Secure account provisioning

1. A mobile payment account management system for providing a mobile payment account associated with a portable electronic device to enable contactless payment at an electronic point of sale using a wallet application module on the portable electronic device, the system comprising one or more processors configured to:

receive a request from the wallet application module on the portable electronic device, to create a mobile payment account, the request including data identifying the portable electronic device and an associated user;

create a mobile payment account associated with the portable electronic device based on data received in the request, wherein the created mobile payment account includes data identifying a one-time activation servicing state of the mobile payment account as:

a first inactive state of the mobile payment account indicating that the associated user must be verified by the account management system,

a second inactive state of the mobile payment account indicating that the mobile wallet application must be configured for user access security, and then

an active state of the mobile payment account indicating that the user is verified and user access security is configured;

transmit data identifying the created mobile payment account to the wallet application module on the portable electronic device, wherein the activation servicing state of the mobile payment account is initially set to the first inactive state;

receive, from the portable electronic device, a user validation response, verifying the identity of the associated user based on the received validation response, and in response, set the activation servicing state of the mobile payment account to the second inactive state; and

receive data indicating that user access security has been configured for the mobile wallet application, and in response set the activation servicing state of the mobile payment account to the active state, whereby the wallet application module is enabled for contactless payment for future transactions with multiple merchants using the activated mobile payment account.

2. The system of claim 1 , wherein the one or more processors is configured to verify the identity of the associated user by receiving, from the portable electronic device, a validation answer to at least one validation question, and automatically authenticating the user based on the received validation answer.

3. The system of claim 2 , wherein the validation questions and answers are based on identification and validation information associated with the new mobile payment account.

4. The system of claim 3 , wherein the validation questions and answers are further based on additional identification and validation information provided by a third party.

5. The system of claim 2 , wherein the identification and validation information is not transmitted to the portable electronic device.

6. The system of claim 2 , wherein the one or more processors are further configured to determine a number of validation questions to be transmitted to the portable electronic device based on a determined level of security associated with the user.

7. The system of claim 1 , wherein the one or more processors are configured to automatically authenticate a user associated with the new mobile payment account substantially in real-time.

8. The system of claim 1 , wherein the one or more processors are further configured to create the mobile payment account by:

transmitting the data included in the received request to create a mobile payment account to a payment account issuer;

receiving embossing data from the payment account issuer relating to an established payment account; and

creating mobile payment account data including data from the received embossing data and data identifying the associated portable electronic device.

9. The system of claim 1 , wherein the one or more processors are further configured to receive a request from the wallet application module to initiate the identity verification process in response to notification by the wallet application module that the mobile payment account is in the first inactive state.

10. A portable electronic device comprising:

a contactless data communication interface;

a wallet application module for contactless payment at an electronic point of sale via the contactless data communication interface, the wallet application module configured to:

transmit a request to create a mobile payment account at mobile payment account management system, the request including data identifying the portable electronic device and an associated user;

receive and store data identifying the created mobile payment account in a secure memory, wherein the mobile payment account has a one-time activation servicing state that is: a first inactive state of the mobile payment account indicating that the associated user must be verified by the account management system, a second inactive state of the mobile payment account indicating that the mobile wallet application must be configured for user access security, and an active state of the mobile payment account indicating that the user is verified and user access security is configured;

prompt the user to initiate an identity verification process with the mobile payment account management system;

transmit user input for identity verification by the mobile account management system;

receive data from the mobile payment account management system indicating that the activation servicing state of the mobile payment account is set to the second inactive state, and in response, prompt the user to configure user access security; and

transmit data indicating that the mobile wallet application is configured for user access security to the mobile payment account management system, whereby the wallet application module is enabled for contactless payment for future transactions with multiple merchants using the activated mobile payment account.

11. The portable electronic device of claim 10 , wherein configuring user access security of the mobile wallet application comprises setting a access PIN or passcode.