CA2933336A1 - Procede et systeme pour generer une cle de stockage evoluee dans un dispositif mobile sans elements securises - Google Patents

Procede et systeme pour generer une cle de stockage evoluee dans un dispositif mobile sans elements securises Download PDF

Info

Publication number
CA2933336A1
CA2933336A1 CA2933336A CA2933336A CA2933336A1 CA 2933336 A1 CA2933336 A1 CA 2933336A1 CA 2933336 A CA2933336 A CA 2933336A CA 2933336 A CA2933336 A CA 2933336A CA 2933336 A1 CA2933336 A1 CA 2933336A1
Authority
CA
Canada
Prior art keywords
mobile device
application program
key
payment
program
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA2933336A
Other languages
English (en)
Other versions
CA2933336C (fr
Inventor
Mehdi Collinge
Cristian Radu
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Mastercard International Inc
Original Assignee
Mastercard International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mastercard International Inc filed Critical Mastercard International Inc
Publication of CA2933336A1 publication Critical patent/CA2933336A1/fr
Application granted granted Critical
Publication of CA2933336C publication Critical patent/CA2933336C/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/45—Structures or tools for the administration of authentication
    • G06F21/46—Structures or tools for the administration of authentication by designing passwords or checking the strength of passwords
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/326—Payment applications installed on the mobile devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821—Electronic credentials
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Storage Device Security (AREA)
  • Cash Registers Or Receiving Machines (AREA)
  • Telephone Function (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

L'invention concerne un procédé de création de clé de stockage évoluée consistant à stocker, dans la mémoire d'un dispositif mobile, au moins (i) des informations de dispositif associées au dispositif mobile, (ii) un code de programme associé à un premier programme, le code incluant un identifiant d'instance, et (iii) un code de programme associé à un second programme, le code incluant une première clé ; à générer une empreinte de dispositif associée au dispositif mobile basée sur les informations de dispositif par l'intermédiaire de l'exécution du code associé au premier programme ; à générer une valeur aléatoire par exécution du code associé au premier programme ; à créer une valeur de diversifiant basée sur l'empreinte de dispositif générée, la valeur aléatoire générée et l'identifiant d'instance étant inclus dans le code associé au premier programme ; et à décrypter la valeur du diversifiant créée au moyen de la première clé stockée dans le code associé au second programme par exécution du code associé au second programme afin d'obtenir une clé de stockage.
CA2933336A 2014-04-14 2014-12-02 Procede et systeme pour generer une cle de stockage evoluee dans un dispositif mobile sans elements securises Active CA2933336C (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US201461979113P 2014-04-14 2014-04-14
US61/979,113 2014-04-14
PCT/US2014/068000 WO2015160385A1 (fr) 2014-04-14 2014-12-02 Procédé et système pour générer une clé de stockage évoluée dans un dispositif mobile sans éléments sécurisés

Publications (2)

Publication Number Publication Date
CA2933336A1 true CA2933336A1 (fr) 2015-10-22
CA2933336C CA2933336C (fr) 2018-09-04

Family

ID=54324415

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2933336A Active CA2933336C (fr) 2014-04-14 2014-12-02 Procede et systeme pour generer une cle de stockage evoluee dans un dispositif mobile sans elements securises

Country Status (14)

Country Link
EP (1) EP3132406A4 (fr)
JP (3) JP6224254B2 (fr)
KR (3) KR102151579B1 (fr)
CN (2) CN106104605B (fr)
AU (3) AU2014391256B2 (fr)
CA (1) CA2933336C (fr)
IL (1) IL246109B (fr)
MX (1) MX356939B (fr)
NZ (1) NZ721223A (fr)
RU (2) RU2653290C1 (fr)
SG (2) SG10201801008SA (fr)
UA (1) UA117951C2 (fr)
WO (1) WO2015160385A1 (fr)
ZA (1) ZA201603938B (fr)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020176870A1 (fr) * 2019-02-28 2020-09-03 Nok Nok Labs, Inc. Système et procédé pour approuver un nouvel authentifiant
US10769635B2 (en) 2016-08-05 2020-09-08 Nok Nok Labs, Inc. Authentication techniques including speech and/or lip movement analysis
US11792024B2 (en) 2019-03-29 2023-10-17 Nok Nok Labs, Inc. System and method for efficient challenge-response authentication
US11831409B2 (en) 2018-01-12 2023-11-28 Nok Nok Labs, Inc. System and method for binding verifiable claims
US11868995B2 (en) 2017-11-27 2024-01-09 Nok Nok Labs, Inc. Extending a secure key storage for transaction confirmation and cryptocurrency
US11929997B2 (en) 2013-03-22 2024-03-12 Nok Nok Labs, Inc. Advanced authentication techniques and applications

