IP Library › Granted Patent US 11,303,434
Granted Patent B2
US 11,303,434 · App. 16/980,279 · Granted Apr 12, 2022

Techniques for secure channel communications

Inventors: Yuexi Chen (Foster City, CA); Marc Kekicheff (Foster City, CA); Philippe Martin (San Jose, CA)
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
H04L9/0825H04L63/0428H04L63/061H04L67/141H04L2209/56
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,303,434
App. No.
16/980,279
Granted
Apr 12, 2022
Kind
B2
Abstract

A method for conducting a transaction is disclosed. A processor in a thin client may receive transaction data from a portable device of a first portable device type. The processor may determine that the portable device is the first portable device type. The processor may apply an encryption protocol associated with a second portable device type to the transaction data to create encrypted data. The processor may transmit the encrypted data to a remote computer, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter process the transaction data to conduct the transaction.

Claims (45)

1. A computer-implemented method for conducting a transaction, comprising:

receiving, by a thin client from a portable device of a first portable device type, transaction data, the thin client being configured to facilitate data exchange between the portable device and a remote computer;

determining, by the thin client, that the portable device is the first portable device type;

establishing a secure channel between the thin client and the remote computer, the secure channel being established based at least in part on transmitting, to the remote computer, an ephemeral public key generated by the thin client, the ephemeral public key being digitally signed with an authentication private key associated with the thin client:

applying, by the thin client, an encryption protocol associated with a second portable device type to the transaction data to create encrypted data; and

transmitting, by the thin client to the remote computer over the secure channel, the encrypted data, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter processes the transaction data to conduct the transaction.

2. The computer-implemented method of claim 1 , wherein the encryption protocol is applied based at least in part on determining that the portable device is the first portable device type.

3. The computer-implemented method of claim 1 , wherein the transaction data is received from the remote computer.

4. The computer-implemented method of claim 1 , wherein the thin client is operated by a resource provider.

5. The computer-implemented method of claim 1 , wherein the remote computer provides access device transaction functionality as a service.

6. The computer-implemented method of claim 1 , wherein establishing the secure channel further comprises:

generating, by the thin client, an ephemeral key pair comprising an ephemeral private key and the ephemeral public key;

generating, by the thin client, a random value;

generating, by the thin client, a concatenated value comprising the ephemeral public key and the random value;

digitally signing, by the thin client, the concatenated value with an authentication private key associated with the thin client; and

transmitting, by the thin client to the remote computer, the concatenated value as digitally signed.

7. The computer-implemented method of claim 1 , further comprising:

receiving, by the thin client from the remote computer, subsequent encrypted data, wherein the thin client is configured to decrypt the subsequent encrypted data utilizing the encryption protocol; and

verifying, by the thin client, the subsequent encrypted data is unaltered and was transmitted by the remote computer.

8. The computer-implemented method of claim 1 , further comprising:

generating, by the thin client, a secure communications wrapper, wherein the encrypted data is generated utilizing the transaction data and the secure communications wrapper.

9. The computer-implemented method of claim 1 , wherein the encryption protocol is unknown to portable devices of the first portable device type.

10. A thin client comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code that, when executed by the processor, causes the thin client to:

receive, from a portable device of a first portable device type, transaction data associated with conducting a transaction, the thin client being configured to facilitate data exchange between the portable device and a remote computer;

determine that the portable device is the first portable device type;

establish a secure channel between the thin client and the remote computer, the secure channel being established based at least in part on transmitting, to the remote computer, an ephemeral public key generated by the thin client, the ephemeral public key being digitally signed with an authentication private key associated with the thin client;

apply an encryption protocol associated with a second portable device type to the transaction data to create encrypted data; and

transmit, to the remote computer over the secure channel, the encrypted data, wherein the remote computer utilizes the encryption protocol to decrypt the transaction data, and thereafter processes the transaction data to perform the transaction.

11. The thin client of claim 10 , wherein the encryption protocol is applied based at least in part on determining that the portable device is the first portable device type.

12. The thin client of claim 10 , wherein the transaction data is received from the remote computer.

13. The thin client of claim 10 , wherein the thin client is operated by a resource provider.

14. The thin client of claim 10 , wherein the remote computer provides access device transaction functionality as a service.

15. The thin client of claim 10 , wherein establishing the secure channel further causes the thin client to:

generate an ephemeral key pair comprising an ephemeral private key and the ephemeral public key;

generate a random value;

generate a concatenated value comprising the ephemeral public key and the random value;

digitally sign the concatenated value with an authentication private key associated with the thin client; and

transmit, to the remote computer, the concatenated value as digitally signed.

16. The thin client of claim 10 , wherein executing the code further causes the thin client to:

receive, from the remote computer, subsequent encrypted data, wherein the thin client is configured to decrypt the subsequent encrypted data utilizing the encryption protocol; and

verify the subsequent encrypted data is unaltered and was transmitted by the remote computer.

17. The thin client of claim 10 , wherein executing the code further causes the thin client to generate a secure communications wrapper, wherein the encrypted data is generated utilizing the transaction data and the secure communications wrapper.

18. The thin client of claim 10 , wherein the encryption protocol is unknown to portable devices of the first portable device type.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2020
From: CHEN, YUEXI; KEKICHEFF, MARC; MARTIN, PHILIPPE
To: VISA INTERNATIONAL SERVICE ASSOCIATION
Reel/Frame 053828/0945 →
Continuity (2)
Provisional Application 62641703 · Mar 12, 2018
Related Publication 20210006396A1 · Jan 7, 2021