Patent ID: 11907953
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 5:
6. A system for performing a secure payment transaction, the system comprising:
an issuer system associated with a payment account of a user, the issuer system comprising:
a first hardware security module (HSM) comprising a first database;
a first memory comprising first stored instructions; and
an issuer processor; and

a payment server associated with a payment network, the payment server comprising:
a second HSM comprising a second database;
a second memory comprising second stored instructions; and
a payment server processor,

said issuer processor configured to execute the first stored instructions to cause the issuer processor to:
receive from the payment server a payment transaction authorization request signal comprising payment data associated with a payment transaction;
access the payment data of the payment transaction from the payment transaction authorization request signal;
perform approval of the payment transaction authorization request signal;
generate a unique data for the payment transaction of the user based on the payment data;
send, to the first HSM, the unique data and a request signal to encrypt the unique data using an encryption key shared between the issuer system and the first HSM, wherein the encryption key includes a symmetric key shared between the issuer system and the second HSM of the payment server;
access, via the first HSM, the symmetric key from the first database based on the payment transaction authorization request signal being received from the payment server;
encrypt, via the first HSM, the unique data using the accessed symmetric key, thereby generating encrypted unique data;
receive the encrypted unique data from the first HSM;
append the encrypted unique data in a payment transaction authorization response signal;
send the payment transaction authorization response signal to the payment server, the payment transaction authorization response signal comprising at least the encrypted unique data;

said payment server processor configured to execute the second stored instructions to cause the payment server processor to:
validate the payment transaction authorization response signal including:
accessing the encrypted unique data upon receipt of the payment transaction authorization response signal;
accessing, via the second HSM, the symmetric key from the second database;
decrypting, via the second HSM, the encrypted unique data using the accessed symmetric key;
receiving the decrypted unique data from the second HSM; and
matching the decrypted unique data and the payment data; and

transmit, to the issuer system, a notification of successful validation of the payment transaction authorization response signal;

wherein said issuer processor is further caused to:
receive, from the payment server, the notification; and
process the payment transaction after receiving the notification.