H - Electricity – 04 – L
Patent
H - Electricity
04
L
H04L 9/32 (2006.01) G06Q 20/12 (2012.01)
Patent
CA 2561077
There is provided a system and method for secure verification of electronic transactions, and in particular secure processing of personal identification numbers when third party processors are involved. In an embodiment, a variable length PIN associated with a credit card or debit card is encrypted, then hashed using a one-way hash algorithm before it is passed along to and stored by a third party processor. The encrypted-hashed PIN always remains in an encrypted form while in the hands of the third party processor. At the third party processor, secure cryptographic hardware is used to store the one-way hash algorithm. Encrypted PIN values received for verification (e.g. from a retail point-of- sale terminal) are converted and hashed using the one-way hash algorithm, and the resulting hashed-encrypted value is compared against the hashed-encrypted PIN values previously stored at the third party processor. As the PIN has a variable length, and the third party processor has no access to the hash algorithm, the encrypted PIN values are highly resistant to reverse engineering or decryption.
Ibm Canada Limited - Ibm Canada Limitee
Wang Peter
LandOfFree
System and method for secure verification of electronic... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with System and method for secure verification of electronic..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for secure verification of electronic... will most certainly appreciate the feedback.
Profile ID: LFCA-PAI-O-2075200