Back to results
US 10,855,663 B2Granted
Dynamic offline encryption
AssigneeVisa International Service Association
InventorsRhidian John, Bartlomiej Piotr Prokop, Michael Palmer
Life of this patent
Estimating the term…
Abstract
A method for encrypting data when a device is offline is disclosed. In the method, a determination is made as to whether a successful connection with a remote server computer can or cannot be made. If a connection cannot be made, then data can be encrypted with an ephemeral public key. Later, then a connection is available, the encrypted data can be transmitted to the remote server computer for processing.
Claims20
A method comprising:
- receiving, by a processing computer, an authorization request message comprising encrypted access data and a key identifier from an access device via a communication network, wherein prior to receiving the authorization request message the access device determines that a successful connection with the processing computer cannot be made, encrypts access data with an ephemeral public key to form the encrypted access data, stores the encrypted access data, determines that a successful connection to the processing computer can be made, and transmits the encrypted access data and the key identifier to the processing computer in the authorization request message;
- transmitting, by the processing computer to a key management server, a decryption request message comprising the encrypted access data and the key identifier;
- receiving, by the processing computer from the key management server, decrypted access data;
- generating, by the processing computer, a modified authorization request message comprising the decrypted access data;
- and
- transmitting, by the processing computer, the modified authorization request message to an authorizing entity computer, wherein the authorizing entity computer determines whether or not an interaction associated with the decrypted access data is authorized.
3 more elements
A processing computer comprising:
- a processor;
- and
- a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising:
- receiving an authorization request message comprising encrypted access data and a key identifier from an access device via a communication network, wherein prior to receiving the authorization request message the access device determines that a successful connection with the processing computer cannot be made, encrypts access data with an ephemeral public key to form the encrypted access data, stores the encrypted access data, determines that a successful connection to the processing computer can be made, and transmits the encrypted access data and the key identifier to the processing computer in the authorization request message;
- transmitting, to a key management server, a decryption request message comprising the encrypted access data and the key identifier;
- receiving, from the key management server, decrypted access data;
- generating a modified authorization request message comprising the decrypted access data;
- and
- transmitting the modified authorization request message to an authorizing entity computer, wherein the authorizing entity computer determines whether or not an interaction associated with the decrypted access data is authorized.
6 more elements
Dependencies are inferred from the claim text.