System and method for variable length encryption
AssigneeVeriFone, Inc.
InventorsClay von Mueller, Mihir Bellare, Scott Yale, Patrick K. Hazel, Paul Elbridge Catinella
Life of this patent
Estimating the term…
Abstract
Systems and methods for performing a secure transaction provided. In one embodiment, the method includes: reading data on a command token, reading data on a token; encrypting the token data with a key; encrypting an authentication data with a clear text token data; and transmitting the encrypted authentication data with the encrypted token data to a remote device.
Claims20
A method of encrypting token data at a token reader comprising a processor, the method comprising the token reader:
- receiving clear text token data from a token;
- defining a first portion and a second portion of the clear text token data;
- generating an encryption mask based on encrypting the second portion of the clear text token data using a key;
- and
- encrypting the clear text data by applying the encryption mask to the first portion using a modulo operation while not encrypting the second portion, thereby resulting in encrypted token data comprising an encrypted first portion and an unencrypted second portion;
- wherein the encrypted token data has the same format as the clear text token data.
The method of claim 5, wherein the first portion of the clear text token data is translated using substitution tables.
The method of claim 7, wherein the encryption mask is generated by encrypting the bank identification number.
A token reader for encrypting token data, the token reader comprising:
- a processor;
- and
- a non-transitory computer-readable medium operatively coupled to the processor and having instructions stored thereon that, when executed by the processor, causes the token reader to:
- receive clear text token data from a token;
- define a first portion and a second portion of the clear text token data;
- generate an encryption mask based on encrypting the second portion of the clear text token data using a key;
- and
- encrypt the clear text data by applying the encryption mask to the first portion using a modulo operation while not encrypting the second portion, thereby resulting in encrypted token data comprising an encrypted first portion and an unencrypted second portion;
- wherein the encrypted token data has the same format as the clear text token data.
A method of decrypting encrypted token data at a secure transaction device comprising a network interface connected to a transaction processing network, the method comprising the secure transaction device:
- receiving encrypted token data over the transaction processing network;
- defining a first portion and a second portion of the encrypted token data, where the encrypted token data comprises an encrypted first portion and an unencrypted second portion;
- generating an decryption mask based on encrypting the unencrypted second portion using a key;
- and
- decrypting the encrypted token data by applying the decryption mask to the first portion using a modulo operation, thereby resulting in clear text token data comprising a decrypted first portion and an unencrypted second portion;
- wherein the encrypted token data has the same format as the clear text token data.
A secure transaction device for decrypting encrypted token data received over a transaction processing network, the secure transaction device comprising:
- a network interface connected to the transaction processing network;
- a processor;
- and
- a non-transitory computer-readable medium operatively coupled to the processor and having instructions stored thereon that, when executed by the processor, causes the secure transaction device to:
- receive encrypted token data over the transaction processing network;
- define a first portion and a second portion of the encrypted token data, where the encrypted token data comprises an encrypted first portion and an unencrypted second portion;
- generate a decryption mask based on encrypting the unencrypted second portion using a key;
- and
- decrypt the encrypted token data by applying the decryption mask to the first portion using a modulo operation, thereby resulting in clear text token data comprising a decrypted first portion and an unencrypted second portion;
- wherein the encrypted token data has the same format as the clear text token data.
Dependencies are inferred from the claim text.