Abstract: Systems, methods, and articles of manufacture for secured account provisioning and payments using user computing devices are provided. One such method comprises receiving, by a user computing device, a payment request from a point of sale terminal; obtaining, by the user computing device, a storage encryption (ENC) key based on at least a device fingerprint of the user computing device and a storage root key; obtaining, by the user computing device, an encrypted account payload from a secure database of the user computing device; decrypting, by the user computing device, the encrypted account payload using the storage ENC key, wherein the decrypted account payload includes a payment credential; and transmitting, by the user computing device, the payment credential to the point-of-sale terminal.

Abstract: Systems, methods, and articles of manufacture for secured account provisioning and payments using user computing devices are provided. One such method comprises obtaining an account payload by the user computing device, wherein the account payload comprises a payment credential associated with a transaction account of a user of the user computing device; generating a storage encryption (ENC) key and a storage message authentication code (MAC) key based on at least a device fingerprint of the user computing device and a storage root key; encrypting, the account payload with the storage ENC key to form an encrypted account payload; generating a digital signature of the encrypted account payload using the storage MAC key; and storing the encrypted account payload and the digital signature in a secured database of the user computing device.

Abstract: Systems, methods, and articles of manufacture for secured account provisioning and payments using user computing devices are provided. One such method comprises obtaining an account payload by the user computing device, wherein the account payload comprises a payment credential associated with a transaction account of a user of the user computing device; generating a storage encryption (ENC) key and a storage message authentication code (MAC) key based on at least a device fingerprint of the user computing device and a storage root key; encrypting, the account payload with the storage ENC key to form an encrypted account payload; generating a digital signature of the encrypted account payload using the storage MAC key; and storing the encrypted account payload and the digital signature in a secured database of the user computing device.

Abstract: Systems, methods, and articles of manufacture for secured account provisioning and payments using near-field communication (NFC) enabled devices are provided. The system may receive an encrypted account provisioning request comprising a provisioning account and a device fingerprint; decrypt the encrypted account provisioning request with a server root key; retrieve a limited use payment credential (LUPC) based on the provisioning account; generate an ENC key, a MAC key, and a DEK key based on the device fingerprint and the server root key; and encrypt the LUPC using the ENC key, the MAC key, and the DEK key to generate an encrypted account payload.

Abstract: Systems, methods, and articles of manufacture for secured account provisioning and payments using near-field communication (NFC) enabled devices are provided. The system may receive an encrypted account provisioning request comprising a provisioning account and a device fingerprint; decrypt the encrypted account provisioning request with a server root key; retrieve a limited use payment credential (LUPC) based on the provisioning account; generate an ENC key, a MAC key, and a DEK key based on the device fingerprint and the server root key; and encrypt the LUPC using the ENC key, the MAC key, and the DEK key to generate an encrypted account payload.