IP Library › Granted Patent US 12,244,739
Granted Patent B2
US 12,244,739 · App. 18/231,084 · Granted Mar 4, 2025

Confidential authentication and provisioning

Inventors: Eric Le Saint (Los Altos, CA); Jing Jin (San Jose, CA); Christian Aabye (Redwood City, CA)
Assignee: Visa International Service Association
H04L9/3273H04L9/0844H04L9/0869H04L9/14H04L9/3242H04L9/3265H04L9/3268H04L63/0428H04L63/0442H04L63/061H04L63/0869H04L9/50H04L2209/04H04L2209/08H04L2209/56
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,244,739
App. No.
18/231,084
Granted
Mar 4, 2025
Kind
B2
Abstract

Systems and methods are for confidentially and securely provisioning data to an authenticated user device. A user device may register an authentication public key with an authentication server. The authentication public key may be signed by an attestation private key maintained by the user device. Once the user device is registered, a provisioning server may send an authentication request message including a challenge to the user device. The user device may sign the challenge using an authentication private key corresponding to the registered authentication public key, and may return the signed challenge to the provisioning server. In response, the provisioning server may provide provisioning data to the user device. The registration, authentication, and provisioning process may use public key cryptography while maintaining confidentiality of the user device, the provisioning server, and then authentication server.

Claims (55)

1. A computer-implemented method comprising:

encrypting, by an authentication server, an authentication challenge to obtain an encrypted authentication challenge;

sending, by the authentication server, the encrypted authentication challenge to a user device;

receiving, by the authentication server, an encrypted authentication response from the user device;

generating, by the authentication server, a shared secret using an authentication server private key and a user device authentication public key;

decrypting, by the authentication server, the encrypted authentication response using the shared secret to obtain an authentication response including a signed authentication challenge, wherein the user device generated the signed authentication challenge by signing the authentication challenge using a user device authentication private key corresponding to the user device authentication public key; and

authenticating, by the authentication server, the user device based on verifying the signed authentication challenge included in the authentication response using the user device authentication public key.

2. The computer-implemented method of claim 1 , wherein the authentication challenge is encrypted using the user device authentication public key, the user device authentication public key having been previously obtained from the user device via a registration process.

3. The computer-implemented method of claim 2 , wherein the registration process comprises:

receiving, from the user device, a signed user device authentication public key generated by the user device signing the user device authentication public key using a user device attestation private key, the user device attestation private key corresponding to a user device attestation public key.

4. The computer-implemented method of claim 3 , wherein the signed user device authentication public key is received in an encrypted registration response, the computer-implemented method further comprising:

decrypting the encrypted registration response to obtain the signed user device authentication public key; and

validating the signed user device authentication public key using the user device attestation public key.

5. The computer-implemented method of claim 1 , further comprising receiving, by the authentication server, an identifier from the user device, the identifier associated with the user device authentication public key.

6. The computer-implemented method of claim 1 , further comprising:

receiving, by the authentication server, a blinded user device authentication public key and an encrypted user device blinding factor from the user device;

decrypting, by the authentication server, the encrypted user device blinding factor using the shared secret to obtain a user device blinding factor; and

verifying, by the authentication server, the blinded user device authentication public key using the user device blinding factor and the user device authentication public key.

7. The computer-implemented method of claim 1 , further comprising sending, by the authentication server, provisioning data to the user device in response to verifying the signed authentication challenge.

8. A computer-implemented method comprising:

receiving, by a user device, an encrypted authentication challenge from an authentication server;

decrypting, by the user device, the encrypted authentication challenge to obtain an authentication challenge;

generating, by the user device, a shared secret using a user device authentication private key corresponding to a user device authentication public key and an authentication server public key;

generating, by the user device, a signed authentication challenge by signing the authentication challenge using the user device authentication private key corresponding to the user device authentication public key;

encrypting, by the user device, an authentication response including the signed authentication challenge using the shared secret to obtain an encrypted authentication response; and

sending, by the user device, the encrypted authentication response to the authentication server, wherein the authentication server authenticates the user device based on verifying the signed authentication challenge included in the authentication response using the user device authentication public key.

9. The computer-implemented method of claim 8 , further comprising sending, by the user device, an identifier to the authentication server, the identifier associated with the user device authentication public key.

10. The computer-implemented method of claim 8 , wherein the authentication server generates the shared secret using the user device authentication public key and an authentication server private key, and decrypts the encrypted authentication response using the shared secret.

