中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

15 records (took 0.015 seconds)

    System and method for end-to-end key management
    1.
    发明授权
    System and method for end-to-end key management 有权

    公开(公告)号：US10956904B2

    公开(公告)日：2021-03-23

    申请号：US15218842

    申请日：2016-07-25

    Applicant: MasterCard International Incorporated

    Inventor： Mehdi Collinge ,  Mohamed Abou El Enin ,  Andrea Bacioccola ,  Michael Ward

    IPC: G06Q20/38 ,  G06F21/53 ,  G06Q20/32

    Abstract: Provided are a system and method for managing encryption keys used by a payment application on a mobile device. The method includes executing a mobile payment application in a user domain of the mobile device, where the user domain is an operating environment in which applications are executed and accessed by a user, importing a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, where the system domain is a more secure operating environment controlled by an operating system, encrypting payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain, and transmitting the encrypted payment information to a merchant.

    TRUSTED COMMUNICATION IN TRANSACTIONS
    4.
    发明申请
    TRUSTED COMMUNICATION IN TRANSACTIONS 审中-公开

    公开(公告)号：US20200167778A1

    公开(公告)日：2020-05-28

    申请号：US16670389

    申请日：2019-10-31

    Applicant: Mastercard International Incorporated

    Inventor： David Anthony Roberts ,  Duncan Garrett ,  John Beric ,  Michael Ward

    IPC: G06Q20/40 ,  H04L9/08 ,  H04L9/06 ,  H04L9/32

    Abstract: Trusted communication between a first computing device and a second computing device in a transaction process is established as follows. A communication channel is established between the first computing device and the second computing device. The first computing device provides a secure communication to the second computing device, this secure communication comprising cryptographic material encrypted by a first cryptographic method. The second computing device decrypts the secure communication using a key already available to it. The first and the second computing device then communicate where trusted communication is required by a second cryptographic method using the cryptographic material. A suitable first computing device and second computing device are also described.

    UNPREDICTABLE NUMBER GENERATION
    6.
    发明申请
    UNPREDICTABLE NUMBER GENERATION 有权
    不可预测的数字生成

    公开(公告)号：US20150010149A1

    公开(公告)日：2015-01-08

    申请号：US14321023

    申请日：2014-07-01

    Applicant: MasterCard International Incorporated

    Inventor： David A. Roberts ,  Michael Ward

    IPC: H04L9/08

    CPC classification number: G06Q20/401 ,  G06F7/588 ,  G06F21/72 ,  G06Q20/1085 ,  H04L9/0618 ,  H04L9/0643 ,  H04L9/0869 ,  H04L2209/56

    Abstract: A method of generating an unpredictable number in a computing device is provided. The method comprises the computing device performing the following programmed steps: obtaining a plurality of data elements; performing a first one way function on an internal value P and the plurality of data elements to update the value P; and performing a second one way function on the value P to obtain the unpredictable number. A computing device adapted to perform this method is also described.

    Abstract translation: 提供了一种在计算设备中产生不可预测的数字的方法。 该方法包括计算设备执行以下编程步骤：获得多个数据元素; 对内部值P和多个数据元素执行第一单向函数以更新值P; 并且对值P执行第二单向函数以获得不可预测的数字。 还描述了适于执行该方法的计算设备。

    Secure channel establishment between payment device and terminal device
    7.
    发明授权
    Secure channel establishment between payment device and terminal device 有权

