Granted Patent B2

US 12,574,733 · App. 18/676,860 · Granted Mar 10, 2026

Inventors: Sebastien Taveau (Redwood City, CA); John Hastings Granbery (Boston, MA)

Assignee: PAYPAL, INC.

H04W12/08G06F21/606G06Q20/3223G06Q20/3227G06Q20/3278G06Q20/351G06Q20/405H04L63/04H04L63/08H04L67/10H04L67/1095H04W4/60H04W4/80

Abstract

Claims (38)

1 . A device, comprising:

a non-transitory memory storing instructions; and

one or more hardware processors configured to execute the instructions to cause the device to:

receive a request to perform a function associated with a first application of a plurality of applications on the device, wherein each of the plurality of applications resides in a respective virtual secure element of a plurality of virtual secure elements;

determine that the first application resides in a first virtual secure element of the plurality of virtual secure elements; and

in response to determining that the first application resides in the first virtual secure element, activate the first virtual secure element.

2 . The device of claim 1 , wherein a second virtual secure element of the plurality of virtual secure elements is active prior to activating the first virtual secure element, and wherein executing the instructions further causes the device to deactivate the second virtual secure element.

3 . The device of claim 1 , wherein the plurality of virtual secure elements is implemented within a single physical secure element.

4 . The device of claim 3 , wherein the single physical secure element is a Subscriber Identity Module (SIM).

5 . The device of claim 1 , wherein the first virtual secure element is deactivated prior to activating the first virtual secure element.

6 . The device of claim 1 , wherein executing the instructions further causes the device to perform the function using the first application within the first virtual secure element.

7 . The device of claim 6 , wherein performing the function comprises communicating data with a remote device via a wireless connection.

8 . A method comprising:

activating, by a computer device, a first virtual secure element of a plurality of virtual secure elements on the computer device, wherein each application in a plurality of applications of the computer device is associated with a respective virtual secure element of the plurality of virtual secure elements;

accessing, by the computer device, a first application from the plurality of applications within the first virtual secure element; and

executing, by the computer device, a function associated with the first application within the first virtual secure element.

9 . The method of claim 8 , further comprising:

determining that the first virtual secure element is in an inactive state prior to the activating the first virtual secure element.

10 . The method of claim 8 , further comprising:

determining that the first application is associated with the first virtual secure element based on one or more containers stored in a memory on the computer device, wherein the activating the first virtual secure element is in response to the determining that the first application is associated with the first virtual secure element.

11 . The method of claim 10 , wherein the plurality of virtual secure elements is implemented within a single physical secure element, and wherein the memory that stores the one or more containers is different from the single physical secure element.

12 . The method of claim 8 , wherein the plurality of virtual secure elements is implemented within a single physical secure element.

13 . The method of claim 12 , wherein the single physical secure element is a Subscriber Identity Module (SIM).

14 . The method of claim 8 , further comprising:

prior to the activating the first virtual secure element, determining that a second virtual secure element of the plurality of virtual secure elements is in an active state; and

deactivating the second virtual secure element.

15 . A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

activating a first virtual secure element of a plurality of virtual secure elements on the machine, wherein each application in a plurality of applications of the machine is configured to execute within a respective virtual secure element of the plurality of virtual secure elements;

accessing a first application from the plurality of applications within the first virtual secure element; and

executing a function associated with the first application within the first virtual secure element.

16 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:

validating the first application prior to the activating the first virtual secure element.

17 . The non-transitory machine-readable medium of claim 15 , wherein the executing the function comprises communicating, by the first application executed within the first virtual secure element, data with a device different from the machine via a wireless connection.

18 . The non-transitory machine-readable medium of claim 17 , wherein the communicating the data with the device is performed using a particular communication protocol associated with the first application.

19 . The non-transitory machine-readable medium of claim 15 , wherein the executing the function comprises processing, using the first application executed within the first virtual secure element, a transaction.

20 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:

prior to the activating the first virtual secure element, determining that a second virtual secure element of the plurality of virtual secure elements is in an active state; and

deactivating the second virtual secure element.

Assignments (2)

Continuity (8)

References Cited (400)