Patent ID: 11934512
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 17:
18. A computer program product for authenticating a device, the computer program product comprising at least one non-transitory computer-readable medium including one or more instructions that, when executed by at least one processor, cause the at least one processor to:
couple a first device to an interaction database, the interaction database coupled to a second device, the interaction database storing interaction data, the first device storing a first group public key, a first group private key, a first device public key, and a first device private key, the second device storing the first group public key, the first group private key, a second device public key, and a second device private key;
transmit a first message to a first remote computer system from the first device, the first message comprising challenge data associated with a challenge question corresponding to the interaction data, first remote computer system public key data associated with a first remote computer system public key, response data associated with a required response to the challenge question corresponding to the interaction data, and authentication data associated with the first device, the challenge data, the first remote computer system public key data, and the response data each encrypted with the first group public key, the first message encrypted with the first remote computer system public key of the first remote computer system, wherein
in response to the first message, a second message is received at the second device from a second remote computer system, the second message comprising the challenge data and the first remote computer system public key data encrypted with the first group public key from the first message, the second message encrypted with the second device public key, and
in response to the second message, a third message is transmitted to the second remote computer system from the second device, the third message comprising response data associated with the required response to the challenge question corresponding to the interaction data, the response data encrypted with the first group public key, the third message encrypted with the first remote computer system public key from the second message; and

in response to receiving an authentication message from the second remote computer system indicating that the first device has not been authenticated by the second remote computer system, prevent interaction between the first device and at least one of the first remote computer system and the second remote computer system.