-
公开(公告)号:US11842340B2
公开(公告)日:2023-12-12
申请号:US17592074
申请日:2022-02-03
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Mehdi Collinge , Patrik Smets
CPC classification number: G06Q20/3829 , G06Q20/00 , G06Q20/382 , G06Q20/3823 , H04L63/083 , H04L63/062 , H04L2463/061
Abstract: A method for generating cryptograms in a webservice environment includes: receiving, in a first environment of a computing system, a credential request transmitted by an external computing device using a secure communication protocol, the credential request including a transaction identifier and account identifier; transmitting, by the first environment, a data request to a second environment of the computing system, the data request including the account identifier; receiving, by the first environment, an account profile and session key from the second environment; transmitting, by the first environment, a cryptogram request to a third environment of the computing system, the cryptogram request including the account profile and session key; receiving, by the first environment, a cryptogram from the third environment generated using the account profile and session key; and transmitting, by the first environment, the cryptogram and transaction identifier to the external computing device via the secure communication protocol.
-
公开(公告)号:US20230370451A1
公开(公告)日:2023-11-16
申请号:US17584671
申请日:2020-06-30
Applicant: Mastercard International Incorporated
Inventor: Mehdi Collinge , Omar Laazimani
IPC: H04L9/40
CPC classification number: H04L63/0876 , H04L63/12 , H04L2463/081
Abstract: A method of maintaining a secure relationship between a client device and a server is described. The client device receives a first challenge from the server and determines and provides a first response to the first challenge. A cookie is established associated with the secure relationship. This cookie is shared between the client and the server. To establish the secure relationship in a later interaction, the client provides the cookie to the server. The server then provides both the first challenge and a second challenge, to which the client determines a first response and a second response. The client then provides a composite response from which the first response and the second response are derivable by the server, allowing the server to be assured that the secure relationship exists. Each challenge uses a challenge function adapted to provide a fingerprint of the client device. Methods at both client and server, and suitably configured client and server, are also described.
-
公开(公告)号:US20230164122A1
公开(公告)日:2023-05-25
申请号:US17802515
申请日:2021-02-17
Applicant: Mastercard International Incorporated
Inventor: Mehdi Collinge , Omar Laazimani , Alan Johnson
CPC classification number: H04L63/0428 , H04L9/0819
Abstract: Communication of information relating to an event is described, where the information is contained in a data field. Methods of communicating and obtaining the information are described, together with suitable apparatus for performing these methods. One or more elements of information relating to the event are obtained and used to determine a cryptographic record of the event. A first set of places in the data field are filled by a combination of some or all of each of the elements together with time information associated with the event. The cryptographic record is used to fill a second set of places in the data record. On reception of a message including the data field, the data field can be resolved into the first set of places and the second set of places. The time information associated with the event can then be determined and used to establish the whole or partial elements of information that were combined with the time information to fill the first set of places. Whole elements of information are then established from any partial elements. When these elements are all established, they can be used to calculate cryptographic record data which can be matched against the cryptographic record from the second set of places in the data field to determine that the elements of information are correct.
-
34.
公开(公告)号:US11361313B2
公开(公告)日:2022-06-14
申请号:US15919621
申请日:2018-03-13
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Mehdi Collinge , Cristian Radu
IPC: G06Q20/38 , G06Q20/40 , H04L9/40 , H04W12/041
Abstract: A method for building an advanced storage key includes: storing, in a mobile device, at least (i) device information associated with the mobile device, (ii) program code associated with a first program including an instance identifier, and (iii) program code associated with a second program including a first key; generating a device fingerprint associated with the mobile device based on the device information via execution of the code associated with the first program; generating a random value via execution of the code associated with the first program; building a diversifier value based on the generated device fingerprint, the generated random value, and the instance identifier included in the code associated with the first program; and decrypting the built diversifier value using the first key stored in the code associated with the second program via execution of the code associated with the second program to obtain a storage key.
-
公开(公告)号:US20200051048A1
公开(公告)日:2020-02-13
申请号:US16659279
申请日:2019-10-21
Applicant: Mastercard International Incorporated
Inventor: Sebastien Pochic , Barry Alan Maidment , Mehdi Collinge , Fikret Ates
IPC: G06Q20/10 , G06Q20/32 , G06K19/07 , G06Q20/08 , G07F7/12 , G07F7/10 , G07F7/08 , G06Q30/06 , G06Q20/40 , G06Q20/34
Abstract: A transaction processing system for sending user information data to a personal device, and an associated method are provided. The system comprises: a personal device, such as a balance display card; an interface device, such as a card reader for transmitting data to and from the card; a communications network connecting to the interface device; an issuer processor connected to the communications network; and a trusted network processor (TNP) processor connected to the communications network, interposed between the interface device and the issuer processor. The TNP processor is arranged to receive a transaction request message from a card user and to transmit a response message back to the personal device, the response message typically being a transaction authorization together with information for display on the card. The TNP processor is arranged to identify, dependent on properties of the transaction request message, whether the associated response message will require data to be sent to the user information device, and if so identified, to: route the transaction request message to the issuer processor using a standard message; receive the required data from the issuer processor using another standard message; match the received required data to the original request; generate an appropriate response message and script containing the required data; and transmit the response message back to the personal device thereby making the required information known to the user.
