Secure and accurate provisioning system and method
A method and system for provisioning credentials is disclosed. The method includes receiving an encrypted data packet including a first passcode and credentials in encrypted form, and a second passcode. The second passcode is compared to a first passcode. If the passcodes match, then a server computer can transmit a token associated with the credentials to a service provider computer.
1 . A method comprising:
receiving, by a service provider computer from an authorizing computer, an encrypted data packet comprising credentials and a first passcode, the encrypted data packet is generated by encrypting an encryption result using the first passcode, wherein the encryption result is generated by encrypting the credentials and the first passcode using a first key of a first key set, wherein the first passcode is generated by the authorizing computer upon receiving a request for service from a user device;
receiving, by the service provider computer, a second passcode from the user device, wherein the second passcode is generated by the authorizing computer along with the first passcode upon receiving the request for service from the user device and thereafter sent by the authorizing computer to the user device;
transmitting, by the service provider computer, the second passcode and the encrypted data packet to a processing computer, to cause the processing computer to decrypt the encrypted data packet by first using the second passcode, and subsequently a second key of the first key set to obtain the credentials and the first passcode, compare the first passcode to the second passcode, and in response to a match of the first passcode and the second passcode, provide access data associated with the credentials to the service provider computer; and
receiving, by the service provider computer from the processing computer, the access data associated with the credentials.
2 . The method of claim 1 , wherein the encrypted data packet is a double encrypted data packet.
3 . The method of claim 1 , wherein the access data comprises a token.
4 . The method of claim 1 , wherein
the first key and the second key are symmetric keys.
5 . A service provider computer comprising:
a processor; and
a computer readable medium, coupled to the processor, the computer readable medium comprising code, executable by the processor to implement a method including:
receiving, from an authorizing computer, an encrypted data packet comprising credentials and a first passcode, the encrypted data packet is generated by encrypting an encryption result using the first passcode, wherein the encryption result is generated by encrypting the credentials and the first passcode using a first key of a first key set, wherein the first passcode is generated by the authorizing computer upon receiving a request for service from a user device;
receiving a second passcode from the user device, wherein the second passcode is generated by the authorizing computer along with the first passcode upon receiving the request for service from the user device and thereafter sent by the authorizing computer to the user device;
transmitting the second passcode and the encrypted data packet to a processing computer, to cause the processing computer to decrypt the encrypted data packet by first using the second passcode, and subsequently a second key of the first key set to obtain the credentials and the first passcode, compare the first passcode to the second passcode, and in response to a match of the first passcode and the second passcode, provide access data associated with the credentials to the service provider computer; and
receiving, from the processing computer, the access data associated with the credentials.
6 . The service provider computer of claim 5 , wherein the encrypted data packet is a double encrypted data packet.
7 . The service provider computer of claim 5 , wherein the access data comprises a token.
8 . The service provider computer of claim 5 , wherein
the first key and the second key are symmetric keys.
9 . A method comprising:
receiving, by a processing computer, from a service provider computer, an encrypted data packet comprising credentials and a first passcode in an encrypted form, and a second passcode, the encrypted data packet is generated by encrypting an encryption result using the first passcode, wherein the encryption result is generated by encrypting the credentials and the first passcode using a first key of a first key set, wherein the first passcode is generated by an authorizing computer upon receiving a request for service from a user device and sent by the authorizing computer to the service provider computer, wherein the second passcode is generated by the authorizing computer along with the first passcode upon receiving the request for service from the user device and sent by the authorizing computer to the user device, and wherein the second passcode is thereafter sent by the user device to the service provider computer;
decrypting, by the processing computer, the encrypted data packet by first using the second passcode, and subsequently a second key of the first key set to obtain the credentials and the first passcode;
comparing, by the processing computer, the first passcode to the second passcode;
determining, by the processing computer that the first passcode and the second passcode match; and
transmitting, by the processing computer, access data associated with the credentials to the service provider computer.
10 . The method of claim 9 , wherein the service provider computer is a Web server computer that operates a Website.
11 . The method of claim 9 , wherein the encrypted data packet is double encrypted data packet.
12 . The method of claim 11 , wherein the decrypting the double encrypted data packet further comprises decrypting the double encrypted data packet with the second passcode to form a single encrypted data packet, and then decrypting the single encrypted data packet with the second key.
13 . The method of claim 11 , wherein the access data comprises a token.