IP Library Granted Patent US 12,495,020
Granted Patent B2
US 12,495,020 · App. 17/802,515 · Granted Dec 9, 2025

Communication of sensitive data in restricted data channel

Inventors: Mehdi Collinge (Hainaut, BE); Omar Laazimani (London, GB); Alan Johnson (Maldon, GB)
Assignee: Mastercard International Incorporated
H04L63/0428H04L9/0819
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,495,020
App. No.
17/802,515
Granted
Dec 9, 2025
Kind
B2
Abstract

Communication of information relating to an event is described, where the information is contained in a data field. Methods of communicating and obtaining the information are described, together with suitable apparatus for performing these methods. One or more elements of information relating to the event are obtained and used to determine a cryptographic record of the event. A first set of places in the data field are filled by a combination of some or all of each of the elements together with time information associated with the event. The cryptographic record is used to fill a second set of places in the data record. On reception of a message including the data field, the data field can be resolved into the first set of places and the second set of places. The time information associated with the event can then be determined and used to establish the whole or partial elements of information that were combined with the time information to fill the first set of places. Whole elements of information are then established from any partial elements. When these elements are all established, they can be used to calculate cryptographic record data which can be matched against the cryptographic record from the second set of places in the data field to determine that the elements of information are correct.

Claims (40)

1 . A method comprising:

obtaining one or more elements of information relating to an event involving a payment card;

determining a cryptographic record of the event using the one or more elements of information;

combining at least one of the one or more elements with time information associated with a recordal of the event to generate a dynamic expiration date for the payment card; and

communicating a message including the cryptographic record and the dynamic expiration date to a validator, wherein the validator is configured to recover the one or more elements using the dynamic expiration date from the message and to validate that the one or more elements are correctly recovered by recalculating the cryptographic record from the one or more recovered elements and comparing the recalculated cryptographic record with the cryptographic record from the message.

2 . The method of claim 1 , wherein the event is a service instance.

3 . The method of claim 2 , wherein the service instance comprises generation of a transaction record or transaction credentials.

4 . The method of claim 1 , wherein the one or more elements comprise a transaction counter.

5 . The method of claim 1 , wherein the one or more elements comprise an unpredictable number.

6 . The method of claim 1 , wherein the one or more elements comprise a key identifier.

7 . The method of claim 6 , wherein a change in the key identifier is synchronised with a change in the time information.

8 . The method of claim 6 , wherein a key identified by the key identifier is used in the recalculating of the cryptographic record.

9 . The method of claim 1 , wherein the message further comprises one or more check bits for identification of the time information.

10 . A method comprising:

receiving a message relating to an event involving a payment card, wherein the message includes a cryptographic record and a dynamic expiration date associated with the payment card;

determining one or more elements of information relating to the event that had been combined with time information to generate the dynamic expiration date;

computing cryptographic record data from the one or more elements of information relating to the event;

comparing the computed cryptographic record data with the cryptographic record from the message; and

determining whether the one or more elements of information relating to the event are correct based on the comparison.

11 . The method of claim 10 , wherein determining the one or more elements of information relating to the event comprises determining whole elements of information relating to the event from any partial elements of information relating to the event.

12 . The method of claim 10 , wherein the event comprises generation of a transaction record or transaction credentials.

13 . The method of claim 10 , wherein the one or more elements of information comprise a transaction counter.

14 . The method of claim 10 , wherein the one or more elements of information comprise an unpredictable number.

15 . The method of claim 10 , wherein the one or more elements of information comprise a key identifier.

16 . The method of claim 15 , wherein a change in the key identifier is synchronised with a change in the time information.

17 . The method of claim 15 , wherein a key identified by the key identifier is used in the computing of the cryptographic record data.

18 . The method of claim 10 , wherein determining whether the one or more elements of information relating to the event are correct based on the comparison comprises:

if the computed cryptographic record data and the cryptographic record from the message do not match, varying the time information; and

using the varied time information to redetermine the one or more elements of information relating to the event that had been combined with the time information to generate the dynamic expiration date.

