# US 12,008,560 B2 · On-boarding server for authorizing an entity to effect electronic payments

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,008,560 B2
- Document ID: US12008560B2
- Status: Granted
- Kind: B2
- Application number: 18/135,662
- Filed: 2023-04-17
- Published: 2023-08-10
- Granted: 2024-06-11
- Earliest claimed: 2014-05-26
- Assignees: The Toronto-Dominion Bank
- Applicants: The Toronto-Dominion Bank
- Inventors: Robert Hayhow; Jeffrey Aaron Ecker; Igor Elkhinovich; Keith Willard
- Web page: https://patentgrep.com/patent/US12008560B2

## CPC

- G06Q 20/3829: {involving key management}
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 20/401: {Transaction verification}
- G06Q 2220/00: Business processing using cryptography
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

An on-boarding server is configured to receive a data set and a manufacturer identifier from a communications device, validate an identity of an entity from the data set, and locate a first terminal cryptographic key associated with the manufacturer identifier in a terminal database. The on-boarding server is configured to confirm, using the located first terminal cryptographic key, that the manufacturer identifier received from the communications device was signed with a second terminal cryptographic key. The located first terminal cryptographic key and the second terminal cryptographic key are an asymmetric cryptographic key pair. The on-boarding server is configured to determine an acquirer server from the data set, and authorize the entity to effect electronic payments by providing the communications device with a merchant identifier and transmitting the merchant identifier to the acquirer server.

## Claims

### Claim 1

An on-boarding server comprising:
a memory storing processing instructions; and
a processor in communication with the memory, wherein the processing instructions when executed by the processor cause the processor to:
receive a data set and a manufacturer identifier from a communications device, and validate an identity of an entity from the data set;
locate a first terminal cryptographic key associated with the manufacturer identifier in a terminal database;
confirm, using the located first terminal cryptographic key, that the manufacturer identifier received from the communications device was signed with a second terminal cryptographic key, wherein the located first terminal cryptographic key and the second terminal cryptographic key are an asymmetric cryptographic key pair;
determine an acquirer server from the data set; and
authorize the entity to effect electronic payments by providing the communications device with a merchant identifier and transmitting the merchant identifier to the acquirer server.

### Claim 2 (depends on 1)

The on-boarding server according to claim 1, wherein the processing instructions cause the processor to authorize the entity by:
associating the merchant identifier with the manufacturer identifier in the terminal database;
receiving a terminal identifier request from the communications device, the terminal identifier request including the merchant identifier and the manufacturer identifier;
confirming that the merchant identifier included in the terminal identifier request is associated with the manufacturer identifier in the terminal database; and
transmitting a terminal identifier to the communications device.

### Claim 3 (depends on 2)

The on-boarding server according to claim 2, wherein the processing instructions further cause the processor to authorize the entity by:
associating the terminal identifier with the manufacturer identifier in the terminal database;
receiving a terminal activation request from the communications device, the terminal activation request including the terminal identifier and the manufacturer identifier;
validating the terminal activation request using the located first terminal cryptographic key; and
transmitting a cryptographic key set to the communications device.

### Claim 4 (depends on 3)

The on-boarding server according to claim 3, wherein the processing instructions cause the processor to validate the terminal activation request by:
locating the first terminal cryptographic key associated with the manufacturer identifier in the terminal database; and
confirming, using the located first terminal cryptographic key, that the terminal identifier included in the terminal activation request was signed with the second terminal cryptographic key.

### Claim 5 (depends on 3)

The on-boarding server according to claim 3, wherein the cryptographic key set is stored in a payload database in association with the terminal identifier, and the processing instructions cause the processor to transmit the cryptographic key set by:
locating the cryptographic key set associated with the terminal identifier in the payload database; and
after the validating the terminal activation request, establishing an encrypted tunnel with a terminal via the communications device, the encrypted tunnel being encrypted end-to-end between the on-boarding server and the terminal;
providing the terminal with the located cryptographic key set via the encrypted tunnel; and
providing the acquirer server with the merchant identifier and the terminal identifier.

### Claim 6 (depends on 5)

The on-boarding server according to claim 5, wherein the processing instructions cause the processor to establish an encrypted tunnel by:
generating an interim cryptographic key set;
encrypting the interim cryptographic key set with the located first terminal cryptographic key;
transmitting the encrypted interim cryptographic key set to the terminal via the communications device; and
establishing the encrypted tunnel with the terminal using the interim cryptographic key set.

### Claim 7

A method of authorizing an entity to receive electronic payment, comprising:
a computer server receiving a data set and a manufacturer identifier from a communications device, and validating an identity of the entity from the data set;
the computer server locating a first terminal cryptographic key associated with the manufacturer identifier in a terminal database;
the computer server confirming, using the located first terminal cryptographic key, that the manufacturer identifier received from the communications device was signed with a second terminal cryptographic key, wherein the located first terminal cryptographic key and the second terminal cryptographic key are an asymmetric cryptographic key pair;
the computer server determining an acquirer server from the data set; and
the computer server authorizing the entity to effect electronic payments by providing the communications device with a merchant identifier and transmitting the merchant identifier to the acquirer server.

