Secure distributed single action payment system

摘要

Methods and systems for enabling and performing secured, single action payments from a mobile device are disclosed. One method includes receiving user credentials at an application installed on a mobile device, and transmitting the user credentials from the mobile device to a server alongside a device identifier. The method includes receiving data at least partially defining encrypted personal payment information and saving the encrypted personal payment information in a memory of the mobile device in association with the application. At least prior to receiving a user request to make a payment via the application, the mobile device lacks a decryption key capable of decrypting the encrypted personal payment information.

主权项

1. A method of enabling a single action payment for an item at a mobile device, the method comprising:
associating, by the mobile device, a memory of the mobile device with an application installed on the mobile device; receiving, by the mobile device, user credentials at the application installed on the mobile device; obtaining, by the application, a device identifier associated with the mobile device;transmitting, by the mobile device, the user credentials and the obtained device identifier from the application installed on the mobile device to a payment management server;
receiving, from the payment management server, an encryption key; receiving, by the mobile device, data to be included in personal payment information; encrypting the data using the received encryption key; creating, by the mobile device, an encrypted personal payment information; saving, by the mobile device, the encrypted personal payment information in a memory of the mobile device associated with the application; discarding the received encryption key and any unencrypted data included in the personal payment information from the mobile device; determining, by the mobile device, that the encrypted personal payment information has been saved and that the encryption key has been discarded; based on a determination that the encrypted personal payment information has been saved and that the encryption key has been discarded, receiving, by the mobile device, a single action from a user; wherein the single action defines a user request to make a payment; and obtaining, at the mobile device, a decryption key used to decrypting the encrypted personal payment information.