Off-line distributed transaction validation method

Abstract

Cryptographic digital signature certificate chains protect the authenticity of device level public keys used to verify a signature over the transaction data generated from a device private key. It is possible that quantum computers will be able to counterfeit certificate chains enabling massive fraud. The present disclosure provides a method of trusting a constrained device cryptographic public key in a distributed and off-line manner without traversing a cryptographic public key digital signature certificate chain. The method includes: receiving a request to validate a transaction from a payment device; extracting device identification data; interrogating the payment device to determine if data specific to the operator is stored; receiving and validating a local transaction authentication value or rejecting the device; determining whether the payment device is on a deny list, determining to authenticate the payment device; and provisionally validating the transaction.

Dependencies are inferred from the claim text.