19 . The method of claim 10 , wherein determining whether the one or more elements of information relating to the event are correct based on the comparison comprises:

if the computed cryptographic record data and the cryptographic record from the message do not match, varying at least one of the one or more elements of information; and

recomputing and comparing the cryptographic record data corresponding to a predetermined plan based on the at least one varied element of information until there is a successful match between the recomputed cryptographic record data and the cryptographic record from the message.

20 . The method of claim 10 , wherein the message further comprises one or more check bits for identification of the time information, and wherein the one or more check bits are used to provide correct time information before determining the one or more elements of information relating to the event.

21 . A computing node comprising:

one or more processors; and

at least one memory comprising program instructions which, when executed by the one or more processors, cause the one or more processors to:

obtain one or more elements of information relating to an event involving a payment card;

determine a cryptographic record of the event using the one or more elements of information;

combine at least one of the one or more elements with time information associated with a recordal of the event to generate a dynamic expiration date for the payment card; and

communicate a message including the cryptographic record and the dynamic expiration date to a validator, wherein the validator is configured to recover the one or more elements using the dynamic expiration date from the message and to validate that the one or more elements are correctly recovered by recalculating the cryptographic record from the one or more recovered elements and comparing the recalculated cryptographic record with the cryptographic record from the message.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 25, 2022
From: COLLINGE, MEHDI; LAAZIMANI, OMAR; JOHNSON, ALAN
To: MASTERCARD INTERNATIONAL INCORPORATED
Reel/Frame 060905/0617 →
Priority Claims (1)
EP 20159634 · Feb 26, 2020 · regional
Continuity (1)
Related Publication 20230164122A1 · May 25, 2023
References Cited (179)
US 6000832A · Franklin · 1999 [cited by applicant]
US 6038549A · Davis · 2000 [cited by examiner]
US 6314519B1 · Davis · 2001 [cited by examiner]
US 6327578B1 · Linehan · 2001 [cited by applicant]
US 6434238B1 · Chaum et al. · 2002 [cited by applicant]
US 7027773B1 · McMillin · 2006 [cited by applicant]
US 7357309B2 · Ghosh · 2008 [cited by applicant]
US 7657748B2 · Gentry · 2010 [cited by applicant]
US 8720771B2 · MacKinnon · 2014 [cited by applicant]
US 9195984B1 · Spector · 2015 [cited by applicant]
US 9240986B1 · Ackerman · 2016 [cited by examiner]
US 9262651B2 · Paulsen · 2016 [cited by applicant]
US 9595030B2 · Ekselius · 2017 [cited by applicant]
US 9674892B1 · Li · 2017 [cited by examiner]
US 9741036B1 · Grassadonia · 2017 [cited by applicant]
US 9774401B1 · Borrill · 2017 [cited by applicant]
US 10496856B2 · Palermo · 2019 [cited by applicant]
US RE47894E · Wang · 2020 [cited by applicant]
US 10706400B1 · Puffer et al. · 2020 [cited by applicant]
US 10902423B2 · Radu et al. · 2021 [cited by applicant]
US 10963871B2 · Safak et al. · 2021 [cited by applicant]
US 11074564B2 · Gurunathan et al. · 2021 [cited by applicant]
US 11080697B2 · Lakka et al. · 2021 [cited by applicant]
