Secure processing of central bank digital currency (CBDC) card payments

Patent metadata

Field	Value
Publication number	US-12591870-B2
Application number	US-202318347513-A
Country	US
Kind code	B2
Filing date	Jul 5, 2023
Priority date	Jan 13, 2023
Publication date	Mar 31, 2026
Grant date	Mar 31, 2026

Abstract

Central bank digital currency (CBDC) tokens are used for payment in a transaction initiated by a payment card at an acquirer's point-of-sale. To facilitate these transactions, a card issuer node in a distributed ledger environment receives a payment message from a payment terminal. The payment message, comprising a request to conduct a CBDC-based transaction, contains a signature transmitted to the payment terminal by a payment card. The card issuer node generates a signature data structure that contains the signature. The card issuer node also generates a transaction message containing components of the transaction, such as a number of tokens to be transferred, a current owner of the tokens to be transferred, an intended acquirer of the tokens, a currency type of the tokens, and/or instructions for validating the transaction. The transaction is validated based at least in part on the signature data structure in the transaction message.

First claim

We claim:

1 . A method for conducting a transaction using a central bank digital currency (CBDC), the method comprising:
receiving, at a card issuer node in a distributed ledger environment, from a payment terminal, a payment message,
wherein the payment message contains a signature transmitted to the payment terminal by a payment card,
wherein the payment message contains a terminal signature of the payment terminal,
wherein the payment message contains an acquirer identity,
wherein the payment message comprises a request to conduct the transaction, and
wherein the payment card is associated with a payer account that holds one or more tokens of a CBDC, the one or more tokens to be transferred in the transaction from the payer account to a payee account;
accessing, by the card issuer node, a payee public key associated with an acquirer associated with the acquirer identity; generating, by the card issuer node, a signature data structure containing a representation of the signature,
wherein the signature data structure is generated as a unique state on a ledger of the distributed ledger environment, and
wherein the unique state is consumed as part of the transaction; and
generating, by the card issuer node, a transaction message that includes the signature data structure,
wherein the transaction is validated based on the signature data structure and verifying the terminal signature using the payee public key.

2 . The method of claim 1 , further comprising:
upon receiving, at the card issuer node, an indication that the transaction is validated, returning a response to the payment terminal to authorize the transaction.

3 . The method of claim 1 , wherein the signature is based on a private key of a public key/private key pair stored on the payment card, and wherein validating the transaction based on the signature data structure comprises verifying that the signature data structure contains a signature that matches a private key associated with a current owner of the one or more tokens to be transferred in the transaction.

4 . The method of claim 3 , wherein the payment message further contains a primary account number, and wherein the method further comprises:
retrieving, by the card issuer node, a public key associated with the payer account using the primary account number; wherein generating the transaction message further comprises adding the public key associated with the payer account to the transaction message; and wherein verifying that the signature data structure contains the signature that matches the private key associated with the current owner comprises verifying the signature using the public key associated with the payer account.

5 . The method of claim 1 :
wherein generating the transaction message comprises assigning a transaction identifier to the transaction; and wherein the signature data structure is issued, on a ledger used to record details of the transaction, as an input state to the transaction associated with the transaction identifier.

6 . The method of claim 5 , wherein assigning the transaction identifier comprises:
generating a unique, deterministic value for the transaction identifier.

7 . The method of claim 6 , wherein generating the unique, deterministic value for the transaction identifier comprises:
generating a hash value representing components of the transaction message; and applying a constant privacy salt to the hash value.

8 . The method of claim 5 , wherein validation of the transaction is based on reconstruction of the transaction message by a verification function and verification that an identifier of the reconstructed transaction message matches the transaction identifier of the transaction.

9 . The method of claim 1 , wherein the terminal signature is generated using a private key stored in the payment terminal.

10 . The method of claim 1 , wherein the payment message further contains a payment amount, and wherein validation of the transaction is based in part on a determination that the payment amount is less than a value of the one or more tokens held in the payer account.

11 . The method of claim 1 , wherein the payment card is a Europay-Mastercard-Visa (EMV) card, and wherein the payment message is an ISO-8583 message.

12 . The method of claim 11 , wherein the signature is appended to data in tag 9F10 of field 55 of the ISO-8583 message.

13 . A system for conducting a transaction using a central bank digital currency (CBDC), the system comprising:
at least one hardware processor; and at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the system to:
receive, from a payment terminal, a payment message, wherein the payment message contains a signature transmitted to the payment terminal by a payment card,
wherein the payment message contains a terminal signature of the payment terminal,
wherein the payment message contains an acquirer identity,
wherein the payment message comprises a request to conduct the transaction, and
wherein the payment card is associated with a payer account that holds one or more tokens of a CBDC, the one or more tokens to be transferred in the transaction from the payer account to a payee account;

access a payee public key associated with an acquirer associated with the acquirer identity;
generate a signature data structure containing a representation of the signature,
wherein the signature data structure is generated as a unique state on a ledger of a distributed ledger environment, and
wherein the unique data state is consumed as part of the transaction; and

generate a transaction message that includes the signature data structure,
wherein the transaction is validated based on the signature data structure and verifying the terminal signature using the payee public key.

14 . The system of claim 13 , wherein the signature is based on a private key of a public key/private key pair stored on the payment card, and wherein validating the transaction based on the signature data structure comprises verifying that the signature data structure contains a signature that matches a private key associated with a current owner of the one or more tokens to be transferred in the transaction.

15 . The system of claim 14 :
wherein generating the transaction message comprises assigning a transaction identifier to the transaction; and wherein the signature data structure is issued, on a ledger used to record details of the transaction, as an input state to the transaction associated with the transaction identifier.

16 . The system of claim 15 , wherein the payment message further contains a primary account number, and wherein execution of the instructions further causes the system to:
retrieve a public key associated with the payer account using the primary account number,
wherein generating the transaction message further comprises adding the public key associated with the payer account to the transaction message, and
wherein verifying that the signature data structure contains the signature that matches the private key associated with the current owner comprises verifying the signature using the public key associated with the payer account.

17 . A non-transitory, computer-readable storage medium comprising instructions recorded thereon that, when executed by at least one processor of a system, cause the system to:
receive, from a payment terminal, a payment message,
wherein the payment message that contains a signature transmitted to the payment te

Assignees

• R3 Ltd
• The Central Bank Of The United Arab Emirates

Inventors

• Iliev Stefan
• Fytraki Sotiria
• Paunescu Bogdan Catalin
• Brown Richard G

Classifications

• G06Q20/4014

  Identity check for transactions · CPC title

• G06Q20/3827

  Use of message hashing · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/105

  involving programming of a portable memory device, e.g. IC cards, "electronic purses" · CPC title