Provisioning of access credentials using device codes
Systems and methods are described for provisioning access credentials to a mobile device using device and authorization codes. Once provisioned, a mobile device can be used to conduct a transaction.
1. A method comprising:
providing, by a second application on a mobile device or on a communication device, a device code to an authorization computer, wherein the authorization computer thereafter generates an authorization code using at least the device code and a primary account number, wherein the device code is derived from a device identifier that specifically identifies the mobile device;
receiving, by the second application on the mobile device or on the communication device, the authorization code;
providing, by a first application on the mobile device, the authorization code to an access credential provisioning server computer; and
receiving, by the first application on the mobile device from the access credential provisioning server computer, an access credential associated with the primary account number,
wherein the mobile device is capable of providing the access credential to an access device to conduct a payment transaction, and wherein the method further comprises:
receiving, by the mobile device, the device code from the access credential provisioning server computer, after a user attempts to obtain the access credential by communicating with the access credential provisioning server computer.
2. The method of claim 1 , wherein the authorization code is derived from the device code.
3. The method of claim 1 , further comprising:
generating, by the mobile device, the device code.
4. The method of claim 1 , further comprising:
receiving, by the mobile device, an instruction to contact the authorization computer.
5. The method of claim 1 , wherein the access credential comprises a token.
6. The method of claim 1 , wherein the authorization code is derived from the access credential, a precursor to the access credential, or a derivative thereof, and the device code.
7. The method of claim 1 , wherein the access credential is a payment token.
8. The method of claim 7 , wherein the payment token has 16 digits.
9. The method of claim 7 , wherein the access device is a POS terminal which generates an authorization request message comprising the payment token and transmits the authorization request message to the authorization computer for authorization.
10. A mobile device comprising:
a processor;
an antenna coupled to the processor; and
a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor to implement a method comprising
providing, by a second application, a device code to an authorization computer, wherein the authorization computer thereafter generates an authorization code using at least the device code and a primary account number, wherein the device code is derived from a device identifier that specifically identifies the mobile device,
receiving, by the second application, the authorization code,
providing, by a first application, the authorization code to an access credential provisioning server computer, and
receiving, by the first application, an access credential associated with the primary account number,
wherein the mobile device is capable of providing the access credential to an access device to conduct a payment transaction, and wherein the method further comprises:
receiving, by the mobile device, the device code from the access credential provisioning server computer, after a user attempts to obtain the access credential by communicating with the access credential provisioning server computer.
11. The mobile device of claim 10 , wherein the authorization code is derived from the device code.
12. The mobile device of claim 10 , wherein the method further comprises:
generating the device code.
13. The mobile device of claim 10 , wherein the method further comprises:
receiving an instruction to contact the authorization computer.
14. The mobile device of claim 10 , wherein the access credential is a token.
15. The mobile device of claim 10 , wherein the mobile device is a mobile phone.
16. A method comprising:
receiving, by a server computer, a device code from a second application on a mobile device or on a communication device operated by a user, wherein the device code is derived from a device identifier that specifically identifies the mobile device;
generating, by the server computer, an authorization code using the device code and a primary account number; and
transmitting, by the server computer, the authorization code to the second application on the mobile device or on the communication device, wherein the authorization code is provided by the user to a provisioning server computer, which verifies the authorization code and provisions the mobile device with one or more access credentials to a first application on the mobile device, wherein the mobile device is capable of providing the one or more access credentials to an access device to conduct a payment transaction,
wherein the mobile device received the device code from the provisioning server computer, after a user attempts to obtain the access credential by communicating with the provisioning server computer.
17. The method of claim 16 , wherein the server computer is an authorization computer.