Derived unique key for pre-shared key (duk-psk)
AssigneeWells Fargo Bank, N.A.
InventorsJeffrey J. Stapleton, Peter Bordow
Life of this patent
Estimating the term…
Abstract
The arrangements disclosed herein relate to systems, apparatus, methods, and non-transitory computer readable media for receiving, by a client from a terminal, an External Pre-Shared Key (EPKS) package comprising a transaction key, wherein the transaction key is derived by the terminal using an Initial Key (IK) and a counter, sending, by the client to a server, a first message comprising the TID and the counter, receiving, by the client from the server, a second message in response to the first message, determining, by the client, a session key using the EPKS package, and communicating by the client with the server via a communication session using the session key.
Claims20
A method, comprising:
- receiving, by a host from a server a Terminal Identifier (TID) identifying a terminal associated with a client and a counter, wherein the server receives the TID and the counter from the client in a first message;
- deriving, by the host, a transaction key using the TID and the counter;
- sending, by the host to the server, an External Pre-Shared Key (EPKS) package comprising the transaction key, wherein the server determines a session key using the EPKS package and communicates with the client via a communication session using the session key, wherein the host provides the TID and a Base Derivation Key (BDK) to a Key Injection Facility (KIF), and the KIF derives an Initial Key (IK) using the BDK.
A system comprising a host, the host comprising at least one processor configured to:
- receive, from a server a Terminal Identifier (TID) identifying a terminal associated with a client and a counter, wherein the server receives the TID and the counter from the client in a first message;
- derive a transaction key using the TID and the counter;
- sending, by the host to the server, an External Pre-Shared Key (EPKS) package comprising the transaction key, wherein the server determines a session key using the EPKS package and communicates with the client via a communication session using the session key, wherein the host provides the TID and a Base Derivation Key (BDK) to a Key Injection Facility (KIF), and the KIF derives an Initial Key (IK) using the BDK.
At least one non-transitory processor-readable medium comprising processor-readable instructions, such that when executed, causes at least one processor to:
- receive, from a server a Terminal Identifier (TID) identifying a terminal associated with a client and a counter, wherein the server receives the TID and the counter from the client in a first message;
- derive a transaction key using the TID and the counter;
- sending, by the host to the server, an External Pre-Shared Key (EPKS) package comprising the transaction key, wherein the server determines a session key using the EPKS package and communicates with the client via a communication session using the session key, wherein the host provides the TID and a Base Derivation Key (BDK) to a Key Injection Facility (KIF), and the KIF derives an Initial Key (IK) using the BDK.
Dependencies are inferred from the claim text.