Techniques for securely communicating sensitive data for disparate data messages
AssigneeVisa International Service Association
InventorsAndreas Aabye, Christian Aabye
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed for securely communicating sensitive such as an identifier. A user device may receive a first message comprising a terminal type indicator. For certain values of the terminal type indicator, the user device may be configured to transmit a request message comprising a first identifier and an encrypted identifier. For other values of the terminal type indicator, the user device may be configured to generating an obfuscated identifier based at least in part on a first portion of a second identifier and a second portion of the encrypted identifier. The user device may then transmit a request message that includes the obfuscated identifier and the encrypted identifier.
Claims20
A computer-implemented method for communicating sensitive data, comprising:
- transmitting, by an access device to a user device, a first message comprising a terminal type indicator, the user device storing a static account identifier, a primary account identifier, and an encrypted identifier that is generated by the user device using a portion of the primary account identifier;
- based on transmitting a first terminal type value for the terminal type indicator:
- receiving, by the access device from the user device, a first request message comprising the static account identifier and the encrypted identifier generated by the user device;
- determining, by the access device, whether to allow access to a resource managed by the access device based at least in part on performing an offline authentication of the first request message;
- and
- based on transmitting a second terminal type value for the terminal type indicator;
- receiving, by the access device from the user device, a second request message comprising an obfuscated identifier and the encrypted identifier, the obfuscated identifier being generated by the user device based on a first portion of the primary account identifier and a second portion of the encrypted identifier;
- and
- performing, by the access device, an online authentication of the second request message based at least in part on initiating a transaction corresponding to the second request message.
An access device, comprising:
- one or more processors;
- and
- one or more memories storing computer-executable instructions for communicating sensitive data, wherein executing the computer-executable instructions by the one or more processors, causes the access device to:
- transmit, to a user device, a first message comprising a terminal type indicator, the user device being configured to store a static account identifier, a primary account identifier, and an encrypted identifier generated by the user device using a portion of the primary account identifier;
- based on transmitting a first terminal type value for the terminal type indicator:
- receive, from the user device, a first request message comprising the static account identifier and the encrypted identifier generated by the user device;
- and
- determine whether to allow access to a resource managed by the access device based at least in part on performing an offline authentication of the first request message;
- and
- based on transmitting a second terminal type value for the terminal type indicator indicating a second terminal type:
- receive, from the user device, a second request message comprising an obfuscated identifier and the encrypted identifier, the obfuscated identifier being generated by the user device based on a first portion of the primary account identifier and a second portion of the encrypted identifier;
- and
- perform an online authentication of the second request message based at least in part on initiating a transaction corresponding to the second request message.
Dependencies are inferred from the claim text.