US 11080713B2 · Kohli · 2021 [cited by applicant]
US 11093938B2 · Parekh · 2021 [cited by applicant]
US 11107078B2 · Mariappan et al. · 2021 [cited by applicant]
US 11157896B2 · Nwokolo et al. · 2021 [cited by applicant]
US 11301865B2 · Tang · 2022 [cited by applicant]
US 11468187B2 · Iyer · 2022 [cited by examiner]
US 11544781B2 · Dogin · 2023 [cited by applicant]
US 11941591B2 · Faith · 2024 [cited by examiner]
US 20040019571A1 · Hurwitz · 2004 [cited by applicant]
US 20060049258A1 · Piikivi · 2006 [cited by applicant]
US 20060219776A1 · Finn · 2006 [cited by applicant]
US 20060283960A1 · Top · 2006 [cited by applicant]
US 20070022058A1 · Labrou et al. · 2007 [cited by applicant]
US 20070125840A1 · Law et al. · 2007 [cited by applicant]
US 20080048036A1 · Matsumoto et al. · 2008 [cited by applicant]
US 20080065555A1 · Mullen · 2008 [cited by examiner]
US 20080071681A1 · Khalid · 2008 [cited by examiner]
US 20080208746A1 · Royyuru · 2008 [cited by applicant]
US 20090048971A1 · Hathaway et al. · 2009 [cited by applicant]
US 20090104888A1 · Cox · 2009 [cited by applicant]
US 20100033299A1 · Davis · 2010 [cited by applicant]
US 20100108758A1 · Smets · 2010 [cited by examiner]
US 20110022521A1 · Collinge et al. · 2011 [cited by applicant]
US 20110184867A1 · Varadarajan · 2011 [cited by applicant]
US 20110215159A1 · Jain · 2011 [cited by applicant]
US 20110238573A1 · Varadarajan · 2011 [cited by applicant]
US 20110264580A1 · Smets · 2011 [cited by examiner]
US 20120036360A1 · Bassu et al. · 2012 [cited by applicant]
US 20120116902A1 · Cardina et al. · 2012 [cited by applicant]
US 20130212007A1 · Mattsson · 2013 [cited by applicant]
US 20130212025A1 · Tanner · 2013 [cited by examiner]
US 20130262296A1 · Thomas et al. · 2013 [cited by applicant]
US 20130297508A1 · Belamant · 2013 [cited by applicant]
US 20140040139A1 · Brudnicki · 2014 [cited by applicant]
US 20140061302A1 · Hammad · 2014 [cited by applicant]
US 20140138435A1 · Khalid · 2014 [cited by applicant]
US 20140189359A1 · Marien · 2014 [cited by applicant]
US 20140191031A1 · Paulsen · 2014 [cited by applicant]
US 20140258135A1 · Park · 2014 [cited by applicant]
US 20140279556A1 · Priebatsch et al. · 2014 [cited by applicant]
US 20140358777A1 · Gueh · 2014 [cited by applicant]
US 20150032627A1 · Dill et al. · 2015 [cited by applicant]
US 20150032636A1 · Wedekind · 2015 [cited by applicant]
US 20150046339A1 · Wong · 2015 [cited by applicant]
US 20150112870A1 · Nagasundaram et al. · 2015 [cited by applicant]
US 20150137949A1 · Rofougaran et al. · 2015 [cited by applicant]
US 20150142673A1 · Nelsen et al. · 2015 [cited by applicant]
US 20150262180A1 · Hambleton · 2015 [cited by applicant]
US 20150269566A1 · Gaddam et al. · 2015 [cited by applicant]
US 20150294305A1 · Wang · 2015 [cited by applicant]
US 20150302390A1 · Huxham et al. · 2015 [cited by applicant]
US 20150310425A1 · Cacioppo · 2015 [cited by applicant]
US 20160065370A1 · Le Saint · 2016 [cited by applicant]
US 20160071095A1 · Foerster et al. · 2016 [cited by applicant]
US 20160117715A1 · Gross et al. · 2016 [cited by applicant]
US 20160217467A1 · Smets et al. · 2016 [cited by applicant]
US 20160224971A1 · Aabye · 2016 [cited by applicant]
US 20160307186A1 · Noe · 2016 [cited by applicant]
US 20170091758A1 · Kim et al. · 2017 [cited by applicant]
US 20170116605A1 · Unser · 2017 [cited by examiner]
US 20170178090A1 · Sarin · 2017 [cited by applicant]
US 20170330181A1 · Ortiz · 2017 [cited by applicant]
US 20170330184A1 · Sabt · 2017 [cited by applicant]
