Loading patent…
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsCarlos Eduardo Oliveira do Valle Silvestre, Jonathan Ward Lupton
Estimating the term…
An authentication system may receive an authentication MAC, an integrity MAC, and data transmitted from a payment application and a payment terminal. A local integrity MAC may be generated using the data as an input to a first cryptographic operation. The system may compare the local integrity MAC to the received integrity MAC to authenticate the received integrity MAC. A local authentication MAC may be generated using a second cryptographic operation and compare the local authentication MAC to the received authentication MAC. The system may authenticate the payment application in response to a successful authentication of at least one of the received authentication MAC or the received integrity MAC.
-20. (canceled)
A method comprising:
The method of claim 1, further comprising retrieving, by the processor, an input to the second cryptographic operation, wherein the input to the second cryptographic operation is generated independently from the transaction data received by the processor from the payment application and the payment terminal.
The method of claim 2, wherein the input to the second cryptographic operation comprises data replicable at the issuer host.
The method of claim 1, wherein the first cryptographic operation is the same as the second cryptographic operation.
The method of claim 1, wherein the first cryptographic operation comprises an authentication encryption mode.
The method of claim 1, further comprising approving a transaction in response to the successful authentication of at least one of the authentication MAC or the integrity MAC.
The method of claim 1, wherein the authentication MAC and the integrity MAC are transmitted from the payment application, to the payment terminal, through a payment network, and to the processor.
A computer-based system comprising:
The computer-based system of claim 8, further comprising retrieving, by the processor, an input to the second cryptographic operation, wherein the input to the second cryptographic operation is generated independently from the transaction data received by the processor from the payment application and the payment terminal.
The computer-based system of claim 9, wherein the input to the second cryptographic operation comprises data replicable at the issuer host.
The computer-based system of claim 8, wherein the first cryptographic operation is the same as the second cryptographic operation.
The computer-based system of claim 8, wherein the first cryptographic operation comprises an authentication encryption mode.
The computer-based system of claim 8, further comprising approving a transaction in response to the successful authentication of at least one of the authentication MAC or the integrity MAC.
The computer-based system of claim 8, wherein the authentication MAC, the integrity MAC, and the transaction data are transmitted from the payment application, to the payment terminal, through a payment network, and to the processor.
An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a processor, cause the processor to perform operations comprising:
The article of claim 15, further comprising retrieving, by the processor, an input to the second cryptographic operation, wherein the input to the second cryptographic operation is generated independently from the transaction data received by the processor from the payment application and the payment terminal.
The article of claim 16, wherein the input to the second cryptographic operation may comprise data replicable at the issuer host.
The article of claim 15, wherein the first cryptographic operation is the same as the second cryptographic operation.
The article of claim 15, wherein the first cryptographic operation comprises an authentication encryption mode.
The article of claim 15, further comprising approving a transaction in response to the successful authentication of at least one of the authentication MAC or the integrity MAC.
Dependencies are inferred from the claim text.