Patent ID: 11936776
Assignee: WELLS FARGO BANK, N.A.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 19:
20. A method for managing secure key exchange electronic transactions without transmitting cleartext keys, the method comprising:
transmitting, by a first entity computing system, a hash-based message authentication code (HMAC) key cryptogram and a transaction scheme to a database encryption key management system, wherein the HMAC key cryptogram is generated by the database encryption key management system, the database encryption key management system is associated with a hardware security module (HSM), the HMAC key cryptogram is received by the first entity computing system from the HSM;
receiving, by the first entity computing system, a seed generated by the database encryption key management system based on the HMAC key cryptogram and the transaction scheme;
decrypting, by the first entity computing system, the seed; and
based on the seed, deriving, by the first entity computing system, a transaction key (Tk) by using the seed as an input to a key derivation algorithm (KDF), the KDF is not known to the HSM.