Token security on a communication device
AssigneeVisa International Service Association
InventorKarthikeyan Palanisamy
Life of this patent
Estimating the term…
Abstract
Techniques for enhancing the security of storing sensitive information or a token on a communication device may include sending a request for the sensitive information or token. The communication device may receive a session key encrypted with a hash value derived from user authentication data that authenticates the user of the communication device, and the sensitive information or token encrypted with the session key. The session key encrypted with the hash value, and the sensitive information or token encrypted with the session key can be stored in a memory of the communication device.
Claims20
A communication device comprising:
- a processor;
- and
- a non-transitory computer readable medium coupled to the processor and implementing an application that performs operations for enhancing security of storing a token on the communication device, the operations including:
- sending, to a token request computer, a request for the token;
- receiving from the token requester computer:
- a session key encrypted with a hash value derived from user authentication data that authenticates a user of the communication device;
- and
- the token encrypted with the session key;
- and
- storing the session key encrypted with the hash value and the token encrypted with the session key in a memory of the communication device.
A method for enhancing security of storing a token on a communication device comprising:
- receiving, by a token request computer, a request for a token from the communication device;
- sending, by the token request computer, the request to a token server;
- receiving, from the token server, a session key associated with the request, and the token encrypted with the session key;
- encrypting the session key with a hash value derived from user authentication data for authenticating a user of the communication device;
- and
- sending the session key encrypted with the hash value, and the token encrypted with the session key to the communication device.
A method for enhancing security of storing a token on a communication device, the method comprising:
- sending, to a token request computer, a request for the token;
- receiving from the token requester computer:
- a session key encrypted with a hash value derived from user authentication data for authenticating a user of the communication device;
- and
- the token encrypted with the session key;
- and
- storing the session key encrypted with the hash value and the token encrypted with the session key on the communication device.
Dependencies are inferred from the claim text.