    公开(公告)号：US10461927B2

    公开(公告)日：2019-10-29

    申请号：US15642762

    申请日：2017-07-06

    Applicant: MasterCard International Incorporated

    Inventor： Michael Ward ,  John Beric ,  Duncan Garrett ,  David Anthony Roberts

    IPC: H04L9/08 ,  H04L9/30 ,  H04L9/14 ,  H04L9/32

    Abstract: A method of establishing a secure channel for communication between a first computing device and a second computing device is described. The method uses an elliptic curve Diffie-Hellman protocol, wherein G is an elliptic curve generator point and the first computing device has a unique private key dc with a public key Qc=dc G certified by a party trusted by the second computing device. The first computing device generates (520) a blinding factor r and sends (540) a blinded public key R=r·Qc to the second computing device. The second computing device generates (510) an ephemeral private key dt and a corresponding ephemeral public key Qt=dt G and sends Qt to the first computing device. The first computing device generates (530) Kc=KDF(r dc·Qt) and the second computing device generates (550) Kt=KDF(dt·R), where KDF is a key derivation function used in both generation operations, to establish a secure channel between the first computing device and the second computing device. G is a point in the elliptic curve group E, wherein E is a group of prime order but E* is the quadratic twist of E and is a group of order m=z·m′ where m′ is prime and z is an integer, wherein r·dc is chosen such that z is a factor of r·dc. Suitable apparatus for performing the method is also described.

    SECURE CHANNEL ESTABLISHMENT
    8.
    发明申请
    SECURE CHANNEL ESTABLISHMENT 审中-公开

    公开(公告)号：US20180026784A1

    公开(公告)日：2018-01-25

    申请号：US15642762

    申请日：2017-07-06

    Applicant: MasterCard International Incorporated

    Inventor： Michael Ward ,  John Beric ,  Duncan Garrett ,  David Anthony Roberts

    IPC: H04L9/08 ,  H04L9/30 ,  H04L9/14

    Abstract: A method of establishing a secure channel for communication between a first computing device and a second computing device is described. The method uses an elliptic curve Diffie-Hellman protocol, wherein G is an elliptic curve generator point and the first computing device has a unique private key dc with a public key Qc=dc G certified by a party trusted by the second computing device. The first computing device generates (520) a blinding factor r and sends (540) a blinded public key R=r·Qc to the second computing device. The second computing device generates (510) an ephemeral private key dt and a corresponding ephemeral public key Qt=dt G and sends Qt to the first computing device. The first computing device generates (530) Kc=KDF (r dc·Qt) and the second computing device generates (550) Kt=KDF (dt·R), where KDF is a key derivation function used in both generation operations, to establish a secure channel between the first computing device and the second computing device. G is a point in the elliptic curve group E, wherein E is a group of prime order but E* is the quadratic twist of E and is a group of order m=z·m′ where m′ is prime and z is an integer, wherein r·dc is chosen such that z is a factor of r·dc. Suitable apparatus for performing the method is also described.

    Method and system for trusted notifications
    9.
    发明授权
    Method and system for trusted notifications 有权

    公开(公告)号：US11855969B2

    公开(公告)日：2023-12-26

    申请号：US17494077

    申请日：2021-10-05

    Applicant: MASTERCARD INTERNATIONAL INCORPORATED

    Inventor： Duncan Garrett ,  John Beric ,  Michael Ward ,  David Anthony Roberts

    IPC: H04L9/40 ,  G06Q20/32 ,  G06Q20/42 ,  G06Q20/40

    CPC classification number: H04L63/0428 ,  G06Q20/3255 ,  G06Q20/3274 ,  G06Q20/3276 ,  G06Q20/3278 ,  G06Q20/40 ,  G06Q20/42

    Abstract: A method for trusted notifications comprises: receiving, at a first host having at least one trusted server, a request message from a sender computing device, the request message comprising a request identifier and instructions to: update, at a second host, a recipient account associated with a recipient computing device, and to make a corresponding update at the first host to a sender account associated with the sender computing device. The method further comprises authorizing, at the first host, the request message; updating the sender account; generating a secure message at the at least one trusted server, the secure message comprising the request identifier and an indication from the at least one trusted server that the update completed; and sending the secure message from the first host to the sender computing device. The secure message can be received at the sender computer device and conveyed to the recipient computing device.

Patent Agency Ranking