Method, system, and computer program product for network bound proxy re-encryption and pin translation

Patent metadata

Field	Value
Publication number	US-2022044233-A1
Application number	US-202017421608-A
Country	US
Kind code	A1
Filing date	Jan 9, 2020
Priority date	Jan 9, 2019
Publication date	Feb 10, 2022
Grant date	—

Abstract

A method, system, and computer program product generate, with a payment network, a first value (a) and a second value (ga), the second value (ga) based on the first value (a) and a generator value (g); generate, with the payment network, a plurality of random merchant numbers (mi) for a respective plurality of merchant banks; determine, with the payment network, a merchant product (M) based on a product of the plurality of random merchant numbers (mi); generate, with the payment network, a public key (pki) based on the second value (ga), the merchant product (M), and the random merchant number (mi) and a random key (rki) based on the merchant product (M) and the random merchant number (mi) for each respective merchant bank; and communicate, with the payment network, the public key (pki) and the random key (rki) to at least one respective merchant bank.

First claim

1 . A computer-implemented method, comprising:
generating, with a payment network, a first value (a) and a second value (g a ), the second value (g a ) generated based on the first value (a) and a generator value (g); generating, with the payment network, a plurality of random merchant numbers (m i ) for a respective plurality of merchant banks; determining, with the payment network, a merchant product (M) based on a product of the plurality of random merchant numbers (m i ) for the respective plurality of merchant banks; generating, with the payment network, a public key (pk i ) based on the second value (g a ), the merchant product (M), and the random merchant number (m i ) and a random key (rk i ) based on the merchant product (M) and the random merchant number (m i ) for each respective merchant bank of the plurality of merchant banks; and communicating, with the payment network, the public key (pk i ) and the random key (rk i ) to at least one respective merchant bank.

2 . The computer-implemented method of claim 1 , further comprising:
generating, with the merchant bank, a plurality of random payment gateway numbers (p i ) for a respective plurality of payment gateways; and generating, with the merchant bank, a payment gateway public key based on the second value (g a ), the merchant product (M), and the random payment gateway number (p i ) and a payment gateway random key based on the random payment gateway number (p i ) for each respective payment gateway of the plurality of payment gateways.

3 . The computer-implemented method of claim 2 , further comprising:
generating, with the merchant bank, a plurality of terminal numbers (t i ) for a respective plurality of point-of-sale (POS) terminals; and generating, with the merchant bank, a terminal public key based on the second value (g a ), the merchant product (M), the random payment gateway number (p i ), and the terminal number (t i ) and a terminal random key based on the random payment gateway number (p i ) and the terminal number (t i ) for each respective POS terminal of the plurality of POS terminals.

4 . The computer-implemented method of claim 3 , further comprising:
communicating, with the merchant bank, the terminal public key and the terminal random key to at least one payment gateway; and communicating, with the at least one payment gateway, the terminal public key to at least one POS terminal.

5 . The computer-implemented method of claim 4 , further comprising:
generating, with the at least one POS terminal, a random number (r) for a transaction message (m) associated with a transaction; generating, with the at least one POS terminal, a first ciphertext associated with the transaction, the first ciphertext comprising:
(i) a first ciphertext value associated with the transaction message (m), the first ciphertext value encrypted based on the random number (r), a generator value (g), and the transaction message (m); and
ii) a second ciphertext value associated with the random number (r), the second ciphertext value encrypted based on the random number (r) and the terminal public key; and
communicating, with the POS terminal, the first ciphertext to the at least one payment gateway.

6 . The computer-implemented method of claim 5 , further comprising:
re-encrypting, with the at least one payment gateway, the second ciphertext value based on the terminal random key to transform the second ciphertext value to a re-encrypted second ciphertext value based on the second value (g a ), the merchant product (M), and the random number (r); and communicating, with the at least one payment gateway, the re-encrypted second ciphertext value and the first ciphertext value to the at least one merchant bank.

7 . The computer-implemented method of claim 6 , further comprising:
re-encrypting, with the at least one merchant bank, the re-encrypted second ciphertext value based on the random key (rk i ) to transform the re-encrypted second ciphertext value to a second re-encrypted second ciphertext value based on the second value (g a ), the merchant product (M), the merchant random number (m i ), and the random number (r); and communicating, with the at least one merchant bank, the second re-encrypted second ciphertext value and the first ciphertext value to the payment network.

8 . The computer-implemented method of claim 7 , further comprising:
decrypting, with the payment network, the first ciphertext value based on the second re-encrypted second ciphertext value, the merchant product (M), the merchant random number (m i ), and the first ciphertext value.

9 . A system, comprising:
a payment network including one or more processors, wherein the payment network is programmed and/or configured to:
generate a first value (a) and a second value (g a ), the second value (g a ) generated based on the first value (a) and a generator value (g);
generate a plurality of random merchant numbers (m i ) for a respective plurality of merchant banks;
determine a merchant product (M) based on a product of the plurality of random merchant numbers (m i ) for the respective plurality of merchant banks;
generate a public key (pk i ) based on the second value (g a ), the merchant product (M), and the random merchant number (m i ) and a random key (rk i ) based on the merchant product (M) and the random merchant number (m i ) for each respective merchant bank of the plurality of merchant banks; and
communicate the public key (pk i ) and the random key (rk i ) to at least one respective merchant bank.

10 . The system of claim 9 , wherein the merchant bank includes one or more processors, and
wherein the merchant bank is programmed and/or configured to:
generate a plurality of random payment gateway numbers (p i ) for a respective plurality of payment gateways; and
generate a payment gateway public key based on the second value (g a ), the merchant product (M), and the random payment gateway number (p i ) and a payment gateway random key based on the random payment gateway number (p i ) for each respective payment gateway of the plurality of payment gateways.

11 . The system of claim 10 , wherein the merchant bank is further programmed and/or configured to:
generate a plurality of terminal numbers (t i ) for a respective plurality of point-of-sale (POS) terminals; and generate a terminal public key based on the second value (g a ), the merchant product (M), the random payment gateway number (p i ), and the terminal number (t i ) and a terminal random key based on the random payment gateway number (p i ) and the terminal number (t i ) for each respective POS terminal of the plurality of POS terminals.

12 . The system of claim 11 , wherein the merchant bank is further programmed and/or configured to:
communicate the terminal public key and the terminal random key to at least one payment gateway, wherein the at least one payment gateway includes one or more processors, and wherein the at least one payment gateway is programmed and/or configured to: communicate the terminal public key to at least one POS terminal.

13 . The computer-implemented method of claim 12 , wherein the at least one POS terminal includes one or more processors, and
wherein the at least one POS terminal is programmed and/or configured to:
generate a random number (r) for a transaction message (m) associated with a transaction;
generate a first ciphertext associated with the transaction, the first ciphertext comprising:
(i) a first ciphertext value associated with the transaction message (m), the first ciphertext value encrypted based on the random number (r), a generator value (g), and the transac

Assignees

• Visa Int Service Ass

Inventors

• Gaddam Sivanarayana
• Watson Gaven James
• Sinha Rohit
• Mukherjee Pratyay

Classifications

• H04L9/0822

  using key encryption key · CPC title

• H04L9/3073

  involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing · CPC title

• G06Q20/108

  Remote banking, e.g. home banking · CPC title

• G06Q20/202

  Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR · CPC title

• G06Q20/3823 Primary

  combining multiple encryption tools for a transaction · CPC title