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11521203B2 (en) * 2015-07-09 2022-12-06 Cryptography Research, Inc. Generating a cryptographic key based on transaction data of mobile payments
JP2017175226A (ja) * 2016-03-18 2017-09-28 株式会社インテック 公開鍵証明書を発行するためのプログラム、方法およびシステム
EP3340094B1 (fr) * 2016-12-22 2021-04-28 Mastercard International Incorporated Procede de renouvellement de whitebox cryptographique en vertu de la nouvelle cle publique et de l'ancien identificateur
EP3364329B1 (fr) * 2017-02-21 2023-07-26 Mastercard International Incorporated Architecture de sécurité pour des applications de dispositif
CN108804908B (zh) * 2017-05-04 2023-05-09 腾讯科技（深圳）有限公司 一种设备指纹生成方法、装置及计算设备
CN107908948B (zh) * 2017-11-01 2019-11-19 中国移动通信集团江苏有限公司 一种应用于安全风险控制的安卓app设备指纹生成方法
CN109068304A (zh) * 2018-08-07 2018-12-21 佛山市苔藓云链科技有限公司 一种使用近场通信验证物联网设备真实的方法
US11258604B2 (en) * 2018-10-19 2022-02-22 Oracle International Corporation Rewiring cryptographic key management system service instances
JP7127585B2 (ja) * 2019-03-12 2022-08-30 オムロン株式会社 セーフティシステムおよびメンテナンス方法
US11783332B2 (en) 2020-02-14 2023-10-10 Mastercard International Incorporated Method and system for facilitating secure card-based transactions
EP3933730A1 (fr) * 2020-06-30 2022-01-05 Mastercard International Incorporated Sélection de compte de paiement en temps réel
EP3933731A1 (fr) * 2020-06-30 2022-01-05 Mastercard International Incorporated Traitement des données d'autorisation pour plusieurs émetteurs
US11784798B2 (en) 2021-03-30 2023-10-10 Visa International Service Association System, method, and computer program product for data security
CN115396103B (zh) * 2022-10-26 2023-03-24 杭州海康威视数字技术股份有限公司 基于白盒密钥的ai数据共享方法、系统和装置

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7606771B2 (en) * 2001-01-11 2009-10-20 Cardinalcommerce Corporation Dynamic number authentication for credit/debit cards
CN100489594C (zh) * 2005-01-07 2009-05-20 Limo专利管理有限公司及两合公司 用于光的均匀化的装置
KR100842267B1 (ko) * 2006-12-01 2008-06-30 한국전자통신연구원 다중 인증 수단을 가지는 시스템의 통합 사용자 인증 서버,클라이언트 및 방법
JP2009284231A (ja) * 2008-05-22 2009-12-03 Panasonic Corp 鍵生成装置、鍵生成方法及び鍵生成プログラム、並びに、電子機器
US8555089B2 (en) * 2009-01-08 2013-10-08 Panasonic Corporation Program execution apparatus, control method, control program, and integrated circuit
US8893967B2 (en) * 2009-05-15 2014-11-25 Visa International Service Association Secure Communication of payment information to merchants using a verification token
SG183988A1 (en) * 2010-04-09 2012-10-30 Visa Int Service Ass System and method for securely validating transactions
US8380177B2 (en) * 2010-04-09 2013-02-19 Paydiant, Inc. Mobile phone payment processing methods and systems
WO2012021864A2 (fr) * 2010-08-12 2012-02-16 Mastercard International, Inc. Portefeuille utilisant des canaux de commerce multiples pour effectuer des transactions authentifiées
US20120151223A1 (en) * 2010-09-20 2012-06-14 Conde Marques Ricardo Nuno De Pinho Coelho Method for securing a computing device with a trusted platform module-tpm
US8746553B2 (en) * 2010-09-27 2014-06-10 Mastercard International Incorporated Purchase Payment device updates using an authentication process
JP5867752B2 (ja) 2010-11-10 2016-02-24 イーイノベーションズ ホールディングス ピーティーイー リミテッド セキュアでない公衆通信基盤を介して金融トランザクションを行う方法及びそのための装置
GB201105765D0 (en) * 2011-04-05 2011-05-18 Visa Europe Ltd Payment system
US20120317628A1 (en) * 2011-06-09 2012-12-13 Yeager C Douglas Systems and methods for authorizing a transaction
US9473295B2 (en) * 2011-09-26 2016-10-18 Cubic Corporation Virtual transportation point of sale
US10515359B2 (en) * 2012-04-02 2019-12-24 Mastercard International Incorporated Systems and methods for processing mobile payments by provisioning credentials to mobile devices without secure elements
KR20140140079A (ko) * 2012-04-18 2014-12-08 구글 인코포레이티드 보안 요소를 갖지 않는 지불 거래들의 처리
US20130282589A1 (en) * 2012-04-20 2013-10-24 Conductiv Software, Inc. Multi-factor mobile transaction authentication
KR20130140948A (ko) * 2012-05-17 2013-12-26 삼성전자주식회사 저장 장치의 식별자에 기반한 컨텐츠의 암복호화 장치 및 방법
US8738454B2 (en) * 2012-07-23 2014-05-27 Wal-Mart Stores, Inc. Transferring digital receipt data to mobile devices
EP3843023A1 (fr) * 2013-08-15 2021-06-30 Visa International Service Association Traitement sécurisé de transactions de paiement à distance à l'aide d'un élément sécurisé
JP6353537B2 (ja) * 2013-12-02 2018-07-04 マスターカード インターナショナル インコーポレーテッド セキュアエレメントを用いずにユーザおよび移動装置のセキュアな認証を実行するための方法およびシステム