-
公开(公告)号:US10432620B2
公开(公告)日:2019-10-01
申请号:US14614174
申请日:2015-02-04
Applicant: MasterCard International Incorporated
Inventor: Patrik Smets , Mehdi Collinge
Abstract: Instead of requiring key exchange between a trusted biometric application in a TEE and an external application outside of the TEE that provides access to a secured function, the trusted application is preconfigured with security data such as (in a first implementation) authentication credentials (e.g. a PIN) or (in a second implementation) a cryptographic key. This security data is then used to authenticate a biometric validation obtained by the trusted application to the external application.
-
公开(公告)号:US20190188685A1
公开(公告)日:2019-06-20
申请号:US15846470
申请日:2017-12-19
Applicant: MasterCard International Incorporated
Inventor: John Gaitanos , Alan Johnson , Mehdi Collinge
CPC classification number: G06Q20/341 , G06Q20/12 , G06Q20/206 , G06Q20/36 , G06Q20/4012 , G06Q20/4014
Abstract: A transaction request is received. The transaction request is for a transaction to charge a payment account managed by a payment entity. It is detected that the transaction request exceeds a transaction limit that is applicable to the payment account. A message is transmitted to the payment entity to indicate that the transaction request exceeds the transaction limit.
-
38.
公开(公告)号:US20180204212A1
公开(公告)日:2018-07-19
申请号:US15919621
申请日:2018-03-13
Applicant: MASTERCARD INTERNATIONAL INCORPORATED
Inventor: Mehdi Collinge , Cristian Radu
CPC classification number: G06Q20/3821 , G06Q20/3829 , G06Q20/4012 , H04L63/0428 , H04L63/06 , H04L63/062 , H04L63/083 , H04L2463/102 , H04W12/04
Abstract: A method for building an advanced storage key includes: storing, in a mobile device, at least (i) device information associated with the mobile device, (ii) program code associated with a first program including an instance identifier, and (iii) program code associated with a second program including a first key; generating a device fingerprint associated with the mobile device based on the device information via execution of the code associated with the first program; generating a random value via execution of the code associated with the first program; building a diversifier value based on the generated device fingerprint, the generated random value, and the instance identifier included in the code associated with the first program; and decrypting the built diversifier value using the first key stored in the code associated with the second program via execution of the code associated with the second program to obtain a storage key.
-
公开(公告)号:US09792607B2
公开(公告)日:2017-10-17
申请号:US14277261
申请日:2014-05-14
Applicant: MasterCard International Incorporated
Inventor: Ian Maddocks , Simon Phillips , David A. Roberts , Mehdi Collinge , Sandra Jansen , Patrick Mestré
CPC classification number: G06Q20/4012 , G06Q20/322 , H04W12/04 , H04W12/06
Abstract: The present invention relates to a method and system for synchronizing a personal identification number (PIN) value stored in a mobile computing device, with a PIN value stored on a remote server. The remote server receives a request from the mobile computing device to record a PIN value, the request comprising the PIN value. The PIN value is recovered from the received request and stored at the remote server. An instruction set arranged to record the PIN value in a secure hardware element comprised within the mobile computing device is generated and transmitted to the mobile computing device. The instruction set executes on the mobile computing device in order to record the PIN value on the secure hardware element.
-
公开(公告)号:US20170103396A1
公开(公告)日:2017-04-13
申请号:US14881249
申请日:2015-10-13
Applicant: MasterCard International Incorporated
Inventor: Patrik Smets , Jonathan James Main , Mehdi Collinge
CPC classification number: G06Q20/4014 , G06Q20/322 , G06Q20/3227 , G06Q20/367 , G06Q20/382 , G06Q20/40 , G06Q2220/00
Abstract: Systems, methods and apparatus for operating a device to complete a transaction are provided which include receiving a request to initiate a transaction with a merchant, transmitting a payment transaction initiation message to a merchant server associated with the merchant, receiving a request message from the merchant server for remote payment data, the request message including information identifying whether the merchant server supports a selected one of a first data format and an alternative data format, and providing the remote payment data to the merchant server in the selected data format for use by the merchant server to initiate authorization processing of the transaction.
-
-
-
-
-
-
-
-
-