Method and system for the transmission of authenticated authorization requests

    公开(公告)号:US10572873B2

    公开(公告)日:2020-02-25

    申请号:US13769059

    申请日:2013-02-15

    Abstract: A method for verifying the source of an authorization request includes: storing an integrated circuit card (ICC) master key; receiving an authorization request for a transaction, wherein the request includes an ICC dynamic number, and the ICC dynamic number is extracted from signed data, based on the ICC master key, generated by a payment card during combined data authentication (CDA); verifying the authenticity of the ICC dynamic number using the stored ICC master key; and transmitting the authorization request to a third party. A method for transmitting an authentic authorization request includes: storing payment card data, the data including an ICC master key associated with the payment card; authenticating the card data using CDA to generate signed data; extracting, from the signed data, an ICC dynamic number based on the ICC master key; and transmitting an authorization request for a transaction, the request including the extracted ICC dynamic number.

    CRYPTOGRAPHIC SYSTEM MANAGEMENT
    3.
    发明申请

    公开(公告)号:US20180183579A1

    公开(公告)日:2018-06-28

    申请号:US15822669

    申请日:2017-11-27

    Abstract: A method of refreshing key material is described for use in a trusted execution environment logically protected from a regular execution environment. The trusted execution environment further comprises a key identifier. New key material is received at the trusted execution environment to replace existing key material. The key identifier is set to a new value to indicate that new key material is present. The new value of the key identifier is provided directly or indirectly to other parties in association with cryptographic outputs provided by the trusted execution environment using the refreshed key material. This approach is described in connection with an application executing securely on a mobile device.

    Method and system for computing code management platform
    6.
    发明授权
    Method and system for computing code management platform 有权
    计算代码管理平台的方法和系统

    公开(公告)号:US09218479B2

    公开(公告)日:2015-12-22

    申请号:US14463054

    申请日:2014-08-19

    CPC classification number: G06F21/44 H04L63/08 H04L63/0876 H04L63/18

    Abstract: A method for authenticating a computing device includes: storing an account profile, the profile including data related to a service account including an alphanumeric code; generating a session identifier and a seed value; computing a first hash using the session identifier; computing a second hash using the session identifier and the alphanumeric code; computing a third hash using the second hash and a utilized seed value; transmitting the session identifier to a computing device via a first communication protocol; transmitting the session identifier and first hash to a remote notification service for transmission to the computing device via a second communication protocol; receiving a fourth hash and the session identifier from the computing device via the first communication protocol; validating the fourth hash based on a comparison of the fourth hash and the computed third hash; and transmitting a validation result to the computing device based on the validation step.

    Abstract translation: 用于认证计算设备的方法包括:存储帐户简档,所述简档包括与包括字母数字代码的服务帐户相关的数据; 生成会话标识符和种子值; 使用会话标识符计算第一散列; 使用会话标识符和字母数字代码来计算第二散列; 使用所述第二散列和所使用的种子值来计算第三散列; 经由第一通信协议将会话标识符发送到计算设备; 将所述会话标识符和第一散列发送到远程通知服务,以经由第二通信协议传输到所述计算设备; 经由第一通信协议从计算设备接收第四散列和会话标识符; 基于第四散列和所计算的第三散列的比较来验证第四散列; 以及基于所述验证​​步骤将验证结果发送到所述计算设备。

    SYSTEMS AND METHODS FOR PROCESSING MOBILE PAYMENTS BY PROVISONING CREDENTIALS TO MOBILE DEVICES WITHOUT SECURE ELEMENTS
    7.
    发明申请
    SYSTEMS AND METHODS FOR PROCESSING MOBILE PAYMENTS BY PROVISONING CREDENTIALS TO MOBILE DEVICES WITHOUT SECURE ELEMENTS 审中-公开
    通过向没有安全元素的移动设备提供证明来处理移动支付的系统和方法

    公开(公告)号:US20130262317A1

    公开(公告)日:2013-10-03

    申请号:US13827042

    申请日:2013-03-14

    Abstract: A method for generating and provisioning payment credentials to a mobile device lacking a secure element includes: generating a card profile associated with a payment account, wherein the card profile includes at least payment credentials corresponding to the associated payment account and a profile identifier; provisioning, to a mobile device lacking a secure element, the generated card profile; receiving, from the mobile device, a key request, wherein the key request includes at least a mobile identification number (PIN) and the profile identifier; using the mobile PIN; generating a single use key, wherein the single use key includes at least the profile identifier, an application transaction counter, and a generating key for use in generating a payment cryptogram valid for a single financial transaction; and transmitting the generated single use key to the mobile device.

    Abstract translation: 一种用于向缺少安全元件的移动设备生成和提供支付凭证的方法包括:生成与支付账户相关联的卡配置文件,其中所述卡配置文件至少包括对应于相关支付帐户的支付凭证和配置文件标识符; 提供给缺少安全元件的移动设备,生成的卡简档; 从所述移动设备接收密钥请求,其中所述密钥请求至少包括移动标识号(PIN)和所述简档标识符; 使用移动PIN; 生成单个使用密钥,其中所述单一使用密钥至少包括所述简档标识符,应用交易计数器和用于生成对单个金融交易有效的支付密码的生成密钥; 以及将生成的单次使用密钥发送到移动设备。

    Cryptographic system management
    8.
    发明授权

    公开(公告)号:US10778416B2

    公开(公告)日:2020-09-15

    申请号:US15822669

    申请日:2017-11-27

    Abstract: A method of refreshing key material is described for use in a trusted execution environment logically protected from a regular execution environment. The trusted execution environment further comprises a key identifier. New key material is received at the trusted execution environment to replace existing key material. The key identifier is set to a new value to indicate that new key material is present. The new value of the key identifier is provided directly or indirectly to other parties in association with cryptographic outputs provided by the trusted execution environment using the refreshed key material. This approach is described in connection with an application executing securely on a mobile device.

Patent Agency Ranking