Back to results
US 12,015,716 B2Granted
System and method for securely processing an electronic identity
AssigneeVisa International Service Association
InventorQuan Wang
Life of this patent
Estimating the term…
Abstract
A method for providing identification using an endpoint device is disclosed. The endpoint device may include an electronic identity that is unique and can be securely stored. The electronic identity may be passed to an access device along with signed interaction data and a cryptogram. The access device may generate an authorization request with the cryptogram and may send it to a remote server computer for further processing.
Claims16
A server computer configured to process an electronic identity of a user, the server computer comprising:
- a network interface;
- a processor;
- and
- a non-transitory computer-readable medium comprising code for instructing the processor to implement a method including:
- receiving, from an access device, an authorization request message comprising a cryptogram and a dynamic set of data, wherein the cryptogram comprises an interaction record comprising interaction data encrypted using a limited-use key associated with limited-use parameters, the interaction record being signed by a private key of the user and a private key of a resource provider, wherein the cryptogram further comprises the electronic identity of the user, the electronic identity being derived based on information associated with the user;
- determining, based on the dynamic set of data, a symmetric limited-use key corresponding to the limited-use key;
- decrypting the cryptogram using the symmetric limited-use key;
- validating the limited-use parameters associated with the limited-use key;
- validating the electronic identity of the user;
- and
- in response to the electronic identity and the limited-use parameters being validated, approving the authorization request message or forwarding the authorization request message to an authorizing entity computer,
- wherein the interaction record further comprises an interaction stamp.
9 more elements
A method comprising:
- receiving, from an access device by a server computer, an authorization request message comprising a cryptogram and a dynamic set of data, wherein the cryptogram comprises an interaction record comprising interaction data encrypted using a limited-use key associated with limited-use parameters, the interaction record being signed by a private key of a user and a private key of a resource provider, wherein the cryptogram further comprises an electronic identity of the user, the electronic identity being derived based on information associated with the user;
- determining, based on the dynamic set of data, a symmetric limited-use key corresponding to the limited-use key;
- decrypting the cryptogram using the symmetric limited-use key;
- validating the limited-use parameters associated with the limited-use key;
- validating the electronic identity of the user;
- and
- in response to the electronic identity and the limited-use parameters being validated, approving the authorization request message or forwarding the authorization request message to an authorizing entity computer,
- wherein the interaction record further comprises an interaction stamp.
5 more elements
Dependencies are inferred from the claim text.