Electronic system and computerized method for verification of transacting parties to process transactions

Patent metadata

Field	Value
Publication number	US-11715100-B2
Application number	US-202017117873-A
Country	US
Kind code	B2
Filing date	Dec 10, 2020
Priority date	Dec 11, 2019
Publication date	Aug 1, 2023
Grant date	Aug 1, 2023

Abstract

The present disclosure generally relates to electronic systems and computerized methods for verification of transacting parties to process transactions. A payment network server receives details of a transaction fulfilled by an agent and generates a transaction identification plaintext. A first party keyset for the first transacting party and an agent keyset for the agent is identified. The server generates cryptograms and ciphertexts encrypted by the first party keyset and agent keyset and sends the cryptograms to the first transacting party and agent. An encrypted cryptogram contains an encrypted ciphertext which contains a plaintext representing the transaction identification plaintext. The ciphertexts are exchanged between the first transacting party and agent by a computer handshake for decryption. The plaintexts are extracted from the ciphertexts and compared against the transaction identification plaintext for verifying the first transacting party and agent.

First claim

The invention claimed is:

1. A computerized method for verification of transacting parties to process transactions, the method performed by a payment network server and comprising:
receiving, from an application server, details of a transaction comprising identification data of a first transacting party of the transaction, a second transacting party of the transaction, and an agent to fulfill the transaction;
generating an identification plaintext for the transaction;
identifying a first party keyset pre-generated for the first transacting party based on the identification data thereof;
identifying an agent keyset pre-generated for the agent based on the identification data thereof;
generating a first party cryptogram encrypted using the first party keyset, the first party cryptogram comprising a first party ciphertext encrypted using the agent keyset, the first party ciphertext comprising a first party plaintext representing the transaction identification plaintext;
generating a first agent cryptogram encrypted using the agent keyset, the first agent cryptogram comprising a first agent ciphertext encrypted using the first party keyset, the first agent ciphertext comprising a first agent plaintext representing the transaction identification plaintext;
communicating, to the application server, the transaction identification plaintext and the first party cryptogram for the application server to communicate to a first electronic device of the first transacting party, the first party cryptogram decryptable using the first party keyset to extract the first party ciphertext;
communicating, to an agent server, the transaction identification plaintext and the first agent cryptogram for the agent server to communicate to an electronic device of the agent, the first agent cryptogram decryptable using the agent keyset to extract the first agent ciphertext;
receiving, from the application server, a first party message after the first electronic device has received the first agent ciphertext from the agent electronic device, the first agent ciphertext decryptable using the first party keyset to extract the first agent plaintext;
receiving, from the agent server, a first agent message after the agent electronic device has received the first party ciphertext from the first electronic device, the first party ciphertext decryptable using the agent keyset to extract the first party plaintext; and
verifying the first transacting party and agent to facilitate fulfillment of the transaction,
wherein said verifying of the first transacting party is based on comparison of the first party plaintext extracted from the first party ciphertext against the transaction identification plaintext communicated with the first agent cryptogram; and
wherein said verifying of the agent is based on comparison of the first agent plaintext extracted from the first agent ciphertext against the transaction identification plaintext communicated with the first party cryptogram.

2. The method according to claim 1 ,
wherein the first party message indicates that the first electronic device has extracted the first agent plaintext from the first agent ciphertext and has compared the first agent plaintext against the transaction identification plaintext received with the first party cryptogram;
wherein the first agent message indicates that the agent electronic device has extracted the first party plaintext from the first party ciphertext and has compared the first party plaintext against the transaction identification plaintext received with the first agent cryptogram; and
wherein the first transacting party and agent are verified based on the first party message and first agent message.

3. The method according to claim 1 , further comprising performing a security registration process comprising:
receiving, from the application server, a registration request for the first transacting party and comprising identification data of the first electronic device;
receiving, from the agent server, a registration request for the agent and comprising identification data of the agent electronic device;
generating the first party keyset based on the identification data of the first electronic device;
generating the agent keyset based on the identification data of the agent electronic device;
communicating, to the application server, the first party keyset for the application server to communicate to the first electronic device;
communicating, to the agent server, the agent keyset for the agent server to communicate to the agent electronic device.

4. The method according to claim 1 ,
wherein the agent is a transport vehicle for fulfilling the transaction between the first transacting party and the second transacting party;
wherein the first transacting party is a user and the second transacting party is a transport service provider of the transport vehicle; and
wherein the transaction relates to a reservation of the transport vehicle for the user.

5. The method according to claim 4 , further comprising, after verifying the user and the transport vehicle, processing payment of the transaction using a payment token associated with a payment instrument of the user.

6. The method according to claim 1 , further comprising:
identifying a second party keyset pre-generated for the second transacting party based on the identification data thereof;
generating a second party cryptogram encrypted using the second party keyset, the second party cryptogram comprising a second party ciphertext encrypted using the agent keyset, the second party ciphertext comprising a second party plaintext representing the transaction identification plaintext;
generating a second agent cryptogram encrypted using the agent keyset, the second agent cryptogram comprising a second agent ciphertext encrypted using the second party keyset, the second agent ciphertext comprising a second agent plaintext representing the transaction identification plaintext;
communicating, to the application server, the transaction identification plaintext and the second party cryptogram for the application server to communicate to a second electronic device of the second transacting party, the second party cryptogram decryptable using the second party keyset to extract the second party ciphertext;
communicating, to the agent server, the second agent cryptogram for the agent server to communicate to the agent electronic device, the second agent cryptogram decryptable using the agent keyset to extract the second agent ciphertext;
receiving, from the application server, a second party message after the second electronic device has received the second agent ciphertext from the agent electronic device, the second agent ciphertext decryptable using the second party keyset to extract the second agent plaintext;
receiving, from the agent server, a second agent message after the agent electronic device has received the second party ciphertext from the second electronic device, the second party ciphertext decryptable using the agent keyset to extract the second party plaintext;
verifying the second transacting party and agent to facilitate fulfillment of the transaction,
wherein said verifying of the second transacting party is based on comparison of the second party plaintext extracted from the second party ciphertext against the transaction identification plaintexts communicated with the second agent cryptogram; and
wherein said verifying of the agent is based on comparison of the second agent plaintext extracted from the second agent ciphertext against the transaction identification plaintext communicated with the second party cryptogram.

7. The method according to claim 6 ,
wherein the first party message indicates that the first electronic device has extract

Assignees

• Mastercard Asia Pacific Pte Ltd

Inventors

• Lian Shiying
• Wang Xijing
• Joyson Bensam
• Sharma Anupam
• Fang Hui
• Huang Donghao
• Pathrabe Dipali
• Manchanda Lalit

Classifications

• G06Q20/3829 Primary

  involving key management · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title

• G06Q20/42

  Confirmation, e.g. check or permission by the legal debtor of payment · CPC title

• H04L9/0618

  Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation · CPC title