11. The computer-implemented method of claim 8 , further comprising:

generating, by the user device, a user device blinding factor; and

generating, by the user device, a blinded user device authentication public key using the user device authentication public key and the user device blinding factor.

12. The computer-implemented method of claim 11 , further comprising:

encrypting, by the user device, the user device blinding factor using the shared secret to obtain an encrypted user device blinding factor; and

sending, by the user device, the encrypted user device blinding factor to the authentication server, wherein the authentication server verifies the blinded user device authentication public key using the user device blinding factor and the user device authentication public key.

13. The computer-implemented method of claim 8 , further comprising:

receiving, by the user device, an encrypted authentication server certificate from the authentication server; and

decrypting, by the user device, the encrypted authentication server certificate using the shared secret to obtain an authentication server certificate, the authentication server certificate including the authentication server public key.

14. The computer-implemented method of claim 8 , further comprising receiving, by the user device, encrypted provisioning data, wherein the user device decrypts the encrypted provisioning data using the shared secret to obtain provisioning data.

15. The computer-implemented method of claim 8 , further comprising:

signing, by the user device, the user device authentication public key using a user device attestation private key to obtain a signed user device authentication public key, the user device attestation private key corresponding to a user device attestation public key;

encrypting, by the user device, the signed user device authentication public key to obtain an encrypted registration response; and

sending, by the user device, the encrypted registration response to the authentication server.

16. The computer-implemented method of claim 15 , further comprising:

encrypting, by the user device, a user device attestation certificate including the user device attestation public key to obtain an encrypted user device attestation certificate, wherein the encrypted registration response includes the encrypted user device attestation certificate.

17. The computer-implemented method of claim 8 , wherein the shared secret is a first shared secret, the computer-implemented method further comprising:

receiving, by the user device, a blinded authentication server public key and an encrypted authentication server certificate from the authentication server;

generating, by the user device, a second shared secret using the blinded authentication server public key and the user device authentication private key;

decrypting, by the user device, the encrypted authentication server certificate using the second shared secret to obtain an authentication server certificate including the authentication server public key;

encrypting, by the user device, the user device authentication public key using the second shared secret to obtain an encrypted user device authentication public key; and

sending, by the user device, the encrypted user device authentication public key to the authentication server.

18. The computer-implemented method of claim 8 , further comprising receiving, by the user device, a provisioning server certificate from the authentication server, the provisioning server certificate including the authentication server public key.

19. The computer-implemented method of claim 8 , further comprising:

receiving, by the user device, an input from a user of the user device;

authenticating, by the user device, the user based on the input; and

generating, by the user device, the user device authentication private key and the user device authentication public key in response to authenticating the user.

