US 12,244,690 B2
Online secret encryption
Fahimeh Rezaei, Mountain View, CA (US); Marc Kekicheff, San Francisco, CA (US); Sergey Smirnoff, San Francisco, CA (US); and Philippe Martin, San Jose, CA (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Appl. No. 17/799,557
Filed by Visa International Service Association, San Francisco, CA (US)
PCT Filed Apr. 21, 2021, PCT No. PCT/US2021/028473
§ 371(c)(1), (2) Date Aug. 12, 2022,
PCT Pub. No. WO2021/216765, PCT Pub. Date Oct. 28, 2021.
Claims priority of provisional application 63/013,746, filed on Apr. 22, 2020.
Prior Publication US 2023/0090972 A1, Mar. 23, 2023
Int. Cl. H04L 9/08 (2006.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/0822 (2013.01) [H04L 9/3226 (2013.01); H04L 63/0464 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a server computer, a thin client identifier from a thin client on a communication device;
retrieving, by the server computer, an encrypted first cryptographic key based on the thin client identifier, wherein the encrypted first cryptographic key is a first cryptographic key that is encrypted with a second cryptographic key;
initiating, by the server computer, sending of the encrypted first cryptographic key to the thin client;
receiving, by the server computer, an encrypted secret from the thin client, the encrypted secret being a secret encrypted with the first cryptographic key;
decrypting, by the server computer, the encrypted secret with the first cryptographic key to obtain the secret;
encrypting, by the server computer, the secret using a third cryptographic key, wherein the third cryptographic key is a transport computer cryptographic key; and
providing, by the server computer, the secret encrypted with the third cryptographic key to a transport computer in an authorization request message, and wherein the transport computer decrypts the secret encrypted with the third cryptographic key to obtain the secret, encrypts the secret with an authorizing entity computer cryptographic key, and modifies the authorization request message to include the secret encrypted with the authorizing entity computer cryptographic key and provides the modified authorization request message to an authorizing entity computer, wherein the authorizing entity computer decrypts the secret encrypted with the authorizing entity computer cryptographic key using the authorizing entity computer cryptographic key, determines whether or not to authorize an interaction associated with the secret, generates an indication of whether or not the interaction is authorized, generates an authorization response message including the indication of whether or not the interaction is authorized, and provides the authorization response message to the server computer via the transport computer;
receiving, by the server computer, the authorization response message; and
providing, by the server computer, the authorization response message to the thin client.