US 12,244,739 B2
Confidential authentication and provisioning
Eric Le Saint, Los Altos, CA (US); Jing Jin, San Jose, CA (US); and Christian Aabye, Redwood City, CA (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Filed by Visa International Service Association, San Francisco, CA (US)
Filed on Aug. 7, 2023, as Appl. No. 18/231,084.
Application 18/231,084 is a continuation of application No. 17/080,525, filed on Oct. 26, 2020, granted, now 11,757,662.
Application 17/080,525 is a continuation of application No. 15/577,898, granted, now 10,826,712, issued on Nov. 3, 2020, previously published as PCT/US2016/040586, filed on Jun. 30, 2016.
Claims priority of provisional application 62/187,125, filed on Jun. 30, 2015.
Prior Publication US 2024/0007308 A1, Jan. 4, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/32 (2006.01); H04L 9/00 (2022.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/3273 (2013.01) [H04L 9/0844 (2013.01); H04L 9/0869 (2013.01); H04L 9/14 (2013.01); H04L 9/3242 (2013.01); H04L 9/3265 (2013.01); H04L 9/3268 (2013.01); H04L 63/0428 (2013.01); H04L 63/0442 (2013.01); H04L 63/061 (2013.01); H04L 63/0869 (2013.01); H04L 9/50 (2022.05); H04L 2209/04 (2013.01); H04L 2209/08 (2013.01); H04L 2209/56 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
encrypting, by an authentication server, an authentication challenge to obtain an encrypted authentication challenge;
sending, by the authentication server, the encrypted authentication challenge to a user device;
receiving, by the authentication server, an encrypted authentication response from the user device;
generating, by the authentication server, a shared secret using an authentication server private key and a user device authentication public key;
decrypting, by the authentication server, the encrypted authentication response using the shared secret to obtain an authentication response including a signed authentication challenge, wherein the user device generated the signed authentication challenge by signing the authentication challenge using a user device authentication private key corresponding to the user device authentication public key; and
authenticating, by the authentication server, the user device based on verifying the signed authentication challenge included in the authentication response using the user device authentication public key.