile device, a contactless transaction with a merchant terminal.
15. A computer program product comprising:
a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to generate an authorization request, via a payment module on a mobile device, based on a limited use key;
computer-readable program code configured to transmit the authorization request from the payment module to an issuer system via a merchant terminal;
computer-readable program code configured to receive, at the payment module on the mobile device, an encrypted neutralization trigger from the merchant terminal, the neutralization trigger originating from the issuer system;
computer-readable program code configured to, in response to receiving the encrypted neutralization trigger at the mobile device:
decrypt the encrypted neutralization trigger; and
changing a user PIN of the payment module.
16. The computer program product of claim 15 , wherein the mobile device is offline when transmitting the authorization request from the payment module to the merchant terminal.
17. The computer program product of claim 16 , wherein the limited use key is camouflaged with a user PIN.
18. The computer program product of claim 15 , wherein the computer-readable program code configured to change a user PIN of the payment module further comprises:
computer-readable program code configured to disable the payment module in order to restrict access to the payment module on the mobile device.
19. The computer program product of claim 15 , wherein the payment module is a digital wallet that includes a plurality of credit cards each being camouflaged using a single user PIN.
20. The computer program product of claim 15 ,
wherein transmitting the authorization request from the payment module to the issuer system further comprises initiating, via the payment module on the mobile device, a contactless transaction with a passive merchant terminal.