US 2012/0239934 A1 · CREATION OF USER DIGITAL CERTIFICATE FOR PORTABLE CONSUMER PAYMENT DEVICE

Abstract

A method for creating a digital certificate for a user issued by a reliant party, where the reliant party relies on an established cryptographic infrastructure by a registration or certificate authority is described. The registration authority, typically a large financial or credit institution, has already performed the initial overhead steps necessary for a digital authentication system using a chip card. These steps include minting and distributing the chip card, establishing that the key pair and card are given to the right person, and creating the certificate library. The reliant party leverages this cryptographic infrastructure to issue its own digital certificate and certificate chain to a user already having a chip card from the registration authority. Consequently, a user can have additional digital certificates issued to him and stored at a user-specific memory in a remote certificate library without having the chip card modified.

Claims21

Dependent claims

1-20. (canceled)

A method comprising:

receiving a request from a reliant party computer for a digital certificate chain over a network connection, wherein the request comprises a unique identifier from a portable consumer payment device of a user;
retrieving, from at least one user-allotted memory segment of a digital certificate library, a digital certificate chain created from the digital certificate, wherein the digital certificate library stores a plurality of the digital certificate chains of other users, and the digital certificate library comprises:
a plurality of user-allocated memory segments, wherein the at least one user-allotted memory segment from the plurality of user-allocated memory segments is accessible by the unique identifier from the portable consumer payment device of the user;
a plurality of digital certificate chains issued to the user stored at the at least one user-allocated memory segment and wherein at least one digital certificate chain is issued to the user by a registration authority,
a registration authority identifier associated with the at least one digital certificate chain that identifies the registration authority on whose behalf the digital certificate is provided in the computer server;
a user first cryptographic key included in the at least one digital certificate chain, the user first cryptographic key having a corresponding user second cryptographic key being stored in the portable consumer payment device of the user;
a set of user attributes included in the at least one digital certificate chain providing information regarding the relationship between the user and the issuer associated with the digital certificate chain;
and
a trusted root certificate for the at least one digital certificate chain, with the corresponding trusted root differing from other trusted certificate roots stored at the corresponding user-allocated memory segment;
and
transmitting, the digital certificate chain over the network to the reliant party computer.

8 more elements

A computer server, comprising:

a processor;
a non-transitory computer readable storage medium coupled to the processor, wherein the non-transitory computer readable storage medium comprises code executable by the processor for implementing a method comprising:
receiving a request from a reliant party computer for a digital certificate chain over a network connection, wherein the request comprises an unique identifier from a portable consumer payment device of a user;
retrieving, from at least one user-allotted memory segment of a digital certificate library, a digital certificate chain created from the digital certificate, wherein the computer server stores a plurality of the digital certificate chains of other users in the digital certificate library;
and
transmitting, the digital certificate chain over the network to the reliant party computer;
and
the non-transitory computer readable medium further comprising the digital certificate library, wherein the digital certificate library comprises:
a plurality of user-allocated memory segments, wherein the at least one user-allotted memory segment from the plurality of user-allocated memory segments is accessible by the unique identifier retrieved from the portable consumer payment device of the user;
a plurality of digital certificate chains issued to the user stored at the at least one user-allocated memory segment and wherein at least one digital certificate chain is issued to the user by a registration authority,
a registration authority identifier associated with the at least one digital certificate chain that identifies the registration authority on whose behalf the digital certificate is provided in the computer server;
a user first cryptographic key included in the at least one digital certificate chain, the user first cryptographic key having a corresponding user second cryptographic key being stored in the portable consumer payment device of the user;
a set of user attributes included in the at least one digital certificate chain providing information regarding the relationship between the user and the issuer associated with the digital certificate chain;
and
a trusted root certificate for the at least one digital certificate chain, with the corresponding trusted root differing from other trusted certificate roots stored at the corresponding user-allocated memory segment.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application

13/400,002Filed 17 Feb 2012

Priority

27 Oct 1999

Published

20 Sep 2012

Term ends

Not estimatedThe source records don’t support an estimate.

Classification17 codes

H04L 63/0435
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…
G06Q 20/02
Payment architectures, schemes or protocols: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
G06Q 20/341
Using cards, e.g. integrated circuit [IC] cards or magnetic cards: active cards, i.e. cards including their own processing means, e.g. including…
G06Q 20/355
Using cards, e.g. integrated circuit [IC] cards or magnetic cards: personalisation of cards for use

Family

Application60/161,706Us provisional application · filed 27 Oct 1999

Application09/590,438Continuation · filed 9 Jun 2000

Application11/044,882Continuation · filed 27 Jan 2005

Application12/471,357Continuation · filed 23 May 2009

Application13/400,002Continuation

US 2005/0154877 A1Published application

US 2009/0235070 A1Published application

US 7,539,861 B2Related patent

US 8,145,899 B2Related patent

US 8,601,260 B2Related patent

US 2012/0239934 A1This patent