Secure capture of a data item at a client device
AssigneeYoti Holding Limited
InventorsFrancisco Angel Garcia Rodriguez, Miguel Jimenez
Life of this patent
Estimating the term…
Abstract
An obfuscated code package is deployed to a client device to effect secure capture of a data item at the client device. The obfuscated code package has a cryptographic key embedded therein or derivable therefrom, and is configured, when run on a client device, to cause the client device to cause the client device to capture a data item according to the capture algorithm, generate a secure message according to the signing algorithm comprising the data item captured at the client device. The cryptographic key is used to generate the secure message.
Claims20
A computer system for effecting secure capture of a data item at a client device, the computer system comprising one or more processors configured with computer-executable instructions to:
- generate an obfuscated code package, the obfuscated code package embodying, in obfuscated form, a capture algorithm for capturing a data item and a cryptographic algorithm for securing a captured data item;
- transmit the obfuscated code package to the client device, the obfuscated code package configured, when run on the client device, to cause the client device to capture a data item according to the capture algorithm, and generate a secure message according to the cryptographic algorithm, using a cryptographic key embedded in the obfuscated code package or derived by the cryptographic algorithm, the secure message comprising the data item captured at the client device;
- and
- receive the secure message comprising the data item, and verify the data item using knowledge of the cryptographic key.
Non-transitory media embodying an obfuscated code package, the obfuscated code package configured, when run on a client device, to cause the client device to cause the client device to:
- capture a data item according to a capture algorithm embodied in the obfuscated code package in obfuscated form;
- and
- generate a secure message according to a cryptographic algorithm embodied in the obfuscated code package in obfuscated form, using a cryptographic key embedded in the obfuscated code package or derived by the cryptographic algorithm, the secure message comprising the data item captured at the client device.
A method of effecting secure capture of a data item at a client device, the method comprising:
- receiving, at the client device, an obfuscated code package, the obfuscated code package embodying, in obfuscated form, a capture algorithm for capturing a data item and a cryptographic algorithm for securing a captured data item;
- running the obfuscated code package on the client device, and thereby causing the client device to capture a data item according to the capture algorithm, and generate according to the cryptographic algorithm a secure message, using a cryptographic key of the obfuscated code package, the secure message comprising the data item captured at the client device;
- and
- transmitting the secure message for processing by a verifier.
Dependencies are inferred from the claim text.