Granted Patent B2

US 12,591,880 · App. 17/342,003 · Granted Mar 31, 2026

Inventors: Ayman Hammad (Pleasanton, CA); Patrick Faith (Pleasanton, CA)

Assignee: Visa U.S.A. Inc.

G06Q20/382G06Q20/085G06Q20/20G06Q20/3674G06Q20/3821G06Q20/3829G06Q20/385G06Q20/40G06Q20/401G06Q30/06G06Q20/105G06Q20/204G06Q2220/00H04L2209/56

Abstract

Claims (38)

1 . A method comprising:

generating, with an access device, an initial key in response to a special initialization interaction, wherein the special initialization interaction is different from a transaction associated with a purchase at least in that the special initialization interaction is initial with respect to later transactions associated with purchases;

storing the initial key at a key storage location, the initial key being associated with an identifier of the access device;

altering, by the access device, the initial key with a public key to form an altered key; and

sending, by the access device, the altered key and the identifier of the access device to a server computer,

wherein the altered key is changed to the initial key at the server computer and is stored with the identifier in a database in operative communication with the server computer, and wherein the initial key stored at the key storage location and in the database is used to alter and restore transaction data associated with multiple financial transactions that are conducted using the portable consumer device and other portable consumer devices with the access device, wherein the special initialization interaction comprises an initialization interaction occurring between the portable consumer device and the access device, and another initialization interaction occurring between the access device and the server computer, and wherein the storing, the altering, and the sending occur in response to the special initialization interaction.

2 . The method of claim 1 , wherein the portable consumer device is a payment card, and wherein the access device comprises a point of sale device.

3 . The method of claim 1 , wherein the identifier is a terminal ID.

4 . The method of claim 1 , wherein the altered key is an encrypted symmetric key that was encrypted using the public key.

5 . The method of claim 1 , further comprising:

sending, by the access device, an altered identifier based at least in part on the identifier, wherein sending the altered key and the altered identifier is part of the special initialization interaction.

6 . The method of claim 1 , wherein a host computer is coupled to the access device, and the public key is stored in the host computer.

7 . The method of claim 1 , wherein the altering comprises performing an encryption process, the access device being capable of performing the encryption process, and wherein the encryption process comprises elliptical curve cryptography.

8 . An access device comprising:

a processor; and

a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, with operations that cause the processor to:

generate an initial key in response to a special initialization interaction, wherein the special initialization interaction is different from a transaction associated with a purchase at least in that the special initialization interaction is initial with respect to later transactions associated with purchases;

store the initial key at a key storage location, the initial key being associated with an identifier of the access device;

alter the initial key with a public key to form an altered key; and

send the altered key and the identifier of the access device to a server computer, wherein the altered key is changed to the initial key at the server computer and is stored with the identifier in a database in operative communication with the server computer, and wherein the initial key stored at the key storage location and in the database is used to alter and restore transaction data associated with multiple financial transactions that are conducted using the portable consumer device and other portable consumer devices with the access device, wherein the special initialization interaction comprises an initialization interaction occurring between the portable consumer device and the access device, and another initialization interaction occurring between the access device and the server computer, and wherein the storing, the altering, and the sending occur in response to the special initialization interaction.

9 . The access device of claim 8 , wherein:

the access device is further configured to send an altered identifier based at least in part on the identifier; and

sending the altered key and the altered identifier is part of the special initialization interaction.

10 . The access device of claim 8 , wherein the portable consumer device is a payment card, and wherein the access device comprises a point of sale device.

11 . The access device of claim 8 , wherein the identifier is a terminal ID.

12 . The access device of claim 8 , wherein the altered key is an encrypted symmetric key that was encrypted using the public key.

13 . The access device of claim 8 , wherein a host computer is coupled to the access device, and the public key is stored in the host computer.

14 . The access device of claim 8 , wherein altering the initial key comprises performing an encryption process, the access device being capable of performing the encryption process, and wherein the encryption process comprises elliptical curve cryptography.

15 . A non-transitory computer readable medium storing specific computer-executable instructions that, when executed by a processor, cause the processor to:

generate an initial key in response to a special initialization interaction, wherein the special initialization interaction is different from a transaction associated with a purchase at least in that the special initialization interaction is initial with respect to later transactions associated with purchases;

store the initial key at a key storage location, the initial key being associated with an identifier of the access device;

alter the initial key with a public key to form an altered key; and

send the altered key and the identifier of the access device to a server computer, wherein the altered key is changed to the initial key at the server computer and is stored with the identifier in a database in operative communication with the server computer, and wherein the initial key stored at the key storage location and in the database is used to alter and restore transaction data associated with multiple financial transactions that are conducted using the portable consumer device and other portable consumer devices with the access device, wherein the special initialization interaction comprises an initialization interaction occurring between the portable consumer device and the access device, and another initialization interaction occurring between the access device and the server computer, and wherein the storing, the altering, and the sending occur in response to the special initialization interaction.

16 . The non-transitory computer readable medium of claim 15 , wherein the processor is further configured to store the altered key in the key storage location.

17 . The non-transitory computer readable medium of claim 15 , wherein the portable consumer device is a payment card, and wherein the access device comprises a point of sale device.

18 . The non-transitory computer readable medium of claim 15 , wherein a host computer is coupled to the access device, and the public key is stored in the host computer.

19 . The non-transitory computer readable medium of claim 15 , wherein the processor is configured to alter the initial key by performing an encryption process, the access device being capable of performing the encryption process, and wherein the encryption process comprises elliptical curve cryptography.

20 . The non-transitory computer readable medium of claim 15 , wherein the altered key is an encrypted symmetric key that was encrypted using the public key.

Continuity (7)

References Cited (161)