Portable Security Transaction Protocol
AssigneeJP Morgan Chase Bank
InventorsGlenn Stuart Benson, Joseph R. Calaceto, Russell M. Logar
Life of this patent
Estimating the term…
Abstract
A technique for providing message authenticity includes accepting transaction information, accepting a first data item used for authenticating an originating user, cryptographically processing the transaction information using only a second data item, wherein the entropy of the first data item is less than the entropy of the second data item, and authenticating the originating user using the first data item. The first data item can be a sequence of digits corresponding to those displayed on an external device, such as, for example, an RSA authorization token, credit card, etc.
Claims23
1-19. (canceled)
A computer-implemented method for sending a secure message to be validated from an originating user to a recipient's computer, the method comprising the steps of:
- generating a message integrity component through the computer, wherein the message integrity component comprises data corresponding to (i) a message and (ii) a message integrity key;
- generating a user authentication component through the computer, wherein the user authentication component comprises a user authentication key, wherein the user authentication key is displayed on an external device;
- encrypting the message integrity key and the user authentication key into a key management component through the computer;
- and
- uploading the message through the computer to the recipient for validation, wherein the message comprises the message integrity component, the user authentication component and the key management component.
A system for sending a secure message to be validated from an originating user to a recipient's computer comprising:
- a computer-readable memory;
- and
- a processor communicatively coupled to the computer-readable memory, the processor programmed to perform actions by the originating user, comprising:
- generating a message integrity component, wherein the message integrity component comprises data corresponding to (i) a message and (ii) a message integrity key;
- generating a user authentication component, wherein the user authentication component comprises a user authentication key, wherein the user authentication key is displayed on an external device;
- encrypting the message integrity key and the user authentication key into a key management component;
- and
- uploading the message to the recipient for validation, wherein the message comprises the message integrity component, the user authentication component and the key management component.
A program storage device readable by a machine, tangibly embodying a program of instructions executable on the machine to perform method steps for providing end-to-end message validation for a message sent by an originating user to a recipient, the method steps comprising:
- generating a message integrity component, wherein the message integrity component comprises data corresponding to (i) a message and (ii) a message integrity key;
- generating a user authentication component, wherein the user authentication component comprises a user authentication key, wherein the user authentication key is displayed on an external device;
- encrypting the message integrity key and the user authentication key into a key management component;
- and
- uploading the message to the recipient for validation, wherein the message comprises the message integrity component, the user authentication component and the key management component.
Dependencies are inferred from the claim text.