Patent ID: 9009478
Filing Date: 2015-04-14
Classification: G06F,G06Q,H04L

Abstract:
1. A method of authentication, comprising: sending a challenge message from a mobile gateway to a consumer device, the challenge message being sent in response to a communication request message, wherein the consumer device is configured for use as a payment device; receiving a challenge response message from the consumer device at the mobile gateway in response to the challenge message; verifying, by the mobile gateway, the challenge response message using a key management center, wherein the key management center is configured to manage session keys for communication with the consumer device, wherein the key management center allows a communication transaction between a first entity and the consumer device if the challenge response message is valid; and sending, by the mobile gateway, a secure channel response message including a session key of the managed session keys to the consumer device, the session key allowing communication between the first entity and the consumer device, wherein the session key is derived from a master key associated with the first entity and stored at the key management center.