System and method for secure transaction
View Patent ↗Systems and methods for performing a secure transaction provided. In one embodiment, the method includes: reading data on a command token, reading data on a token; encrypting the token data with a key; encrypting an authentication data with a clear text token data; and transmitting the encrypted authentication data with the encrypted token data to a remote device.
1. A method for encrypting token data for a transaction comprising:
reading clear text token data from a token;
encrypting the clear text token data using a key, the encrypting comprising:
defining a first portion and a second portion of the clear text token data, encrypting the second portion using the key, and
encrypting the first portion using the encrypted second portion using while preserving the second portion as unencrypted to generate an encrypted token data, the encrypted token data comprising an encrypted first portion and an unencrypted second portion and having the same format as the clear text token data;
encrypting authentication data using the encrypted first portion; and
transmitting the encrypted authentication data and the encrypted token data to a remote device.
2. The method of claim 1 , wherein the token is a magnetic stripe card.
3. The method of claim 1 , further comprising:
receiving a confirmation from the remote device that the encrypted token data is correct.
4. The method of claim 1 , wherein the first portion comprises an account number.
5. The method of claim 1 , wherein the step of encrypting the first portion using the encrypted second portion comprises applying the encrypted second portion to the first portion using mod 10 addition.
6. The method of claim 5 , wherein the clear text token data comprises a mod 10 check digit.
7. The method of claim 5 , the encrypting further comprising the operations of:
determining a digit that can be inserted into the encrypted token data to cause a modulo 10 arithmetic check of the encrypted token data to yield the same result as a modulo 10 arithmetic check would yield on the clear text token data; and
inserting the digit into the encrypted token data.
8. A transactional device comprising:
a first secure module configured to read clear text token data from a token and to encrypt the token data using a key, the encrypting comprising:
defining a first portion and a second portion of the clear text token data;
encrypting the second portion using the key, and encrypting the first portion using the encrypted second portion while preserving the second portion as unencrypted to generate, an encrypted token data, the encrypted token data comprising an encrypted first portion and an unencrypted second portion and having the same format as the clear text token data; and
a second secure module configured to receive the encrypted token data from the first secure module, to encrypt authentication data using the encrypted first portion, and to transmit transmitting the encrypted authentication data and the encrypted token data to a remote device.
9. The transactional device of claim 7 , wherein the token is a magnetic stripe card.
10. The transactional device of claim 8 , wherein the first portion comprises an account number.
11. The transactional device of claim 8 , wherein the step of encrypting the first portion using the encrypted second portion comprises applying the encrypted second portion to the first portion using mod 10 addition.
12. The transactional device of claim 11 , wherein the clear text token data comprises a mod 10 check digit.
13. The transactional device of claim 11 , wherein the first secure module encrypts the clear text token data by further performing:
determining a digit that can be inserted into the encrypted token data to cause a modulo 10 arithmetic check of the encrypted token data to yield the same result as a modulo 10 arithmetic check would yield on the clear text token data; and
inserting the digit into the encrypted token data.
14. A computer program product comprising a non-transitory computer useable medium having computer program code embodied therein for enabling a computing device to perform a method for encrypting token data for a transaction, the method comprising:
reading clear text token data from a token;
encrypting the clear text token data using a key, the encrypting comprising:
defining a first portion and a second portion of the clear text token data, encrypting the second portion using the key, and
encrypting the first portion using the encrypted second portion while preserving the second portion as unencrypted to generate an encrypted token data, the encrypted token data comprising an encrypted first portion and an unencrypted second portion, wherein the encrypted token data and having the same format as the clear text token data; and encrypting authentication data using the encrypted first portion; and
transmitting the encrypted authentication data and the encrypted token data to a remote device.
15. The computer program product of claim 14 , wherein the token is a magnetic stripe card.
16. The computer program product of claim 14 , wherein the first portion comprises an account number.
17. The computer program product of claim 14 , wherein the step of encrypting the first portion using the encrypted second portion comprises applying the encrypted second portion to the first portion using mod 10 addition.
18. The computer program product of claim 17 , wherein the clear text token data comprises a mod 10 check digit.
19. The computer program product of claim 18 , the encrypting further comprising the operations of:
determining a digit that can be inserted into the encrypted token data to cause a modulo 10 arithmetic check of the encrypted token data to yield the same result as a modulo 10 arithmetic check would yield on the clear text token data; and
inserting the digit into the encrypted token data.