Continuity (4)
Continuation 17080525 · Oct 26, 2020
Continuation 15577898
Provisional Application 62187125 · Jun 30, 2015
Related Publication 20240007308A1 · Jan 4, 2024
References Cited (106)
US 6052467A · Brands · 2000 [cited by applicant]
US 6760752B1 · Liu et al. · 2004 [cited by applicant]
US 7039713B1 · Van Gunter et al. · 2006 [cited by applicant]
US 7039946B1 · Binding et al. · 2006 [cited by applicant]
US 7628322B2 · Holtmanns · 2009 [cited by examiner]
US 9288208B1 · Roth · 2016 [cited by examiner]
US 10333903B1 · Campagna · 2019 [cited by examiner]
US 10708072B2 · Le Saint · 2020 [cited by applicant]
US 10826712B2 · Le Saint et al. · 2020 [cited by applicant]
US 11323276B2 · Le Saint · 2022 [cited by applicant]
US 11757662B2 · Le Saint et al. · 2023 [cited by applicant]
US 20020067832A1 · Jablon · 2002 [cited by applicant]
US 20020095507A1 · Jerdonek · 2002 [cited by applicant]
US 20020104006A1 · Boate et al. · 2002 [cited by applicant]
US 20040064694A1 · Lee et al. · 2004 [cited by applicant]
US 20040230800A1 · Futa et al. · 2004 [cited by applicant]
US 20050050329A1 · Wilding et al. · 2005 [cited by applicant]
US 20050154889A1 · Ashley · 2005 [cited by examiner]
US 20060106836A1 · Masugi et al. · 2006 [cited by applicant]
US 20060198517A1 · Cameron et al. · 2006 [cited by applicant]
US 20060288209A1 · Vogler · 2006 [cited by examiner]
US 20070266258A1 · Brown · 2007 [cited by examiner]
US 20080141035A1 · Furukawa · 2008 [cited by applicant]
US 20080154782A1 · Kang et al. · 2008 [cited by applicant]
US 20080320308A1 · Kostiainen et al. · 2008 [cited by applicant]
US 20090006860A1 · Ross · 2009 [cited by examiner]
US 20090287837A1 · Felsher · 2009 [cited by applicant]
US 20100100740A1 · Ho · 2010 [cited by applicant]
US 20110307698A1 · Vanstone · 2011 [cited by applicant]
US 20120082312A1 · Liu et al. · 2012 [cited by applicant]
US 20120087493A1 · Chidambaram et al. · 2012 [cited by applicant]
US 20120221858A1 · Struik · 2012 [cited by applicant]
US 20120290830A1 · Resch et al. · 2012 [cited by applicant]
US 20120331287A1 · Bowman · 2012 [cited by examiner]
US 20130046976A1 · Rosati et al. · 2013 [cited by applicant]
US 20130262856A1 · Moshfeghi · 2013 [cited by examiner]
US 20130301828A1 · Gouget et al. · 2013 [cited by applicant]
US 20130311769A1 · Hayes · 2013 [cited by applicant]
US 20140165158A1 · Chan et al. · 2014 [cited by applicant]
US 20140281500A1 · Ignatchenko · 2014 [cited by applicant]
US 20140365776A1 · Smets et al. · 2014 [cited by applicant]
US 20150124961A1 · Lambert · 2015 [cited by examiner]
US 20150195278A1 · Plotkin · 2015 [cited by examiner]
US 20150200774A1 · Le Saint · 2015 [cited by examiner]
US 20150280923A1 · Camenisch et al. · 2015 [cited by applicant]
US 20160269403A1 · Koutenaei · 2016 [cited by examiner]
CN 1841997A · 2006 [cited by applicant]
CN 1878060A · 2006 [cited by applicant]
CN 103477585A · 2013 [cited by applicant]
CN 103621040A · 2014 [cited by applicant]
CN 104463576A · 2015 [cited by applicant]
CN 104506534A · 2015 [cited by applicant]
CN 107810617A · 2018 [cited by applicant]
CN 107852404A · 2018 [cited by applicant]
EP 1577736A2 · 2005 [cited by applicant]
EP 3318003 · 2018 [cited by applicant]
EP 3318043 · 2018 [cited by applicant]
RU 2202827C2 · 2003 [cited by applicant]
RU 2008101462A · 2009 [cited by applicant]
RU 2446606C1 · 2012 [cited by applicant]
WO 2013183940A1 · 2013 [cited by applicant]
WO 2016033610A1 · 2016 [cited by applicant]
WO 2017004466A1 · 2017 [cited by applicant]
WO 2017004470A1 · 2017 [cited by applicant]
U.S. Appl. No. 17/080,525 , Non-Final Office Action, Mailed on Feb. 14, 2023, 8 pages. [cited by applicant]
U.S. Appl. No. 17/080,525 , Notice of Allowance, Mailed on May 1, 2023, 6 pages. [cited by applicant]
U.S. Appl. No. 15/577,898 , “Corrected Notice of Allowability”, Jul. 29, 2020, 3 pages. [cited by applicant]
U.S. Appl. No. 15/577,898 , Non-Final Office Action, Mailed on Mar. 27, 2020, 35 pages. [cited by applicant]
U.S. Appl. No. 15/577,898 , Notice of Allowance, Mailed on Jun. 26, 2020, 11 pages. [cited by applicant]
U.S. Appl. No. 15/736,243 , Notice of Allowance, Mailed on Mar. 4, 2020, 18 pages. [cited by applicant]
U.S. Appl. No. 16/891,755 , “Corrected Notice of Allowability”, Feb. 16, 2022, 3 pages. [cited by applicant]
