# US 12,015,696 B2 · Techniques for secure channel communications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,015,696 B2
- Document ID: US12015696B2
- Status: Granted
- Kind: B2
- Application number: 17/688,719
- Filed: 2022-03-07
- Published: 2022-06-16
- Granted: 2024-06-18
- Earliest claimed: 2018-03-12
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Yuexi Chen; Marc Kekicheff; Philippe Martin
- Web page: https://patentgrep.com/patent/US12015696B2

## CPC

- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]}
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/3823: {combining multiple encryption tools for a transaction}
- H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols}
- H04L 9/3247: {involving digital signatures}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0471: {applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 67/303: Terminal profiles
- H04L 67/565: Conversion or adaptation of application format or content (adding application control or application functional data H04L67/561)
- H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A method for conducting a transaction is disclosed. A processor in a thin client may receive transaction data from a portable device of a first portable device type. The processor may determine that the portable device is the first portable device type. The processor may apply an encryption protocol associated with a second portable device type to the transaction data to create encrypted data. The processor may transmit the encrypted data to a remote computer, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter process the transaction data to conduct the transaction.

## Claims

### Claim 1

A computer-implemented method for conducting a transaction, comprising:
establishing, by a computing device, a secure channel between a thin client and the computing device;
receiving, by the computing device, encrypted transaction data from the thin client configured to facilitate data exchange between the computing device and a portable device of a first portable device type;
decrypting, by the computing device, the encrypted transaction data to generate decrypted transaction data using an encryption protocol associated with a second portable device type; and
processing, by the computing device, the decrypted transaction data to conduct the transaction.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein establishing the secure channel comprises:
receiving signed data comprising an ephemeral public key and a first numeric value generated by the thin client, the ephemeral public key and the first numeric value being digitally signed with an authentication private key associated with the thin client.

### Claim 3 (depends on 2)

The computer-implemented method of claim 2, further comprising:
obtaining, by the computing device, an authentication public key associated with the thin client; and
verifying, by the computing device, the signed data using the authentication public key.

### Claim 4 (depends on 2)

The computer-implemented method of claim 2, wherein the signed data is first signed data, and wherein establishing the secure channel further comprises:
transmitting, to the thin client, second signed data comprising the first numeric value and a second numeric value generated by the computing device, at least the first numeric value and the second numeric value being digitally signed by the computing device with a second authentication private key that is associated with the computing device.

### Claim 5 (depends on 4)

The computer-implemented method of claim 4, wherein transmitting the second signed data to the thin client causes the thin client to verify the second signed data using an authentication public key associated with the computing device and stored in memory at the thin client.

### Claim 6 (depends on 1)

The computer-implemented method of claim 1, wherein the computing device is programmed to perform point-of-sale transaction processing and to communicate in a first communications protocol and wherein the portable device is configured to communicate in a second communications protocol different from the first communications protocol.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, further comprising:
receiving, from the thin client over the secure channel, subsequent encrypted data;
decrypting the subsequent encrypted data utilizing the encryption protocol; and
verifying the subsequent encrypted data is unaltered and was transmitted by the thin client.

### Claim 8 (depends on 1)

The computer-implemented method of claim 1, wherein establishing the secure channel further comprises generating a shared secret based on an ephemeral public key received from the thin client.

### Claim 9 (depends on 8)

The computer-implemented method of claim 8, wherein the thin client is a terminal.

### Claim 10 (depends on 1)

The computer-implemented method of claim 1, wherein the encryption protocol is unknown to portable devices of the first portable device type.

### Claim 11

A computing device configured to conduct a transaction, the computing device comprising:
a processor; and
a computer readable medium coupled to the processor, the computer readable medium comprising computer-executable instructions that, when executed by the processor, causes the computing device to:
establish a secure channel between a thin client and the computing device;
receive encrypted transaction data from the thin client configured to facilitate data exchange between the computing device and a portable device of a first portable device type;
decrypt encrypted transaction data to generate decrypted transaction data using an encryption protocol associated with a second portable device type; and
process the decrypted transaction data to conduct the transaction.

### Claim 12 (depends on 11)

The computing device of claim 11, wherein the computing device provides access device transaction functionality as a service.

### Claim 13 (depends on 11)

The computing device of claim 11, wherein the encrypted transaction data further comprises a secure communications wrapper generated by the thin client, the secure communications wrapper allowing the thin client to mimic portable devices of the second portable device type.

### Claim 14 (depends on 13)

The computing device of claim 13, wherein executing the computer-executable instructions further causes the computing device to identify the encrypted transaction data as being provided by a device of the second portable device type based on identifying that the encrypted transaction data further comprises the secure communications wrapper.

### Claim 15 (depends on 11)

The computing device of claim 11, wherein the thin client is operated by a resource provider.

### Claim 16 (depends on 11)

The computing device of claim 11, wherein the computing device stores an authentication private key associated with the computing device and a negotiation private key associated with the computing device.

### Claim 17 (depends on 16)

The computing device of claim 16, wherein the computing device stores an authentication public key associated with the thin client and a negotiation public key associated with the thin client.

### Claim 18 (depends on 17)

The computing device of claim 17, wherein the computing device is a server computer.

### Claim 19 (depends on 18)

The computing device of claim 18, wherein the portable device is a card.

### Claim 20 (depends on 11)

The computing device of claim 11, wherein the portable device is a card and stores at least a portion of transaction data from which the encrypted transaction data is generated.