US 12,289,411 B2
Comprehensive storage application provisioning using a provisioning software development kit (SDK)
Cristian Dumitru, Austin, TX (US); Penny Jurss, Leander, TX (US); Sushovan Sarkar, Round Rock, TX (US); and Suresh Kalakrishnan, Cedar Park, TX (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Appl. No. 18/044,766
Filed by Visa International Service Association, San Francisco, CA (US)
PCT Filed Sep. 30, 2021, PCT No. PCT/US2021/052847
§ 371(c)(1), (2) Date Mar. 9, 2023,
PCT Pub. No. WO2022/146516, PCT Pub. Date Jul. 7, 2022.
Claims priority of provisional application 63/131,954, filed on Dec. 30, 2020.
Prior Publication US 2023/0336349 A1, Oct. 19, 2023
Int. Cl. H04L 9/32 (2006.01); H04L 9/14 (2006.01); H04L 9/30 (2006.01)
CPC H04L 9/3213 (2013.01) [H04L 9/14 (2013.01); H04L 9/3073 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method performed by a mobile device comprising a processor, and memory coupled to the processor, the memory storing a provisioning software development kit (SDK), a first application, and a second application, the method comprising:
receiving, by the provisioning SDK from the first application on the mobile device an encrypted credential and a storage application identifier;
transmitting, by the provisioning SDK, the encrypted credential and the storage application identifier to a processing computer, wherein the processing computer decrypts the encrypted credential using a first application cryptographic key to obtain the credential, identifies a second application cryptographic key using the storage application identifier, and encrypts the credential with the second application cryptographic key, wherein the second application cryptographic key is one of a second application key pair;
receiving, by the provisioning SDK, the credential encrypted by the second application cryptographic key;
providing, by the provisioning SDK, the credential encrypted with the second application cryptographic key to the second application; and
providing, by the second application to a storage application server, the credential encrypted with the second application cryptographic key, wherein the storage application server decrypts the credential encrypted with another second application cryptographic key of the second application key pair, and then (i) stores the credential or a token associated with the credential and/or transmits the credential or the token associated with the credential to the second application.