U.S. Appl. No. 16/891,755 , First Action Interview Pilot Program Pre-Interview Communication, Mailed on Nov. 10, 2021, 5 pages. [cited by applicant]
U.S. Appl. No. 16/891,755 , Notice of Allowance, Mailed on Jan. 14, 2022, 11 pages. [cited by applicant]
AU2016287728 , “First Examination Report”, Dec. 13, 2019, 3 pages. [cited by applicant]
AU2016287732 , “First Examination Report”, Feb. 3, 2020, 4 pages. [cited by applicant]
Application No. CN201680038929.0 , Notice of Decision to Grant, Mailed on May 27, 2021, 6 pages. [cited by applicant]
Application No. CN201680038929.0 , Office Action, Mailed on Nov. 30, 2020, 14 pages. [cited by applicant]
Application No. CN201680038929.0 , Office Action, Mailed on Apr. 20, 2020, 24 pages. [cited by applicant]
Application No. CN202110920135.X , Office Action, Mailed on Nov. 22, 2022, 15 pages. [cited by applicant]
Application No. CN202110920135.X , Office Action, Mailed on Apr. 11, 2023, 17 pages. [cited by applicant]
Duncan et al., “Blinded Diffie-Hellman”, ECCV 2016 Conference, Lecture Notes in Computer Science, Springer International Publishing, Dec. 16, 2014, pp. 79-92. [cited by applicant]
Application No. EP16818853.0 , Extended European Search Report, Mailed on Jan. 23, 2019, 10 pages. [cited by applicant]
Application No. EP16818853.0 , Notice of Decision to Grant, Mailed on Feb. 24, 2022, 2 pages. [cited by applicant]
Application No. EP16818853.0 , Office Action, Mailed on Feb. 27, 2020, 6 pages. [cited by applicant]
EP16818853.0 , “Summons to Attend Oral Proceedings”, Apr. 7, 2021, 9 pages. [cited by applicant]
Application No. EP16818857.1 , Extended European Search Report, Mailed on May 14, 2018, 9 pages. [cited by applicant]
Application No. EP16818857.1 , Notice of Decision to Grant, Mailed on Aug. 20, 2020, 2 pages. [cited by applicant]
Application No. EP17207282.9 , Extended European Search Report, Mailed on May 29, 2018, 10 pages. [cited by applicant]
Application No. EP17207282.9 , Office Action, Mailed on Feb. 28, 2020, 4 pages. [cited by applicant]
Application No. EP17207282.9 , Office Action, Mailed on Apr. 30, 2021, 5 pages. [cited by applicant]
Application No. EP17207282.9 , Office Action, Mailed on Jan. 24, 2023, 5 pages. [cited by applicant]
Application No. EP22156874.4 , Extended European Search Report, Mailed on May 16, 2022, 9 pages. [cited by applicant]
Garrett et al., “Blinded Diffie-Hellman Preventing Eavesdroppers from Tracking Payments”, International Conference on Financial Cryptography and Data Security, Dec. 16, 2014, pp. 79-92. [cited by applicant]
Han et al., “Privacy-Preserving Transactions Protocol Using Mobile Agents with Mutual Authentication”, International Journal of Information Security and Privacy, vol. 1, No. 1, Jan. 2007, pp. 35-46 [cited by applicant]
Ndibanje et al., “Security Analysis and Improvements of Authentication and Access Control in the Internet of Things”, Sensors, vol. 14, No. 8, Aug. 13, 2014, pp. 14786-14805. [cited by applicant]
Application No. PCT/US2016/040586 , International Preliminary Report on Patentability, Mailed on Jan. 11, 2018, 14 pages. [cited by applicant]
Application No. PCT/US2016/040586 , International Search Report and Written Opinion, Mailed on Oct. 14, 2016, 15 pages. [cited by applicant]
Application No. PCT/US2016/040590 , International Preliminary Report on Patentability, Mailed on Jan. 11, 2018, 15 pages. [cited by applicant]
Application No. PCT/US2016/040590 , International Search Report and Written Opinion, Mailed on Sep. 12, 2016, 18 pages. [cited by applicant]
Application No. RU2018103181 , Office Action, Mailed on Dec. 30, 2019, 19 pages. [cited by applicant]
Application No. RU2018103183 , Office Action, Mailed on Dec. 17, 2019, 21 pages. [cited by applicant]
Application No. CN202110920135.X, Office Action, Mailed on Aug. 10, 2023, 15 pages. [cited by applicant]
Application No. CN202110920135.X , Office Action, Mailed on Nov. 29, 2023, with English Translation, 15 pages. [cited by applicant]
U.S. Appl. No. 17/710,587 , Non-Final Office Action, Mailed Jul. 15, 2024, 17 pages. [cited by applicant]
Overbeck , “A Step Towards QC Blind Signatures”, Cryptology ePrint Archive, 2009, 13 pages. [cited by applicant]
U.S. Appl. No. 17/710,587 , Final Office Action, Mailed On Dec. 30, 2024, 8 pages. [cited by applicant]