| CPC G06Q 20/3821 (2013.01) [G06Q 20/322 (2013.01); G06Q 20/382 (2013.01); G06Q 20/3829 (2013.01); G06Q 20/4016 (2013.01); G06Q 20/3674 (2013.01); G06Q 2220/00 (2013.01)] | 18 Claims |

|
1. A method, comprising:
transmitting, from a mobile device, a first provisioning request to a server computer to provision a first payment credential associated with a first account of a user to the mobile device, wherein the first provisioning request includes a first verification value associated with the first payment credential and excludes the first payment credential;
based on a risk level associated with the first provisioning request being within a predetermined risk threshold range:
receiving, by the mobile device from the server computer, a first set of provisioning scripts and a first token in an inactive state;
executing, by the mobile device, the first set of provisioning scripts;
storing, by the mobile device, the first token and a protection flag associated with the first token in a memory of the mobile device based on executing the first set of provisioning scripts, the protection flag representing the inactive state of the first token;
based on a successful performance of an authentication process for the first provisioning request with the user, receiving, by the mobile device from the server computer, an activation script that, when executed on the mobile device, modifies a status of the first token from the inactive state to an active state;
executing, by the mobile device, the activation script;
disabling, by the mobile device, the protection flag associated with the first token based on executing the activation script;
storing, by the mobile device, the first token in the active state based on disabling the protection flag thereby configuring a digital wallet application stored on the mobile device with the first token;
transmitting, from the mobile device, a second provisioning request to the server computer to provision a second payment credential associated with a second account of the user to the mobile device, wherein the second provisioning request includes a second verification value associated with the second payment credential and excludes the second payment credential;
based on the risk level associated with the second provisioning request being below the predetermined risk threshold range:
receiving, by the mobile device from the server computer, a second set of provisioning scripts and a second token in the active state without performing an authentication process for the second provisioning request with the user;
executing, by the mobile device, the second set of provisioning scripts;
storing, by the mobile device, the second token in the active state based on executing the second set of provisioning scripts and without requiring the authentication process with the user, thereby configuring the digital wallet application stored on the mobile device with the second token.
|