### Claim 8 (depends on 7)

The method according to claim 7, wherein the authorizing the entity comprises:
the computer server associating the merchant identifier with the manufacturer identifier in the terminal database;
the computer server receiving a terminal identifier request from the communications device, the terminal identifier request including the merchant identifier and the manufacturer identifier;
the computer server confirming that the merchant identifier included in the terminal identifier request is associated with the manufacturer identifier in the terminal database; and
the computer server transmitting a terminal identifier to the communications device.

### Claim 9 (depends on 8)

The method according to claim 8, wherein the authorizing the entity further comprises:
the computer server associating the terminal identifier with the manufacturer identifier in the terminal database;
the computer server receiving a terminal activation request from the communications device, the terminal activation request including the terminal identifier and the manufacturer identifier;
the computer server validating the terminal activation request using the located first terminal cryptographic key; and
the computer server transmitting a cryptographic key set to the communications device.

### Claim 10 (depends on 9)

The method according to claim 9, wherein the validating the terminal activation request comprises:
the computer server locating the first terminal cryptographic key associated with the manufacturer identifier in the terminal database; and
the computer server confirming, using the located first terminal cryptographic key, that the terminal identifier included in the terminal activation request was signed with the second terminal cryptographic key.

### Claim 11 (depends on 9)

The method according to claim 9, wherein the cryptographic key set is stored in a payload database in association with the terminal identifier, and the transmitting the cryptographic key set comprises:
the computer server locating the cryptographic key set associated with the terminal identifier in the payload database; and
after the validating the terminal activation request, the computer server establishing an encrypted tunnel with a terminal via the communications device, the encrypted tunnel being encrypted end-to-end between the computer server and the terminal;
the computer server providing the terminal with the located cryptographic key set via the encrypted tunnel; and
the computer server providing the acquirer server with the merchant identifier and the terminal identifier.

### Claim 12 (depends on 11)

The method according to claim 11, wherein the establishing an encrypted tunnel comprises:
the computer server generating an interim cryptographic key set;
the computer server encrypting the interim cryptographic key set with the located first terminal cryptographic key;
the computer server transmitting the encrypted interim cryptographic key set to the terminal via the communications device; and
the computer server establishing the encrypted tunnel with the terminal using the interim cryptographic key set.

### Claim 13

A non-transient computer-readable medium storing a terminal database and further storing processing instructions, which when executed by a processing unit of a computer, cause the processing unit to:
receive a data set and a manufacturer identifier from a communications device, and validate an identity of an entity from the data set;
locate a first terminal cryptographic key associated with the manufacturer identifier in the terminal database;
confirm, using the located first terminal cryptographic key, that the manufacturer identifier received from the communications device was signed with a second terminal cryptographic key, wherein the located first terminal cryptographic key and the second terminal cryptographic key are an asymmetric cryptographic key pair;
determine an acquirer server from the data set; and
authorize the entity to effect electronic payments by providing the communications device with a merchant identifier and transmitting the merchant identifier to the acquirer server.

### Claim 14 (depends on 13)

The computer-readable medium according to claim 13, wherein the processing instructions cause the processing unit to authorize the entity by:
associating the merchant identifier with the manufacturer identifier in the terminal database;
receiving a terminal identifier request from the communications device, the terminal identifier request including the merchant identifier and the manufacturer identifier;
confirming that the merchant identifier included in the terminal identifier request is associated with the manufacturer identifier in the terminal database; and
transmitting a terminal identifier to the communications device.

### Claim 15 (depends on 14)

The computer-readable medium according to claim 14, wherein the processing instructions cause the processing unit to authorize the entity by:
associating the terminal identifier with the manufacturer identifier in the terminal database;
receiving a terminal activation request from the communications device, the terminal activation request including the terminal identifier and the manufacturer identifier;
validating the terminal activation request using the located first terminal cryptographic key; and
transmitting a cryptographic key set to the communications device.

### Claim 16 (depends on 15)

The computer-readable medium according to claim 15, wherein the processing instructions cause the processing unit to validate the terminal activation request by:
locating the first terminal cryptographic key associated with the manufacturer identifier in the terminal database; and
confirming, using the located first terminal cryptographic key, that the terminal identifier included in the terminal activation request was signed with the second terminal cryptographic key.

### Claim 17 (depends on 15)

The computer-readable medium according to claim 15, wherein the cryptographic key set is stored in a payload database in association with the terminal identifier, and the processing instructions cause the processing unit to transmit the cryptographic key set by:
locating the cryptographic key set associated with the terminal identifier in the payload database; and
after the validating the terminal activation request, establishing an encrypted tunnel with a terminal via the communications device, the encrypted tunnel being encrypted end-to-end between the computer and the terminal;
providing the terminal with the located cryptographic key set via the encrypted tunnel; and
providing the acquirer server with the merchant identifier and the terminal identifier.

### Claim 18 (depends on 17)

The computer-readable medium according to claim 17, wherein the processing instructions cause the processing unit to establish an encrypted tunnel by:
generating an interim cryptographic key set;
encrypting the interim cryptographic key set with the located first terminal cryptographic key;
transmitting the encrypted interim cryptographic key set to the terminal via the communications device; and
establishing the encrypted tunnel with the terminal using the interim cryptographic key set.