US 12,095,907 B2
Guaranteed encryptor authenticity
Vishnu Pillai Janardhanan Pillai, Fremont, CA (US); Rantao Chen, San Jose, CA (US); Gianpaolo Fasoli, Redwood City, CA (US); Frederic Jacobs, Canton of Vaud (CH); Rupamay Saha, San Jose, CA (US); Yannick L. Sierra, San Francisco, CA (US); Dian Wen, San Jose, CA (US); and Ka Yang, San Jose, CA (US)
Assigned to APPLE INC., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jun. 8, 2022, as Appl. No. 17/835,421.
Application 17/835,421 is a continuation of application No. 15/930,838, filed on May 13, 2020, granted, now 11,405,191.
Prior Publication US 2022/0303120 A1, Sep. 22, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/08 (2006.01); G06Q 20/38 (2012.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/085 (2013.01) [G06Q 20/3829 (2013.01); H04L 9/3247 (2013.01); H04L 63/0428 (2013.01); H04L 63/061 (2013.01); H04L 63/0823 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, performed by an electronic device, the electronic device comprising:
deriving, responsive to a purchase request input to an application or Web browser installed on the electronic device, keying material to encrypt payment material, wherein the keying material is derived based on (1) a shared secret, the shared secret generated by combining an encryption private key of the electronic device and an ephemeral public key of a payment server and (2) a signing public key of the electronic device;
encrypting the payment material using the keying material to produce encrypted payment material, wherein the payment material identifies a payment mechanism associated with the electronic device;
generating a signature using a signing private key of the electronic device;
sending the encrypted payment material and the signature to the payment server via a merchant server associated with the application or Web browser;
receiving, from the payment server, a credential generated in response to determining that the encrypted payment material and the signature were generated by the electronic device;
sending the credential to the merchant server to establish an exchange of value based on the payment mechanism; and
confirming the exchange of value through the application or Web browser.