Patent ID: 11907953
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A computer-implemented method for performing a payment transaction, the computer-implemented method comprising:
receiving, by an issuer system associated with a payment account of a user, and from a payment server, a payment transaction authorization request signal comprising payment data associated with a payment transaction;
accessing the payment data of the payment transaction from the payment transaction authorization request signal;
performing approval of the payment transaction authorization request signal by the issuer system;
generating, by the issuer system, a unique data for the payment transaction of the user based on the payment data;
sending, to a first hardware security module (HSM) of the issuer system by the issuer system, the unique data and a request signal to encrypt the unique data using an encryption key shared between the issuer system and the first HSM, wherein the encryption key includes a symmetric key shared among the first HSM, the issuer system and a second HSM of the payment server;
accessing, by the first HSM, the symmetric key from a first database of the first HSM based on the payment transaction authorization request signal being received from the payment server;
encrypting, by the first HSM, the unique data using the accessed symmetric key, thereby generating encrypted unique data;
receiving, by the issuer system, the encrypted unique data from the first HSM;
appending, by the issuer system, the encrypted unique data in a payment transaction authorization response signal;
sending, by the issuer system, the payment transaction authorization response signal to the payment server associated with the payment network, the payment transaction authorization response signal comprising at least the encrypted unique data;
validating, by the payment server, the payment transaction authorization response signal including:
accessing the encrypted unique data upon receipt of the payment transaction authorization response signal;
accessing, by the second HSM, the symmetric key from a second database of the second HSM;
decrypting, by the second HSM, the encrypted unique data using the accessed symmetric key;
receiving the decrypted unique data from the second HSM; and
matching the decrypted unique data and the payment data;

transmitting, by the payment server to the issuer system, a notification of successful validation of the payment transaction authorization response signal;
receiving, by the issuer system, the notification from the payment server; and
processing, by the issuer system, the payment transaction after receiving the notification.