US 11,769,148 B2
System and method of session key generation and exchange
Milos Dunjic, Oakville (CA); Perry Aaron Jones Haldenby, Toronto (CA); Arthur Carroll Chow, Markham (CA); Anthony Haituyen Nguyen, Toronto (CA); Het Anand Patel, Mississauga (CA); Casey Lyn Doyle, Ajax (CA); Yubing Liu, Toronto (CA); John Jong-Suk Lee, Toronto (CA); David Samuel Tax, Toronto (CA); and Arun Victor Jagga, Toronto (CA)
Assigned to The Toronto-Dominion Bank, Toronto (CA)
Filed by The Toronto-Dominion Bank, Toronto (CA)
Filed on Feb. 18, 2021, as Appl. No. 17/178,654.
Application 17/178,654 is a continuation of application No. 15/725,689, filed on Oct. 5, 2017, granted, now 10,956,905.
Prior Publication US 2021/0174362 A1, Jun. 10, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06Q 20/38 (2012.01); G06Q 20/36 (2012.01); G06Q 20/32 (2012.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC G06Q 20/3829 (2013.01) [G06Q 20/322 (2013.01); G06Q 20/367 (2013.01); G06Q 20/3674 (2013.01); G06Q 20/385 (2013.01); H04L 9/0866 (2013.01); H04L 9/3226 (2013.01); H04L 9/3234 (2013.01); H04L 2209/56 (2013.01); H04L 2209/805 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An electronic device for performing a payment transaction, the electronic device comprising:
a processor;
a memory coupled to the processor, the memory storing instructions that, when executed by the processor, cause the electronic device to:
send a provisioning request to a host card emulation server over a secure channel, the provisioning request including a payment account reference and a fingerprint of the electronic device, wherein the fingerprint is a unique identifier of the electronic device;
receive a provisioning reply from the host card emulation server, wherein the provisioning reply contains a payment token mapped to the payment account reference and the provisioning reply contains a secret value;
generate a session key based on the fingerprint of the electronic device, the secret value, and the payment token;
in response to a message from a point-of-sale terminal, generate a cryptogram using the session key; and
transmit to the point-of-sale terminal, a payment request including the payment token and the cryptogram.