Patent ID: 9704159
Date: 2017-07-11
CPC Classifications: G06Q,H04L

Claim:
1. A computer-implemented method for using identity-based-encryption (IBE) to secure payment card information associated with a payment card of a user in a system having point-of-sale equipment, a purchase transaction processor equipment, and an additional purchase transaction processor equipment that communicate over a communications network, the method comprising: identifying, by the point-of-sale equipment, a first host address of the purchase transaction processor equipment and a second host address of the additional purchase transaction processor equipment; generating, by the point-of-sale equipment, first and second symmetric keys; generating, by the point-of-sale equipment, a first IBE public key associated with the purchase transaction processor equipment based on the identified first host address; generating, by the point-of-sale equipment, a second IBE public key associated with the additional purchase transaction processor equipment based on the identified second host address; generating, by an IBE encryption engine on the point-of-sale equipment, a first key transfer block by encrypting the first symmetric key using the generated first IBE public key and generating a second key transfer block by encrypting the second symmetric key using the second generated IBE public key; after passage of a predetermined amount of time, regenerating, by the point-of-sale equipment, the first symmetric key and generating, by the point-of-sale equipment, a third key transfer block by encrypting the regenerated first symmetric key using the generated first IBE public key; after passage of an additional predetermined amount of time, regenerating, by the point-of-sale equipment, the second symmetric key and generating, by the point-of-sale equipment, a fourth key transfer block by encrypting the regenerated second symmetric key using the generated second IBE public key; storing, by storage circuitry on the point-of-sale equipment, the first symmetric key, the second symmetric key, the regenerated first symmetric key, the regenerated second symmetric key, and the first, second, third, and fourth key transfer blocks; obtaining, by a card reader on the point-of-sale equipment, the payment card information associated with the payment card of the user during a purchase transaction; determining, by the point-of-sale equipment, that the purchase transaction processor equipment is associated with the payment card of the user based on the payment card information obtained by the card reader; based on determining that the purchase transaction processor equipment is associated with the payment card of the user generating, by a symmetric key encryption engine on the point-of-sale equipment, encrypted payment information by encrypting the payment card information using the regenerated first symmetric key stored at the storage circuitry; sending, by the point-of-sale equipment, the third key transfer block stored at the storage circuitry from the point-of-sale equipment to the purchase transaction processor equipment over the communications network; sending, by the point-of-sale equipment, the encrypted payment card information from the point-of-sale equipment to the purchase transaction processor equipment over the communications network; receiving, by the purchase transaction processor equipment, the third key transfer block and the encrypted payment card information from the point-of-sale equipment; receiving, by the purchase transaction processor equipment, an IBE private key corresponding to the first IBE public key; obtaining, by an IBE decryption engine on the purchase transaction processor equipment, the regenerated first symmetric key by decrypting the third key transfer block using the IBE private key; decrypting, by a symmetric key decryption engine on the purchase transaction processor equipment, the encrypted payment card information using the regenerated first symmetric key that was obtained by decrypting the third key transfer block; and authorizing, by the purchase transaction processor equipment, a payment with the payment card of the user based on the decrypted payment card information.