US 11,451,525 B2 · Network configuration and management

Abstract

An Internet-connected device, such as a car, refrigerator, or even a laptop can use a second device, such as a cell phone, to support cryptographic operations and communication with token service providers or other processing services requiring pre-provisioned capabilities that may include cryptographic secrets. By removing the need to store personally sensitive data in “Internet of Things” (IoT) devices, a user's personal information and other sensitive financial information may be contained to a relatively small number of devices. This may help prevent theft of goods or services by IoT devices that are not always under the close control of the user.

Claims20

Dependent claims

A method of supporting secure communication between an origin device lacking a token service capability and a server by using an enabler device with a token service support, the method comprising:

receiving, by the origin device, message content corresponding to a communication with the server;
identifying, via a communication process at the origin device, the enabler device having the token service support, wherein the origin device is void of a storage unit for storing data needed for the token service support;
sending, by the origin device, the message content to the enabler device;
receiving, by the enabler device, a token generated at the token service provider;
generating, by the enabler device, a cryptogram corresponding to the token, the message content, or a combination thereof;
encrypting the token and the cryptogram by the enabler device;
sending, by the enabler device, the encrypted token and the cryptogram to the origin device;
sending the encrypted token and cryptogram from the origin device to the server;
and
receiving, by the origin device, an acknowledgement that the token and cryptogram have been successfully processed at the server.

7 more elements

A method of supporting secure communication between an origin device lacking a trusted zone and a server by using an enabler device with trusted zone support, the method comprising:

receiving, by the origin device, message content corresponding to a communication with the server;
identifying, via a communication process at the origin device, the enabler device having the trusted zone, wherein the origin device is void of a storage unit for storing data needed for the trusted zone and the trusted zone support;
sending, by the origin device, the message content and a server certificate to the enabler device, wherein the enabler device is configured to verify the server certificate;
receiving a public key from the server certificate;
encrypting the message content by the enabler device using a secret associated with the trusted zone;
sending the encrypted message content from the enabler device to the processing service;
receiving, by the enabler device, a response message from the processing service;
decrypting the response message by the enabler device using the secret;
encrypting the response message with the public key by the enabler device;
sending the encrypted response message to the origin device from the enabler device;
sending the encrypted response message from the origin device to the server;
and
receiving an acknowledgement that the encrypted response message has been successfully processed at the server.

10 more elements

A system of supporting secure communication between an origin device lacking a token service capability and a server by using an enabler device with a token service support, the system comprising:

the origin device is void of a storage unit for storing data needed for the token service support;
the enabler device having the token service support;
wherein the origin device is configured to receive a message content corresponding to a communication process with the server;
wherein the origin device is configured to send the message content to the enabler device;
wherein the enabler device is configured to receive a token generated at a token service provider;
wherein the enabler device is configured to generate a cryptogram corresponding to the token, the message content, or a combination thereof;
wherein the enabler device is configured to encrypt the token and the cryptogram;
wherein the enabler device is configured to send the encrypted token and the cryptogram to the origin device;
wherein the origin device is configured to send the encrypted token and cryptogram to the server;
and
wherein the origin device is configured to receive an acknowledgement that the token and cryptogram have been successfully processed at the server.

8 more elements

Dependencies are inferred from the claim text.

Network configuration and management

Life of this patent

Network configuration and management

Life of this patent

Abstract

Claims20