IP Library › Granted Patent US 10,911,227
Granted Patent B2
US 10,911,227 · App. 15/951,415 · Granted Feb 2, 2021

Method and system for managing centralized encryption and data format validation for secure real time multi-party data distribution

Inventors: Moreshwar Mukund Datye (Maharashtra, IN); Ashutosh Subhash Gijare (Maharashtra, IN); Krishna Prasad Vasireddy (Milpitas, CA); Christopher T. Wischerth (Babylon, NJ); Eric Alger (Edwardsville, IL)
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
H04L9/083H04L9/14H04L9/30H04L63/0435
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,911,227
App. No.
15/951,415
Granted
Feb 2, 2021
Kind
B2
Abstract

A method for facilitating the broadcast of encrypted data includes: storing a content encryption key and a server private key of a first cryptographic key pair; storing a recipient profile, the profile being related to a recipient computing device including a recipient public key of a second cryptographic key pair; receiving a broadcast request from a broadcast computing device including an broadcast message encrypted using the content encryption key; identifying a unique identifier; transmitting a data message including the encrypted broadcast message and the unique identifier; receiving a key request from the recipient computing device including the unique identifier; verifying that the unique identifier included in the key request is equivalent to the identified unique identifier; encrypting the content encryption key using the recipient public key; and transmitting the encrypted content encryption key to the recipient computing device.

Claims (46)

1. A method for facilitating the broadcast of encrypted data, comprising:

storing, in a memory of a processing server, one or more content encryption keys including at least a first content encryption key;

storing, in a recipient database of the processing server, a recipient profile, wherein the recipient profile is a structured data set related to a recipient computing device including at least a recipient public key of a second cryptographic key pair and a recipient identification value;

receiving, by a receiving device of the processing server, a broadcast request from a broadcast computing device, wherein the broadcast request includes at least an encrypted broadcast message, where the encrypted broadcast message is encrypted using the first content encryption key;

identifying, by a data identification module of the processing server, a unique identifier directly associated with the first content encryption key;

electronically transmitting, by a transmitting device of the processing server, a data message including at least the encrypted broadcast message;

electronically transmitting, by the transmitting device of the processing server, the unique identifier to the broadcast computing device for distribution to a plurality of authorized recipient computing devices including the recipient computing device;

receiving, by the receiving device of the processing server, a key request from the recipient computing device, wherein the key request includes at least the unique identifier and the recipient identification value;

verifying, by a verification module of the processing server, that the unique identifier included in the key request is equivalent to the unique identifier identified by the processing server and that the recipient identification value included in the key request is equivalent to the recipient identification value stored in the recipient profile;

responsive to the verification, identifying, by a querying module of the processing server, the first content encryption key from among the stored one or more content encryption keys based on the association of the unique identifier with the first content encryption key;

encrypting, by an encryption module of the processing server, the first content encryption key using the recipient public key; and

electronically transmitting, by the transmitting device of the processing server, the encrypted first content encryption key to the recipient computing device.

2. The method of claim 1 , wherein

identifying the unique identifier includes executing, by the querying module of the processing server, a query on the memory to identify the unique identifier stored therein.

3. The method of claim 1 , further comprising:

executing, by the querying module of the processing server, a query on the memory to store the identified unique identifier.

4. The method of claim 1 , wherein the data message is electronically transmitted to the broadcast computing device.

5. The method of claim 1 , wherein the data message is electronically transmitted to a third party computing system.

6. The method of claim 1 , further comprising storing, in the memory of the processing server, a server private key of a first cryptographic key pair, wherein

the received key request is encrypted using a server public key corresponding to the server private key of the first cryptographic key pair, and

receiving the key request includes decrypting, by the encryption module of the processing server, the encrypted key request using the server private key.

7. The method of claim 1 , wherein the first content encryption key is a symmetric key.

8. A system for facilitating the broadcast of encrypted data, comprising:

a hardware processing device of a processing server;

an encryption module of the processing server;

a memory of the processing server configured to store one or more content encryption keys including at least a first content encryption key;

a recipient database of the processing server configured to store a recipient profile, wherein the recipient profile is a structured data set related to a recipient computing device including at least a recipient public key of a second cryptographic key pair and a recipient identification value;

the hardware processing device of the processing server configured to receive a broadcast request from a broadcast computing device, wherein the broadcast request includes at least an encrypted broadcast message, where the encrypted broadcast message is encrypted using the first content encryption key;

the hardware processing device of the processing server configured to identify a unique identifier directly associated with the first content encryption key;

the hardware processing device of the processing server configured to electronically transmit a data message including at least the encrypted broadcast message; and

the hardware processing device of the processing server configured to electronically transmit the unique identifier to the broadcast computing device for distribution to a plurality of authorized recipient computing devices including the recipient computing device, wherein

the hardware processing device of the processing server is further configured to receive a key request from the recipient computing device, wherein the key request includes at least the unique identifier and the recipient identification value,

the hardware processing device of the processing server is configured to verify that the unique identifier included in the key request is equivalent to the unique identifier identified by the processing server and that the recipient identification value included in the key request is equivalent to the recipient identification value stored in the recipient profile,

responsive to the verification, the hardware processing device is configured to identify the first content encryption key from among the stored one or more content encryption keys based on the association of the unique identifier with the first content encryption key,

the encryption module of the processing server is configured to encrypt the first content encryption key using the recipient public key, and

the hardware processing device of the processing server is further configured to electronically transmit the encrypted first content encryption key to the recipient computing device.

9. The system of claim 8 , wherein

identifying the unique identifier includes executing, by a querying module of the processing server, a query on the memory to identify the unique identifier stored therein.

10. The system of claim 8 , further comprising:

a querying module of the processing server configured to execute a query on the memory to store the identified unique identifier.

11. The system of claim 8 , wherein the data message is electronically transmitted to the broadcast computing device.

12. The system of claim 8 , wherein the data message is electronically transmitted to a third party computing system.

13. The system of claim 8 , wherein the memory of the processing server is further configured to store a server private key of a first cryptographic key pair, wherein

the received key request is encrypted using a server public key corresponding to the server private key of the first cryptographic key pair, and

receiving the key request includes decrypting, by the encryption module of the processing server, the encrypted key request using the server private key.

14. The system of claim 8 , wherein the first content encryption key is a symmetric key.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 12, 2018
From: DATYE, MORESHWAR MUKUND; GIJARE, ASHUTOSH SUBHASH; VASIREDDY, KRISHNA PRASAD; WISCHERTH, CHRISTOPHER T.; ALGER, ERIC
To: MASTERCARD INTERNATIONAL INCORPORATED
Reel/Frame 045922/0116 →
Continuity (1)
Related Publication 20190319784A1 · Oct 17, 2019