ENCRYPTING FINANCIAL ACCOUNT NUMBERS SUCH THAT EVERY DECRYPTION ATTEMPT RESULTS IN VALID ACCOUNT NUMBERS

摘要

A decryption module is enabled on one or more authorized devices. A user's financial account information is encrypted using a card verification number, or some secret known to the user and replicated onto the authorized devices. The user requests processing of a financial transaction using the previously-encrypted financial account information. The authorized device retrieves the encrypted financial account information and prompts the user to enter the card verification number (or other secret known to the user that was used to encrypt the financial account information). The decryption module decrypts the financial account information using the card verification number entered by the user, and the decrypted financial account information resembles a valid credit card or debit card number and will pass a Luhn test. The decrypted financial account information is transmitted to process the financial transaction initiated by the user.

主权项

1. A computer-implemented method for encrypting and decrypting financial account numbers, comprising:
receiving, by a computing device operated by a user, financial account information, the financial account information comprising a financial account number and an account verification number; encrypting, by the computing device operated by the user, the financial account number using the account verification number; transmitting, by the computing device operated by the user, the encrypted financial account number to one or more computing devices operated by an account management system that maintains an account for the user; saving, by the computing device operated by the user, the encrypted financial account number, wherein the saved encrypted financial account number does not comprise the account verification number; receiving, by the computing device operated by the user, a request to process a financial transaction using the encrypted financial account number; retrieving, by the computing device operated by the user, the encrypted financial account number; requesting, by the computing device operated by the user, the account verification number, wherein the account verification number comprises a secret known to the user; receiving, by the computing device operated by the user, the account verification number; decrypting, by the computing device operated by the user, the retrieved encrypted financial account number using the received account verification number, wherein the decrypted financial account number resembles a valid-looking financial account number; and transmitting, by the computing device operated by the user, the decrypted financial account number to process the financial transaction.