Patent ID: 9053480
Filing Date: 2015-06-09
Classification: G06Q,H04L

Abstract:
1. A method of validating encrypted payment information against business rules, the method comprising: receiving, at a hardware security module (HSM) comprising a dedicated cryptographic processor and dedicated memory within a tamper resistant physical package, a plurality of secrets from a first storage device external to the HSM, wherein the plurality of secrets includes a first secret comprising encrypted credit card payment information; decrypting the first secret within the dedicated memory of the HSM to create cleartext payment information within the dedicated memory of the HSM; transmitting a plurality of requests, wherein individual requests of the plurality of requests are transmitted to request validation data for validating a corresponding secret of the plurality of secrets, wherein an order of transmission of the plurality of requests is randomized, and wherein the plurality of requests comprises a first request requesting validation data for validating the first secret; in response to transmitting the first request, receiving first validation data; based on the first validation data, validating within the dedicated cryptographic processor the cleartext payment information within the dedicated memory of the HSM; generating within the dedicated cryptographic processor validation results indicating whether the cleartext payment information is valid; and transferring the validation results to one of the first storage device or a second storage device external to the HSM.