Granted Patent B2

US 12,210,596 · App. 18/374,997 · Granted Jan 28, 2025

Inventors: Hwai Sian Tsai (Ma On Shan, HK); Chi Wah Lo (Hong Kong, HK)

Assignee: STRIPE, INC.

G06F21/121G06F8/61G06F21/44G06Q20/20G06F21/1062

Abstract

Claims (51)

1. A method for managing authentication of an application for installation and running on a terminal comprising:

receiving, by a server computer system from the terminal, an image of a downloaded application and a signature generated by the terminal from the image, wherein the signature comprise an encryption of a hash value computed by the terminal of the downloaded application, wherein the image of the downloaded application is received by the server computer system from the terminal after the terminal has performed a first authentication of the downloaded application using a public key of an application store, wherein the downloaded application is uploaded to the application store by a vendor, and one or more portions of the downloaded application that handle sensitive information are encrypted by the vendor prior to said uploading;

decrypting, by the server computer system, the encryption of the hash value to generate a received hash value;

generating, by the server computer system, a hash value from the image using a hash function;

comparing, by the server computer system, the generated hash value with the received hash value;

authorizing, by the server computer system, the terminal to install and run the downloaded application in response to determining that the generated hash value matches the received hash value; and

providing, by the server computer system to the terminal after the authorizing, a decryption key of the vendor for decryption of the one or more portions of the downloaded application to enable the downloaded application to handle the sensitive information when executed by the terminal.

2. The method of claim 1 , further comprising:

receiving, by the server computer system from the vendor, the decryption key of the vendor.

3. The method of claim 1 , wherein the encryption of the hash value computed by the terminal is computed using a symmetric encryption key of the terminal, and the method further comprises:

accessing, by the server computer system, a copy of the symmetric encryption key that is associated with the terminal; and

performing, by the server computer system using the accessed copy of the symmetric encryption key, the decryption of the encryption of the hash value.

4. The method of claim 3 , wherein the accessing comprises:

loading the copy of the symmetric encryption key from a memory coupled with the server computer system; or

deriving the copy of the symmetric encryption key based on a shared secret known to the server computer system and the terminal.

5. The method of claim 1 , wherein the encryption of the hash value computed by the terminal is computed using an asymmetric encryption key of the terminal, and the method further comprises:

accessing, by the server computer system, a public key of the terminal; and

performing, by the server computer system using the public key of the terminal, the decryption of the encryption of the hash value.

6. The method of claim 1 , wherein the server computer system communicates with the terminal via an encrypted communication channel of a communications network.

7. The method of claim 1 , wherein the server computer system is a payment processing server computer system, wherein the terminal comprises a point of sale device, and wherein the server computer system is configured to process payment transactions received from the downloaded application.

8. The method of claim 1 , wherein the authorizing further comprises:

transmitting, by the server computer system to the terminal, information causing the terminal to classify the downloaded application based at least in part on the information as a payments processing application.

9. A non-transitory computer readable medium storage medium, having instructions stored thereon, which when executed by one or more processors of a server computer system, cause the server computer system to perform operations for managing authentication of an application for installation and running on a terminal, the operations comprising:

receiving, by the server computer system from the terminal, an image of a downloaded application and a signature generated by the terminal from the image, wherein the signature comprise an encryption of a hash value computed by the terminal of the downloaded application, wherein the image of the downloaded application is received by the server computer system from the terminal after the terminal has performed a first authentication of the downloaded application using a public key of an application store, wherein the downloaded application is uploaded to the application store by a vendor, and one or more portions of the downloaded application that handle sensitive information are encrypted by the vendor prior to said uploading;

decrypting, by the server computer system, the encryption of the hash value to generate a received hash value;

generating, by the server computer system, a hash value from the image using a hash function;

comparing, by the server computer system, the generated hash value with the received hash value;

authorizing, by the server computer system, the terminal to install and run the downloaded application in response to determining that the generated hash value matches the received hash value; and

providing, by the server computer system to the terminal after the authorizing, a decryption key of the vendor for decryption of the one or more portions of the downloaded application to enable the downloaded application to handle the sensitive information when executed by the terminal.

10. The non-transitory computer readable medium storage medium of claim 9 , the operations further comprising:

receiving, by the server computer system from the vendor, the decryption key of the vendor.

11. The non-transitory computer readable medium storage medium of claim 9 , wherein the encryption of the hash value computed by the terminal is computed using a symmetric encryption key of the terminal, and the operations further comprises:

accessing, by the server computer system, a copy of the symmetric encryption key that is associated with the terminal; and

performing, by the server computer system using the accessed copy of the symmetric encryption key, the decryption of the encryption of the hash value.

12. The non-transitory computer readable medium storage medium of claim 11 , wherein the accessing comprises:

loading the copy of the symmetric encryption key from a memory coupled with the server computer system; or

deriving the copy of the symmetric encryption key based on a shared secret known to the server computer system and the terminal.

13. The non-transitory computer readable medium storage medium of claim 9 , wherein the encryption of the hash value computed by the terminal is computed using an asymmetric encryption key of the terminal, and the operations further comprises:

accessing, by the server computer system, a public key of the terminal; and

performing, by the server computer system using the public key of the terminal, the decryption of the encryption of the hash value.

14. The non-transitory computer readable medium storage medium of claim 9 , wherein the server computer system is a payment processing server computer system, wherein the terminal comprises a point of sale device, and wherein the server computer system is configured to process payment transactions received from the downloaded application.

15. A server computer system, comprising:

a memory; and

one or more processors, coupled with the memory, configured to:

receive, from a terminal, an image of a downloaded application and a signature generated by the terminal from the image, wherein the signature comprise an encryption of a hash value computed by the terminal of the downloaded application, wherein the image of the downloaded application is received by the server computer system from the terminal after the terminal has performed a first authentication of the downloaded application using a public key of an application store, wherein the downloaded application is uploaded to the application store by a vendor, and one or more portions of the downloaded application that handle sensitive information are encrypted by the vendor prior to said uploading,

decrypt the encryption of the hash value to generate a received hash value,

generate a hash value from the image using a hash function,

compare the generated hash value with the received hash value,

authorize the terminal to install and run the downloaded application in response to determining that the generated hash value matches the received hash value, and

provide, to the terminal after authorization, a decryption key of the vendor for decryption of the one or more portions of the downloaded application to enable the downloaded application to handle the sensitive information when executed by the terminal.

16. The server computer system of claim 15 , wherein the server computer system is a payment processing server computer system, wherein the terminal comprises a point of sale device, and wherein the server computer system is configured to process payment transactions received from the downloaded application.

Assignments (1)

Continuity (3)

References Cited (138)