Abstract: A system for presentation of multiple NFC credentials via an NFC baseband in a portable communication device during a single NFC transaction. The system comprises a secure element having a directory of available NFC credentials stored therein, wherein the ordering of the available NFC credentials usually indicates the priority. The system further comprises a pre-determined multiple-credential start Application ID (AID) wherein the directory includes a plurality of NFC credentials after the pre-determined multiple-credential start AID. A method for presenting multiple NFC credentials during a single NFC transaction is also disclosed.

Abstract: A system for providing first and second trusted applications diverse permission to communicate via a secure element. The system comprising first digital identifier and digital token operably associated with the first trusted application; a second digital identifier and digital token operably associated with the second trusted application. The system further includes a card services module that provides an application programming interface to the secure element supported by a secure data table including first and second sets of permissions. The card services module issues one or more commands to the secure element based on a first action requested by the first trusted application in conjunction with the presentation of the first digital token only if the one or more commands will not violate the first set of permissions. A method is also disclosed.

Abstract: A system for providing an application associated with a portable communication device the ability to communicate via a secure element. The system has a digital identifier and digital token operably associated with the application; a card services module that provides an application programming interface to the secure element; and a secure data table associated with the card services module. The secure data table includes a list of trusted applications each identifiable by paired digital identifier and token. The card services module [includes] compares the identifier and the token with each of the identifier-token pairs in the table until a match indicates the application is trusted. The card services module issues commands to the secure element based on an action requested by a trusted application in conjunction with the presentation of the digital token. A method of providing an application with the ability to communicate via secure element is also disclosed.

Abstract: A system for issuing a dynamic temporary credential to a portable communication device for use in a transaction with an electronic control point. The system receives the current geo-location of the portable communication device and transmits a dynamic temporary credential to the portable communication device from the centralized computer. The system further scores the risk in authorizing a transaction associated with an electronic control point using the dynamic temporary credential it issued. The system may prevent the transmission of the dynamic temporary credential until the end user has been authenticated, which may include verifying one or more of a manually input passcode, the unique digital signature of the portable communication device, and know your customer queries.

Abstract: A system for using a dynamic temporary credential with a portable communication device for use in a transaction with an electronic control point (e.g. point of sale, NFC access point) wherein the portable communication device has a geo-location module (e.g. GPS). The system has a centralized module that receives the portable communication device's current geo-location and transmits the dynamic temporary credential to the portable communication device and provides predictive transaction information—including the dynamic temporary credential and portable communication device's geo-location—to an authorization system operably associated with the electronic control point. The dynamic temporary credential has a predetermined time to live, which allows for the recycling of the dynamic credential, such recycling may take into account the geo-location for which the credential has been recently issued. A method for using a dynamic temporary credential with a portable communication device is also disclosed.

Abstract: A system for presentation of multiple NFC credentials via an NFC baseband in a portable communication device during a single NFC transaction. The system comprises a secure element having a directory of available NFC credentials stored therein, wherein the ordering of the available NFC credentials usually indicates the priority. The system further comprises a pre-determined multiple-credential start Application ID (AID) wherein the directory includes a plurality of NFC credentials after the pre-determined multiple-credential start AID. A method for presenting multiple NFC credentials during a single NFC transaction is also disclosed.

Abstract: This invention involves, in part, a system for automatically selecting a credential among a plurality of credentials on a portable communication device based on a geo-location of the portable communication device and based on a user preference, for use in an electronic wallet transaction. The system includes a geo-location device configured to detect the geo-location of the portable communication device; a location identification service unit configured to be activated by a pre-determined user input, and configured to determine a merchant where the portable communication device is most likely to be located based on said geo-location; means for storing preferences corresponding to the plurality of credentials; and means for automatically determining which of the plurality of credentials to use for the electronic wallet transaction based on the preferences.

Abstract: A system for controlling access to an application on a portable communication device having a secured element and a user interface comprises memory associated with the secure element; a card management module operably associated with the portable communication device and with the secure element capable of controlling the secured element to facilitate writing to and reading from the memory; and a password management module operably associated with the card management module, the portable communication device user interface, and the application, the password management module receiving an application identifier associated with the application, a user name, and a password from the user interface, and providing an access command to the application based on whether the received user name and password match information stored in the memory.

Abstract: Disclosed is as system and method for automatically selecting a credential among a plurality of credentials on a portable communication device based on a geo-location of the portable communication device and based on a user preference, for use in an electronic wallet transaction. The system includes a geo-location device configured to detect the geo-location of the portable communication device; a location identification service unit configured to be activated by a pre-determined user input, and configured to determine a merchant where the portable communication device is most likely to be located based on said geo-location, a storage means for storing preferences corresponding to the plurality of credentials; and means for automatically determining which of the plurality of credentials to use for the electronic wallet transaction based on the preferences.