US 20170344974A1 · Britt · 2017 [cited by applicant]
US 20180005231A1 · Grassadonia et al. · 2018 [cited by applicant]
US 20180047016A1 · Sarin · 2018 [cited by applicant]
US 20180232734A1 · Smets et al. · 2018 [cited by applicant]
US 20180349907A1 · Dixon · 2018 [cited by applicant]
US 20190026716A1 · Anbukkarasu · 2019 [cited by applicant]
US 20190034929A1 · Tang et al. · 2019 [cited by applicant]
US 20190066097A1 · Mackie · 2019 [cited by applicant]
US 20190075094A1 · Clarke · 2019 [cited by applicant]
US 20190108462A1 · Deloo · 2019 [cited by applicant]
US 20190147449A1 · Cole · 2019 [cited by examiner]
US 20190188696A1 · Carpenter et al. · 2019 [cited by applicant]
US 20190196935A1 · Edwards · 2019 [cited by applicant]
US 20190205575A1 · Gardiner et al. · 2019 [cited by applicant]
US 20190213585A1 · Patni · 2019 [cited by applicant]
US 20190228408A1 · Sing · 2019 [cited by applicant]
US 20190253434A1 · Biyani et al. · 2019 [cited by applicant]
US 20190318345A1 · Kallugudde · 2019 [cited by applicant]
US 20190362339A1 · Gurunathan et al. · 2019 [cited by applicant]
US 20190370790A1 · Spector · 2019 [cited by applicant]
US 20190392411A1 · Jain et al. · 2019 [cited by applicant]
US 20200009454A1 · Kaiho et al. · 2020 [cited by applicant]
US 20200019961A1 · Silvestre · 2020 [cited by applicant]
US 20200027086A1 · Rao et al. · 2020 [cited by applicant]
US 20200160325A1 · Kim et al. · 2020 [cited by applicant]
US 20200219090A1 · Zarakas et al. · 2020 [cited by applicant]
US 20200265420A1 · Hamdan et al. · 2020 [cited by applicant]
US 20200302441A1 · Collinge et al. · 2020 [cited by applicant]
US 20200410483A1 · Dill et al. · 2020 [cited by applicant]
US 20210012322A1 · Manchanda · 2021 [cited by applicant]
US 20210065156A1 · Kadiwala et al. · 2021 [cited by applicant]
US 20210176060A1 · Kallugudde · 2021 [cited by applicant]
US 20210217005A1 · Mehrhoff et al. · 2021 [cited by applicant]
US 20210287211A1 · Aabye et al. · 2021 [cited by applicant]
US 20220122081A1 · Wagner et al. · 2022 [cited by applicant]
US 20230164122A1 · Collinge · 2023 [cited by examiner]
CN 101192295A · 2008 [cited by applicant]
DE 102011085537A1 · 2013 [cited by applicant]
EP 0919945A2 · 1999 [cited by applicant]
EP 2189934A2 · 2010 [cited by applicant]
EP 2390817A · 2011 [cited by applicant]
EP 3618403A1 · 2020 [cited by applicant]
JP 2008129890A · 2008 [cited by applicant]
JP 2008204248A · 2008 [cited by applicant]
KR 1020140008668A · 2014 [cited by applicant]
KR 101502460B1 · 2015 [cited by applicant]
KR 101679783B1 · 2016 [cited by applicant]
KR 20160140216A · 2016 [cited by applicant]
KR 20170058903A · 2017 [cited by applicant]
WO 1997046964A1 · 1997 [cited by applicant]
WO 2001099070A2 · 2001 [cited by applicant]
WO 2003038719A1 · 2003 [cited by applicant]
WO 2008059465A2 · 2008 [cited by applicant]
WO 2010070539A1 · 2010 [cited by applicant]
WO 2010099352A1 · 2010 [cited by applicant]
WO 2013050296A1 · 2013 [cited by applicant]
WO 2013155627A1 · 2013 [cited by applicant]
WO 2016123309A1 · 2016 [cited by applicant]
WO 2016161000A1 · 2016 [cited by applicant]
WO 2017007935A1 · 2017 [cited by applicant]
WO 2018031856A1 · 2018 [cited by applicant]
WO 2019136044A1 · 2019 [cited by applicant]
WO 2019161003A1 · 2019 [cited by applicant]
WO 2020243286A · 2020 [cited by applicant]
Extended European Search Report dated Jul. 30, 2020, pp. 1-8. [cited by applicant]
PCT International Search Report, Application No. PCT/GB2017/051818, dated Sep. 1, 2017, 2 pp. [cited by applicant]
