Data protection with translation

Patent metadata

Field	Value
Publication number	US-11276058-B2
Application number	US-201816171905-A
Country	US
Kind code	B2
Filing date	Oct 26, 2018
Priority date	Jan 5, 2012
Publication date	Mar 15, 2022
Grant date	Mar 15, 2022

Abstract

Systems and methods are disclosed in which data associated with a transaction are protected with encryption. At an access device, a PIN associated with a payment account may be encrypted with a first key derived from an initial key of the access device and sensitive data associated with the payment account may be encrypted with a second key derived from the initial key. At a secure module associated with a host server encrypted sensitive data of an authorization request message may be decrypted. The secure module associated with the host server can re-encrypt the sensitive data using a zone encryption key associated with a payment processing network. A translated authorization request message including the re-encrypted sensitive data can be transmitted by the merchant server to the payment processing network.

First claim

What is claimed is:

1. A method comprising:
receiving, by an access device of a merchant system, a personal identification number (PIN) and sensitive data associated with a transaction, the access device having a security module programmed with an initial key derived from a base derivation key that is associated with a key serial number;
encrypting, by the access device of the merchant system, the PIN using a first encryption key variant based on the initial key;
encrypting, by the access device of the merchant system, the sensitive data using a second encryption key variant based on the same initial key, the second encryption key variant being unique from the first encryption key variant;
obtaining, by a host processor of the merchant system, the key serial number and an authorization request message including the encrypted PIN and the encrypted sensitive data;
retrieving, by the host processor of the merchant system, the base derivation key using the key serial number;
deriving, by the host processor of the merchant system, the initial key from the base derivation key, and decryption keys from the initial key, wherein the decryption keys include a first decryption key variant corresponding to the first encryption key variant and a second decryption key variant corresponding to the second encryption key variant;
decrypting, by the host processor of the merchant system, the encrypted PIN with the first decryption key variant and the encrypted sensitive data with the second decryption key variant;
re-encrypting, by the host processor of the merchant system, the PIN and the sensitive data;
transmitting the re-encrypted PIN and the re-encrypted sensitive data to the a processing network; and
receiving an authorization response message from the processing network, the authorization response message indicating whether the transaction is approved based in part on verification of the PIN and the sensitive data.

2. The method of claim 1 , wherein the sensitive data further includes at least one of a cardholder name, a cardholder address, a primary account number (PAN), or discretionary data.

3. The method of claim 1 , wherein a subset of discretionary data remains unencrypted when discretionary data is included in encrypted sensitive data.

4. The method of claim 1 , wherein the encrypted sensitive data includes an encrypted primary account number (PAN), and the encrypted PAN is written to a PAN field of the authorization request message, wherein the encrypted PAN has the same format as an unencrypted PAN.

5. The method of claim 4 , wherein a subset of digits of the unencrypted PAN remain unencrypted in the encrypted PAN.

6. The method of claim 4 , wherein a first predetermined number of digits of the encrypted PAN are the same as the first predetermined number of digits of the unencrypted PAN and wherein a last predetermined number of digits of the encrypted PAN are the same as the last predetermined number of digits of the unencrypted PAN.

7. The method of claim 4 , further comprising calculating a value for a designated digit of the encrypted PAN such that the last digit of the unencrypted PAN has the same value as the last digit of the encrypted PAN, wherein the last digit of the unencrypted PAN is a valid check digit for the encrypted PAN.

8. The method of claim 4 , wherein an expiration date field of the authorization request message is overwritten with an altered expiration date to indicate that the PAN field of the authorization request message contains the encrypted PAN.

9. The method of claim 8 , wherein the altered expiration date is derived by adding a predetermined number of years to an expiration date associated with the PAN.

10. The method of claim 1 , wherein the PIN and the sensitive data are re-encrypted using different zone encryption keys associated with the processing network.

11. A system comprising:
a hardware access device programmed with an initial key derived from a base derivation key that is associated with a key serial number, and configured to perform a first set of operations for a transaction including:
encrypting a personal identification number (PIN) using a first encryption key variant based on the initial key; and
encrypting sensitive data using a second encryption key variant based on the same initial key, the second encryption key variant being unique from the first encryption key variant; and
a host processor, the host processor configured to perform a second set of operations including:
obtaining the key serial number and an authorization request message including the encrypted PIN and encrypted sensitive data;
retrieving the base derivation key using the key serial number;
deriving the initial key from the base derivation key, and decryption keys from the initial key, wherein the decryption keys include a first decryption key variant corresponding to the first encryption key variant and a second decryption key variant corresponding to the second encryption key variant;
decrypting the encrypted PIN and the encrypted sensitive data using the decryption keys;
re-encrypting the PIN and the sensitive data;
transmitting the re-encrypted PIN and the re-encrypted sensitive data to the a processing network; and
receiving an authorization response message from the processing network, the authorization response message indicating whether the transaction is approved based in part on verification of the PIN and the sensitive data.

12. The system of claim 11 , wherein the sensitive data further includes at least one of a cardholder name, a cardholder address, a primary account number (PAN), or discretionary data.

13. The system of claim 11 , wherein a subset of discretionary data remains unencrypted when discretionary data is included in encrypted sensitive data.

14. The system of claim 11 , wherein the encrypted sensitive data includes an encrypted primary account number (PAN), and the encrypted PAN is written to a PAN field of the authorization request message, wherein the encrypted PAN has the same format as an unencrypted PAN.

15. The system of claim 14 , wherein a subset of digits of the unencrypted PAN remain unencrypted in the encrypted PAN.

16. The system of claim 14 , wherein a first predetermined number of digits of the encrypted PAN are the same as the first predetermined number of digits of the unencrypted PAN and wherein a last predetermined number of digits of the encrypted PAN are the same as the last predetermined number of digits of the unencrypted PAN.

17. The system of claim 14 , wherein the last digit of the unencrypted PAN has the same value as the last digit of the encrypted PAN, wherein the last digit of the unencrypted PAN is a valid check digit for the encrypted PAN.

18. The system of claim 14 , wherein an expiration date field of the authorization request message is overwritten with an altered expiration date to indicate that the PAN field of the authorization request message contains the encrypted PAN.

19. The system of claim 18 , wherein the altered expiration date is derived by adding a predetermined number of years to an expiration date associated with the PAN.

20. The system of claim 11 , wherein the PIN and the sensitive data are re-encrypted using different zone encryption keys associated with the processing network.

Assignees

• Visa Int Service Ass

Inventors

• Powell Glenn
• Sheets John F
• Tait Paul
• Wagner Kim
• Koganti Krishna
• Perl Marc
• Rodriguez Hector
• Zloth Susan

Classifications

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• G07F7/1091

  Use of an encrypted form of the PIN · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title