Patent ID: 7548621
Filing Date: 2009-06-16
Classification: H04L

Abstract:
1. A system for securing a Base Derivation Key (BDK) at a facility for injecting Derived Unique Key Per Transaction (DUKPT) encryption devices comprising: a symmetrical key generator that generates a symmetrical key for each BDK segment received for encryption; a symmetrical encryption device for encrypting a Base Derivation Key (BDK) segment using a symmetrical key received from the symmetrical key generator for the BDK segment encryption; an asymmetrical key pair generator for generating a private/public key pair for each BDK segment symmetrically encrypted; an asymmetrical encryption device that generates a doubly encrypted segment by encrypting the encrypted BDK segment using the public key of the private/public key pair that was generated for the BDK segment and that generates a singularly encrypted segment by encrypting the symmetrical key used to encrypt symmetrically the BDK segment, the asymmetrical encryption device destroying the public key of each private/public key pair used to encrypt an encrypted BDK segment and the corresponding symmetrical key used to encrypt the BDK segment after generation of the doubly encrypted segment and the singularly encrypted symmetrical key; and a local memory for storing the private keys of each private/public key pair used to encrypt BDK segments and symmetrical keys.