EP Communication pursuant to Article 94 (3) EPC; 19184252.5; Aug. 25, 2022, pp. 1-7. [cited by applicant]
EP 19187159.9 European Summons to attend oral proceedings pursuant to Rule 155 (1) dated Jul. 29, 2022, pp. 1-10. [cited by applicant]
PCT International Search Report and Written Opinion; PCT/US2020-039521; Oct. 14, 2020. [cited by applicant]
EPO Office Action; EP 19187159.9; Jun. 8, 2021. [cited by applicant]
EPO Search Report; EP 19187159.9; Apr. 1, 20207. [cited by applicant]
Yingjiu, et al.; A Security-Enhanced One-Time Payment Scheme for Credit Card; 14th International Workshop on Research Issues on Data Engineering; Web Services for E-Commerce and E-Government Applications (RIDE'04); IEEE… [cited by applicant]
EMV MasterCard Contactless Transaction Flow, EMV Level 2 Kernels, https://www.level2kernel.com/emv-mastercard-contactless-transaction.html, 2021, pp. 1-3. [cited by applicant]
EMV Overview—Elavon Developer Portal, https://developer.elavon.com/na/docs/Viaconex/1.0.0/emv-integration-guide/3_emv_overview, 2022, pp. 1-33. [cited by applicant]
EMV, https://en.wikipedia.org/wiki/EMV, Wikipedia, Jan. 18, 2022 (last edited), pp. 1-26. [cited by applicant]
Tokenization (data security), https://en.wikipedia.org/wiki/Tokenization_(data_security), Wikipedia, Jan. 8, 2022 (last edited), pp. 1-8. [cited by applicant]
EMV Integrated Circuit Card Specifications for Payment Systems, Book 4 Cardholder, Attendant, and Acquirer Interface Requirements, Nov. 2011, pp. 1-154, EMC Version 4.3 Book 4. [cited by applicant]
A Guide to EMV Chip Technology, Nov. 2014, pp. 1-36, Version 2.0, EMVCo, LLC. [cited by applicant]
Field 55: ICC Data, Elavon Developer Portal, https://developer-eu.elavon.com/docs/eisop/field-descriptions/field-55-icc-data, 2021, pp. 1-11. [cited by applicant]
Terminal verification results, https://en.wikipedia.org/wiki/Terminal_verification_results, Wikipedia, Dec. 12, 2021 (last edited), pp. 1-3. [cited by applicant]
Smart card application protocol data unit, https://en.wikipedia.org/wiki/Smart_card_application_protocol_data_unit, Wikipedia, Aug. 24, 2021 (last edited), pp. 1-3. [cited by applicant]
O. Ogundele, et al.; “The Implementation of a Full EMV Smartcard for a Point-of-Sale Transaction,” World Congress on Internet Security (WorldCIS-2012), Guelph, ON, Canada, 2012, pp. 28-35. [cited by applicant]
EMVco Payment Account Reference (PAR): A Primer, Version 1.1, Secure Technology Alliance, Apr. 30, 2018, pp. 1-20. [cited by applicant]
PCT/SG2022/050327 Search Report and Written Opinion dated Dec. 23, 2022, pp. 1-20. [cited by applicant]
PCT/US2022/049771 International Search Report and Written Opinion dated Mar. 20, 2023, pp. 1-19. [cited by applicant]
PCT/US2020/040206I nternational Search Report and Written Opinion dated Oct. 21, 2020. [cited by applicant]
PCT/US2021/018344 International Search Report and Written Opinion dated May 27, 2021, pp. 1-11. [cited by applicant]
EP 20159634.3 Extended European Search Report dated Jul. 30, 2020, pp. 1-8. [cited by applicant]
PCT/US2021/042321 International Search Report and Written Opinion dated Nov. 11, 2021, pp. 1-11. [cited by applicant]
GB 2012833.6 Search Report dated Jan. 27, 2021, pp. 1-2. [cited by applicant]
PCT International Search Report and Written Opinion; PCT/US2021/047077; Dec. 14, 2021. [cited by applicant]
EP Search Report; EP 21858781.4; Jul. 12, 2024. [cited by applicant]
SG10202204968V Written Opinion dated Jan. 23, 2025, pp. 1-26. [cited by applicant]