US 12,141,248 B2
Systems and methods for whitebox device binding
Shashank Agrawal, Sunnyvale, CA (US); Estuardo Alpirez Bock, San Francisco, CA (US); Yilei Chen, San Francisco, CA (US); and Gaven James Watson, San Francisco, CA (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Appl. No. 17/907,919
Filed by Visa International Service Association, San Francisco, CA (US)
PCT Filed May 14, 2021, PCT No. PCT/US2021/032475
§ 371(c)(1), (2) Date Aug. 29, 2022,
PCT Pub. No. WO2021/236446, PCT Pub. Date Nov. 25, 2021.
Claims priority of provisional application 63/027,208, filed on May 19, 2020.
Prior Publication US 2023/0124498 A1, Apr. 20, 2023
Int. Cl. G06F 21/14 (2013.01); G06F 21/64 (2013.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01); G06F 21/10 (2013.01)
CPC G06F 21/14 (2013.01) [G06F 21/64 (2013.01); H04L 9/0825 (2013.01); H04L 9/0866 (2013.01); H04L 9/0894 (2013.01); H04L 9/3247 (2013.01); G06F 21/1011 (2023.08); H04L 2209/16 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a user device, an encrypted message from a back-end server computer, the encrypted message being a message encrypted by the back-end server computer with a master secret key or a key derived from the master secret key;
signing, by the user device, using a secure element, the encrypted message with a secure element private key to obtain a signed encrypted message;
cryptographically recovering, by the user device, using a whitebox, a secure element public key from a certified key using a back-end server computer public key, the certified key being certified by the back-end server computer and based on at least the secure element public key, and wherein the whitebox also stores the master secret key or the key derived from the master secret key;
cryptographically recovering, by the user device, using the whitebox, the encrypted message from the signed encrypted message using the secure element public key; and
decrypting, by the user device, using the whitebox, the encrypted message using the master secret key or the key derived from the master secret key in the whitebox to obtain the message.