Abstract: A system for providing a virtual secure element on a portable communication device having a secured element. The system comprising memory; a card management module operably associated with the secure element providing an application programming interface to the secure element and controlling writing to and reading from at least a portion of the memory; a virtual encryption key preferably stored within the secured element; and an encryption engine capable of encrypting data before its placed in the memory and decrypting that data using the virtual encryption key.

Abstract: A system for dynamically adjusting the contactless data emulation used by a portable communication device based on its geo-location. The system determines a geo-location of the portable communication device by transmitting the current geo-location data using a most appropriate channel to a server; receiving data regarding payment systems potentially co-located with the portable communication device; and configuring a payment system in the portable communication device with the data formats and other contact-less point of sale data specific to payment system potentially co-located with the device. A method for dynamically adjusting the contactless data emulation used by a portable communication device based on its geo-location is also disclosed.

Abstract: A system for providing first and second trusted applications diverse permission to communicate via a secure element. The system comprising first digital identifier and digital token operably associated with the first trusted application; a second digital identifier and digital token operably associated with the second trusted application. The system further includes a card services module that provides an application programming interface to the secure element supported by a secure data table including first and second sets of permissions. The card services module issues one or more commands to the secure element based on a first action requested by the first trusted application in conjunction with the presentation of the first digital token only if the one or more commands will not violate the first set of permissions. A method is also disclosed.

Abstract: A system for providing an application associated with a portable communication device the ability to communicate via a secure element. The system has a digital identifier and digital token operably associated with the application; a card services module that provides an application programming interface to the secure element; and a secure data table associated with the card services module. The secure data table includes a list of trusted applications each identifiable by paired digital identifier and token. The card services module [includes] compares the identifier and the token with each of the identifier-token pairs in the table until a match indicates the application is trusted. The card services module issues commands to the secure element based on an action requested by a trusted application in conjunction with the presentation of the digital token. A method of providing an application with the ability to communicate via secure element is also disclosed.

Abstract: A system and method for remotely providing an end user with a solution to a failure in a mobile transaction is disclosed. The system includes a portable communication device having a diagnostics agent configured to transmit the communication device's unique identification number and present status over a mobile network. The system further includes a retailer subsystem in short proximity communication with the communication device, and a remote system management back end in wireless communication with both the communication devices and the retailer subsystem. The system management back end has a diagnostics management system configured to receive failure data from the portable communication device, and to determine a solution based on the failure data. The system also includes a mobile network in communication with the system management back end, via which the solution is wirelessly transmitted to the end user.

Abstract: A system and method for remotely diagnosing a failure in a mobile transaction is disclosed. The system includes a portable communication device having a diagnostics agent configured to transmit the communication device's unique identification number and present status over a mobile network. The system further includes a retailer subsystem in short proximity communication with the communication device, and a remote system management back end in wireless communication with both the communication devices and the retailer subsystem. The system management back end has a diagnostics management system configured to receive failure data and RF presence data from the portable communication device, and to diagnose the failure based on such data. The system also includes a mobile network in communication with the system management back end, via which the diagnosis and hopefully a solution are wirelessly transmitted to the end user.

Abstract: A data processing device, such as a wireless telephone, includes logic to identify a first recipient address type for a first recipient of a message, and to identify a second recipient address type different than the first recipient address type for a second recipient of the message. A first message bearer mode is selected for the first recipient according to the first recipient address type, and a second message bearer mode different from the first message bearer mode is selected for the second recipient according to the second recipient address type.

Abstract: A system, method, and computer program product for simultaneous integrated access to multiple instant messaging (IM) servers from multiple IM vendors. A particular feature of many specific embodiments is a user interface that maintains separate, distinct branding for each vendor, so that a user of the system can see other user names, functions, and other vendor-specific features as clearly associated with a particular IM vendor.

Abstract: A messaging-centric wireless device that communicates messages in the form of e-mail, SMS, and instant messaging. One of the core capabilities of the device is to support always-on mobile instant messaging, including reasonably accurate IM status information. The device/service includes some or all of the following features: IM community aggregation; intelligent IM status; a dedicated network environment (PDP/APN); an always-on connection either through a sustained wireless data connection or through buffered/mediated services that use out-of-band signaling to initiate a PDP context; an IM gateway to aggregate IM and/or e-mail connectivity; self-provisioning; the capability to compose messages without having to indicate dependent aspects of the message such as delivery bearer; a messaging oriented physical design; the capability to add on voice service; and, the capability to add on other data services.