# US 2018/0025353 A1 · System and method for end-to-end key management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0025353 A1 - Document ID: US20180025353A1 - Status: Published application - Kind: A1 - Application number: 15/218,842 - Filed: 2016-07-25 - Published: 2018-01-25 - Earliest claimed: 2016-07-25 - Assignees: Mastercard International Incorporated - Applicants: MasterCard International Incorporated - Inventors: Mehdi Collinge; Mohamed Abou El Enin; Andrea Bacioccola; Michael Ward - Web page: https://patentgrep.com/patent/US20180025353A1 ## CPC - G06Q 20/3829: {involving key management} - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/326: {Payment applications installed on the mobile devices} - G06Q 20/382: {insuring higher security of transaction} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - G06Q 2220/00: Business processing using cryptography - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Provided are a system and method for managing encryption keys used by a payment application on a mobile device. The method includes executing a mobile payment application in a user domain of the mobile device, where the user domain is an operating environment in which applications are executed and accessed by a user, importing a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, where the system domain is a more secure operating environment controlled by an operating system, encrypting payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain, and transmitting the encrypted payment information to a merchant. ## Claims ### Claim 1 A method of a mobile device, comprising: executing a mobile payment application in a user domain of the mobile device, the user domain comprising an operating environment in which mobile applications are executed and accessed by a user of the mobile device; importing a plurality of encryption keys for use with the mobile payment application into a system domain of the mobile device, the system domain comprising a more secure operating environment controlled by an operating system of the mobile device; encrypting payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain; and transmitting the encrypted payment information to a merchant. ### Claim 2 (depends on 1) The method of claim 1, wherein the importing comprises importing the plurality of encryption keys into a keystore operated in the system domain. ### Claim 3 (depends on 1) The method of claim 1, wherein a firewall exists between the user domain and the system domain. ### Claim 4 (depends on 1) The method of claim 1, wherein the plurality of encryption keys imported into the system domain comprise at least one mobile key for decrypting content received from a credential management system (CMS). ### Claim 5 (depends on 1) The method of claim 1, wherein the plurality of encryption keys imported into the system domain comprise an integrated circuit card (ICC) key pair for generating a CDA signature. ### Claim 6 (depends on 1) The method of claim 1, further comprising generating an encryption key in the system domain for use with the mobile payment application and storing the generated encryption key in the system domain. ### Claim 7 (depends on 6) The method of claim 6, wherein the generated encryption key comprises a local database encryption (LDE) key for decrypting and encrypting data stored in a local database used by the mobile payment application. ### Claim 8 (depends on 1) The method of claim 1, wherein the system domain is not accessible by the user of the mobile device and is under sole control of the operating system. ### Claim 9 (depends on 1) The method of claim 1, wherein the transmitting comprises transferring the encrypted payment information from the system domain to the user domain and transmitting the encrypted payment information from the user domain to the merchant. ### Claim 10 A mobile device, comprising: a processor configured to execute a mobile payment application in a user domain of the mobile device, the user domain comprising an operating environment in which mobile applications are executed and accessed by a user of the mobile device; and an importer configured to import a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, the system domain comprising a more secure operating environment controlled by an operating system of the mobile device; wherein the processor is further configured to encrypt payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain. ### Claim 11 (depends on 10) The mobile device of claim 10, further comprising a transmitter configured to transmit the encrypted payment information to a merchant. ### Claim 12 (depends on 11) The mobile device of claim 11, wherein the processor transfers the encrypted payment information from the system domain to the user domain and the transmitter transmits the encrypted payment information from the user domain to the merchant. ### Claim 13 (depends on 10) The mobile device of claim 10, wherein the importer imports the plurality of encryption keys into a keystore included in the system domain. ### Claim 14 (depends on 10) The mobile device of claim 10, wherein a firewall exists between the user domain and the system domain. ### Claim 15 (depends on 10) The mobile device of claim 10, wherein the plurality of encryption keys imported into the system domain comprise at least one mobile key for decrypting content received from a credential management system (CMS). ### Claim 16 (depends on 10) The mobile device of claim 10, wherein the plurality of encryption keys imported into the system domain comprise an integrated circuit card (ICC) key pair for generating a CDA signature. ### Claim 17 (depends on 10) The mobile device of claim 10, wherein the processor is further configured to generate an encryption key in the system domain for use with the mobile payment application and store the generated encryption key in the system domain. ### Claim 18 (depends on 16) The mobile device of claim 16, wherein the generated encryption key comprises a local database encryption (LDE) key for decrypting and encrypting data stored in a local database used by the mobile payment application. ### Claim 19 (depends on 10) The mobile device of claim 10, wherein the system domain is not accessible by the user of the mobile device and is under sole control of the operating system of the mobile device. ### Claim 20 A non-transitory computer readable medium having stored therein instructions that when executed cause a computer to perform a method of a mobile device, the method comprising: executing a mobile payment application in a user domain of the mobile device, the user domain comprising an operating environment in which mobile applications are executed and accessed by a user of the mobile device; importing a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, the system domain comprising a more secure operating environment controlled by an operating system of the mobile device; encrypting payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain; and transmitting the encrypted payment information to a merchant.