US 12,423,448 B2
Systems and methods for initializing a distributed cryptography as a service application
Eric Devolder, Vedrin (BE); Eric G. Alger, Louisiana, MO (US); and Eric Trent Robins, Wentzville, MO (US)
Assigned to Mastercard International Incorporated, Purchase, NY (US)
Filed by Mastercard International Incorporated, Purchase, NY (US)
Filed on Oct. 12, 2023, as Appl. No. 18/485,738.
Prior Publication US 2025/0124140 A1, Apr. 17, 2025
Int. Cl. G06F 21/60 (2013.01)
CPC G06F 21/602 (2013.01) 20 Claims
OG exemplary drawing
 
1. An application server having a custodian application running thereon, the application server comprising:
one or more processors; and
a memory device, the memory device storing computer-executable instructions that when executed by the one or more processors, cause the one or more processors to:
receive, from a continuous integration and continuous delivery (CI/CD) pipeline, a command to instantiate a cryptographic microservice application on the application server;
in response to the command, instantiate the cryptographic microservice application on the application server;
build, via the cryptographic microservice application, a secure enclave on the application server;
build, within the secure enclave via the cryptographic microservice application, a cryptogram that represents a virtual fingerprint of the cryptographic microservice application;
transmit the cryptogram to an authentication computing system;
receive, from the authentication computing system, a digitally signed certificate;
receive, from the custodian application, a data encryption key encrypted with a master tenant key associated with the custodian application;
transmit, via the cryptographic microservice application, a request to the authentication computing system, the request including the digitally signed certificate, the data encryption key, and a request to decrypt the data encryption key; and
based on validation of the digitally signed certificate, receive the decrypted data encryption key from the authentication computing system.