Back to results
US 11,641,348 B2Granted
Dynamic offline encryption
AssigneeVisa International Service Association
InventorsRhidian John, Bartlomiej Piotr Prokop, Michael Palmer
Life of this patent
Estimating the term…
Abstract
A method for encrypting data when a device is offline is disclosed. In the method, a determination is made as to whether a successful connection with a remote server computer can or cannot be made. If a connection cannot be made, then data can be encrypted with an ephemeral public key. Later, then a connection is available, the encrypted data can be transmitted to the remote server computer for processing.
Claims20
A method comprising:
- receiving, by an access device, a first ephemeral public key corresponding to a first ephemeral private key, the first ephemeral public and private keys being previously generated by a key management server;
- receiving, by the access device, access data associated with a user;
- determining, by the access device, whether a successful connection with a remotely located processing computer can be made;
- when the access device determines that a successful connection cannot be made, then encrypting the access data with the first ephemeral public key to form encrypted access data;
- storing, in a memory device associated with the access device, the encrypted access data;
- determining, by the access device, that a successful connection to the remotely located processing computer can be made;
- transmitting, by the access device, the encrypted access data to the remotely located processing computer in an authorization request message, wherein the remotely located processing computer communicates with the key management server to decrypt the access data;
- receiving, by the access device, an authorization response message from the remotely located processing computer;
- and
- receiving, by the access device, a second ephemeral public key corresponding to a second ephemeral private key, the second ephemeral public and private keys being previously generated by the key management server.
7 more elements
An access device comprising:
- a processor;
- a memory device;
- and
- a computer-readable medium coupled to the processor, the computer-readable medium comprising code executable by the processor for implementing a method comprising:
- receiving a first ephemeral public key corresponding to a first ephemeral private key, the first ephemeral public and private keys being previously generated by a key management server;
- receiving access data associated with a user;
- determining whether a successful connection with a remotely located processing computer can be made;
- when the access device determines that a successful connection cannot be made, then encrypting the access data with the first ephemeral public key to form encrypted access data;
- storing, in the memory device associated with the access device, the encrypted access data;
- determining that a successful connection to the remotely located processing computer can be made;
- transmitting the encrypted access data to the remotely located processing computer in an authorization request message, wherein the remotely located processing computer communicates with the key management server to decrypt the access data;
- receiving an authorization response message from the remotely located processing computer;
- and
- receiving a second ephemeral public key corresponding to a second ephemeral private key, the second ephemeral public and private keys being previously generated by the key management server.
11 more elements
A method comprising:
- receiving, by a key management server, a first key request message comprising a request for a first ephemeral public key corresponding to a first ephemeral private key;
- transmitting, by the key management server, the first ephemeral public key corresponding to the first ephemeral private key, the first ephemeral public and private keys being previously generated by the key management server, to an access device;
- receiving, by the key management server, a decryption request message to decrypt encrypted access data using the first ephemeral private key corresponding to the first ephemeral public key, from a remotely located processing computer;
- decrypting, by the key management server, the encrypted access data;
- transmitting, by the key management server, decrypted access data to the remotely located processing computer;
- receiving, by the key management server, a second key request message comprising a request for a second ephemeral public key corresponding to a second ephemeral private key;
- and
- transmitting, by the key management server, the second ephemeral public key corresponding to the second ephemeral private key, the second ephemeral public and private keys being previously generated by the key management server, to the access device.
5 more elements
Dependencies are inferred from the claim text.