Patent AU-2018236802-A1 (AU)
Title: Over the air update of payment transaction data stored in secure memory
Inventor: AABYE CHRISTIAN
IPC: G06Q20/00
Filed: 2018-09-27
Abstract: OVER THE AIR UPDATE OF PAYMENT TRANSACTION DATA STORED IN SECURE MEMORY The invention is directed to an apparatus for facilitating secure communications. The apparatus comprises a processor, a memory and a set of instructions stored in the memory, which when executed by the processor, cause the processor to generate a first pair of encryption keys, the first pair of encryption keys including a first encryption key and a second encryption key; generate a second pair of encryption keys, the second pair of encryption keys including a third encryption key and a fourth encryption key; distribute the first encryption key of the first pair of encryption keys to a first mobile gateway, the first mobile gateway configured to process a first set of payment transactions; distribute the third encryption key of the second pair of encryption keys to a second mobile gateway, the second mobile gateway configured to process a second set of payment transactions, wherein the first set of transactions is different from the second set of transactions; generate a third pair of encryption keys, the third pair of encryption keys including a fifth encryption key and a sixth encryption key; distribute the fifth encryption key of the third pair of encryption keys to an issuer computer configured to generate a first device key using the fifth encryption key and distribute the first device key to a first mobile device, wherein the first mobile device receives the first device key from the issuer computer, wherein the first mobile device is configured to conduct a transaction with a device reader using a near field communications mechanism of the first mobile device, wherein the device reader provides transaction data to the issuer computer, wherein the mobile device receives and stores an original record of the transaction provided by the device reader, wherein the issuer computer generates updated transaction data for the transaction after the first mobile device is out of a near field communication range of the device reader, the updated transaction data including an update to the original record of the transaction stored at the mobile device, wherein the issuer computer specifies the second mobile gateway to provide communications to the first mobile device based on determining the transaction to be within the second set of payment transactions; generate a first session key for encrypting the updated transaction data using the fourth encryption key of the second pair of encryption keys; generate the first device key using the sixth encryption key of the third pair of encryption keys; encrypt the first session key using the first device key to create a first encrypted session key; and distribute the first encrypted session key to the first mobile device via the second mobile gateway, wherein the first mobile device is configured to decrypt the first encrypted session key to obtain the first session key using the first device key that the first mobile device received from the issuer computer, wherein the second mobile gateway is configured to receive the updated transaction data from the issuer computer, encrypt the updated transaction data using the first session key, and transmit the encrypted updated transaction data to the first mobile device, wherein the first mobile device decrypts the encrypted updated transaction data using the first session key that the first mobile device obtained using the first device key that the first mobile device received from the issuer computer, wherein the first mobile device synchronizes the original record of the transaction stored at the first mobile device with the update to the original record of the transaction included in the updated transaction data.