Simulated contactless payment cards providing multiple temporary profiles and corresponding credentials
A bridge service is provided to support multi-user simulated contactless cards that in response to receiving a request to provision a secure element with payment card profile information of a user, provisions a token representing the payment card profile, converts the token representing the payment card profile into a format for the payment application; and provides the payment card profile to the payment application, the payment card profile comprising a single use key. The bridge service enables simulated contactless cards to store payment card information for a user on volatile memory instead of the persistent, secure element memory.
1. A computing device comprising:
a processor; and
a storage device comprises a non-volatile memory and a volatile memory, a multi-user simulated contactless payment card application and instructions stored in the storage device that when executed by the processor, cause the computing device to:
receive a request to be provisioned with a payment card profile information of a first user initiating a first payment transaction,
wherein the request comprises identification information of the first user;
execute the multi-user simulated contactless payment card application;
communicate a provisioning request for the payment card profile information of the first user to a bridge service, wherein the provisioning request comprises the identification information of the first user;
receive, from the bridge service, the payment card profile information comprising a single use key in response to communicating the provisioning request, wherein the single use key is generated by the bridge service for the first payment transaction;
store the payment card profile information of the first user in the volatile memory;
communicate a transaction message comprising the payment card profile information to a payment network to complete the first payment transaction, wherein the transaction message comprises the received payment card profile information; and
erase the payment card profile information of the first user from the volatile memory by deselecting the multi-user simulated contactless payment card application upon completion of the first payment transaction.
2. The computing device of claim 1 , wherein the volatile memory is a CLEAR ON DESELECT memory.
3. The computing device of claim 1 , wherein the payment card profile information further comprises a personal account number.
4. The computing device of claim 1 , further comprising instructions that when executed by the processor, further cause the computing device to:
in response to receiving the request, authenticate the first user for performing the transaction with the payment card profile information of the first user.
5. The computing device of claim 4 , wherein the instructions that when executed by the processor, further cause the computing device to:
obtain a biometric of the first user; and
communicate the biometric to the bridge service.
6. The computing device of claim 1 , further comprising instructions that when executed by the processor, further cause the computing device to:
receive a second request to be provisioned for a second_user initiating a second payment transaction, wherein the request comprises second identification information of the second user, wherein the second user is different than the first user;
execute the multi-user simulated contactless payment card application;
communicate a second provisioning request for a second payment card profile information of the second user to a bridge service, wherein the second provisioning request comprises the second identification information of the second user;
receive, from the bridge service, the second payment card profile information comprising a second single use key in response to communicating the provisioning request, wherein, wherein the second single use key is generated by the bridge service for the second payment transaction; and
store the second payment card profile information of the second user in the volatile memory.
7. The computing device of claim 6 , further comprising instructions when executed by the processor, further cause the computing device to:
communicate a second transaction message comprising the second payment card profile information to the payment network to complete the first payment transaction, wherein the transaction message comprises the received payment card profile information; and
, erase the second payment card profile information of the second user from the volatile memory by deselecting the multi-user simulated contactless payment card application upon completion of the second payment transaction.