CPC G06F 21/14 (2013.01) [G06F 21/64 (2013.01); H04L 9/0825 (2013.01); H04L 9/0866 (2013.01); H04L 9/0894 (2013.01); H04L 9/3247 (2013.01); G06F 21/1011 (2023.08); H04L 2209/16 (2013.01)] | 20 Claims |
1. A method comprising:
receiving, by a user device, an encrypted message from a back-end server computer, the encrypted message being a message encrypted by the back-end server computer with a master secret key or a key derived from the master secret key;
signing, by the user device, using a secure element, the encrypted message with a secure element private key to obtain a signed encrypted message;
cryptographically recovering, by the user device, using a whitebox, a secure element public key from a certified key using a back-end server computer public key, the certified key being certified by the back-end server computer and based on at least the secure element public key, and wherein the whitebox also stores the master secret key or the key derived from the master secret key;
cryptographically recovering, by the user device, using the whitebox, the encrypted message from the signed encrypted message using the secure element public key; and
decrypting, by the user device, using the whitebox, the encrypted message using the master secret key or the key derived from the master secret key in the whitebox to obtain the message.
|