Configuring a plurality of security isolated wallet containers on a single mobile device

1. A high security mobile electronic transaction device for ensuring isolated access to a plurality of distinct service-provider specific electronic wallets disposed in a non-transient memory of the device comprising:

a non-transient memory accessible by a processor of the mobile device;

at least one mobile transaction platform-specific application programming interface stored in the memory and configured to facilitate access to secure mobile transaction platform resources by a wallet container executing on the mobile device;

a wallet container disposed in the memory of the mobile device and executable by the processor, wherein the wallet container interfaces with secure mobile transaction platform resources via the at least one application programming interface, the wallet container comprising:

an access controller that ensures a wallet disposed in the at least one of the plurality of distinct wallet containers only has access to mobile device resources to which the disposed wallet has permissions by limiting access to the at least one application programming interface;

at least one service provider-specific wallet disposed in the wallet container, wherein service provider-specific wallet security is enforced by the wallet container accessing a portion of the secure mobile transaction platform resources via the at least one application programming interface; and

at least one wallet companion applet, for each of the at least one service provider-specific wallets, stored in a particular non-volatile service provider-specific security domain of a plurality of non-volatile service provider-specific security domains of a secure element, wherein the particular security domain comprises the at least one wallet companion applet and at least one other applet, the security domain and all applets disposed therein being accessible as a group by the mobile transaction platform when using unique, security through use of domain-specific security keys when accessing the secure element.

2. The mobile device of claim 1 , wherein a mobile transaction platform with which the mobile transaction platform-specific application programming interface is associated comprises an enabling tier, a service tier, and a personalization tier.

3. The mobile device of claim 1 , wherein the application programming interface is mobile device-independent.

4. The mobile device of claim 1 , wherein the application programming interface is mobile device operating environment-specific.

5. The mobile device of claim 1 , wherein the wallet container cannot impact access to secure mobile transaction platform resources of a second wallet container.

6. The mobile device of claim 1 , wherein a mobile transaction platform with which the mobile transaction platform-specific application programming interface is associated supports multiple independent wallet containers operating on a single mobile device.

7. The mobile device of claim 1 , wherein service-provider specific wallet security is enabled to facilitate keeping service provider-specific information separate and confidential from other service providers with which the at least one wallet interacts via the mobile device.

8. The mobile device of claim 1 , wherein a wallet container executing on the mobile device comprises a run-time environment for interpreting at least one of the wallet and an applet.

9. The mobile device of claim 1 , wherein the wallet container facilitates security of transactions between external service provider resources and at least one wallet by isolating access of service provider resources from unauthorized wallets.

10. The mobile device of claim 1 , wherein the wallet container provides defined transaction patterns for implementing complex security for mobile transactions among wallets and service providers.

11. A high security mobile electronic transaction device for ensuring isolated access to a plurality of distinct service-provider specific security domains disposed in a non-transient memory of the device comprising:

a non-transient memory accessible by a processor of the mobile device;

at least one mobile transaction platform-specific application programming interface stored in the memory and configured to facilitate access to secure mobile transaction platform resources by a wallet container executing on the mobile device;

a distinct wallet container disposed in the memory of the mobile device and executable by the processor, wherein the wallet container ensures a wallet disposed in the distinct wallet container only has access to mobile device resources to which the disposed wallet has permissions by limiting access to the at least one application programming interface; and

at least one wallet companion applet, for the wallet, stored in a non-volatile service provider-specific security domain of a non-volatile secure element comprising the at least one wallet companion applet and at least one other applet, the security domain and all applets disposed therein being accessible as a group through use of domain-specific security keys when accessing the secure element.

12. The mobile device of claim 11 , wherein a mobile transaction platform with which the mobile transaction platform-specific application programming interface is associated comprises an enabling tier, a service tier, and a personalization tier.

13. The mobile device of claim 11 , wherein the application programming interface is mobile device-independent.

14. The mobile device of claim 11 , wherein the application programming interface is mobile device operating environment-specific.

15. The mobile device of claim 11 , wherein the wallet container cannot impact access to secure mobile transaction platform resources of a second wallet container.

16. The mobile device of claim 11 , wherein a mobile transaction platform with which the mobile transaction platform-specific application programming interface is associated supports multiple independent wallet containers operating on a single mobile device.

17. The mobile device of claim 11 , wherein the wallet container facilitates keeping service provider-specific information separate and confidential from other service providers with which the at least one wallet interacts via the mobile device.

18. The mobile device of claim 11 , wherein a wallet container executing on the mobile device comprises a run-time environment for interpreting at least one of the wallet and an applet.

19. The mobile device of claim 11 , wherein the wallet container facilitates security of transactions between external service provider resources and at least one wallet by isolating access of service provider resources from unauthorized wallets.

20. The mobile device of claim 11 , wherein the wallet container provides defined transaction patterns for implementing complex security for mobile transactions among wallets and service providers.