Provisioning Payment Credentials to Mobile Devices Without Secure Elements

The patent introduces a remote secure element (RSE) system that acts as an intermediary between the mobile device and the payment network. The RSE stores payment credentials remotely in the cloud, allowing mobile devices without secure elements to access secure payment processing through this intermediary service. The system uses secure communication channels and authentication protocols to bridge the gap between devices lacking hardware security and the requirements for secure payment transactions.

The patent creates a virtual copy of the secure element functionality in the cloud. Instead of requiring physical secure element hardware in each device, the system provisions virtual payment credentials and security keys to the mobile device through secure provisioning protocols. This virtualized approach replicates the security functions of a physical secure element without requiring the hardware to be present in the device.

The remote secure element system serves as a trusted intermediary that manages security on behalf of the mobile device. The RSE holds the actual payment credentials and security keys, while the mobile device only contains application-layer software that communicates with the RSE through secure channels. This architecture allows insecure devices to perform secure transactions by delegating security functions to the intermediary RSE service.

The patent moves the security function from the physical hardware dimension (secure element chip in device) to the network/cloud dimension (remote secure element service). By transitioning security from a local hardware constraint to a remote service capability, the system enables devices without physical secure elements to access security functions through network-based provisioning and authentication mechanisms.

The patent extracts the secure element functionality from the mobile device hardware and relocates it to a remote cloud-based service. The mobile device retains only the NFC communication capability and application software, while the actual secure credential storage and management functions are taken out and hosted remotely. This separation allows devices to be manufactured without expensive secure element hardware while maintaining security through the remote service.

The patent replaces expensive, permanent secure element hardware with a software-based provisioning system that uses less costly components. The secure credentials are provisioned as virtual objects that can be remotely updated, revoked, or replaced without requiring hardware changes. This approach uses cheaper software-based security mechanisms that can be deployed and managed more flexibly than hardware secure elements.