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11929997B2 (en) 2013-03-22 2024-03-12 Nok Nok Labs, Inc. Advanced authentication techniques and applications
US10769635B2 (en) 2016-08-05 2020-09-08 Nok Nok Labs, Inc. Authentication techniques including speech and/or lip movement analysis
US11868995B2 (en) 2017-11-27 2024-01-09 Nok Nok Labs, Inc. Extending a secure key storage for transaction confirmation and cryptocurrency
US11831409B2 (en) 2018-01-12 2023-11-28 Nok Nok Labs, Inc. System and method for binding verifiable claims
WO2020176870A1 (fr) * 2019-02-28 2020-09-03 Nok Nok Labs, Inc. Système et procédé pour approuver un nouvel authentifiant
US12041039B2 (en) 2019-02-28 2024-07-16 Nok Nok Labs, Inc. System and method for endorsing a new authenticator
US11792024B2 (en) 2019-03-29 2023-10-17 Nok Nok Labs, Inc. System and method for efficient challenge-response authentication

Also Published As

Publication number Publication date
CN106104605A (zh) 2016-11-09
KR20180108907A (ko) 2018-10-04
AU2017245412A1 (en) 2017-11-02
AU2019250276A1 (en) 2019-11-07
CN106104605B (zh) 2020-03-17
CN111523884A (zh) 2020-08-11
NZ721223A (en) 2018-02-23
RU2653290C1 (ru) 2018-05-07
EP3132406A4 (fr) 2017-11-01
KR101903709B1 (ko) 2018-10-04
MX356939B (es) 2018-06-20
JP6224254B2 (ja) 2017-11-01
KR20160132105A (ko) 2016-11-16
MX2016010086A (es) 2017-04-27
KR102151579B1 (ko) 2020-09-03
SG11201604876YA (en) 2016-07-28
RU2682840C2 (ru) 2019-03-21
RU2018113732A3 (fr) 2019-03-04
IL246109A0 (en) 2016-07-31
EP3132406A1 (fr) 2017-02-22
KR102150722B1 (ko) 2020-09-02
RU2018113732A (ru) 2019-03-04
SG10201801008SA (en) 2018-03-28
JP2018050300A (ja) 2018-03-29
AU2019250276B2 (en) 2021-04-01
JP2017513248A (ja) 2017-05-25
AU2014391256A1 (en) 2016-07-07
UA117951C2 (uk) 2018-10-25
JP6703510B2 (ja) 2020-06-03
CA2933336C (fr) 2018-09-04
KR20200018729A (ko) 2020-02-19
JP2020074566A (ja) 2020-05-14
CN111523884B (zh) 2023-05-30
IL246109B (en) 2020-03-31
ZA201603938B (en) 2017-09-27
AU2014391256B2 (en) 2017-07-13
WO2015160385A1 (fr) 2015-10-22
JP6889967B2 (ja) 2021-06-18

Similar Documents

Publication Publication Date Title
US12100003B2 (en) Method and system for generating an advanced storage key in a mobile device without secure elements
AU2019250276B2 (en) Method and system for generating an advanced storage key in a mobile device without secure elements
CA2932346C (fr) Procede et systeme d'authentification securisee d'un utilisateur et d'un dispositif mobile sans elements securises

Legal Events

Date Code Title Description
EEER Examination request

Effective date: 20160609