METHOD AND SYSTEM FOR GENERATING CRYPTOGRAMS FOR VALIDATION IN A WEBSERVICE ENVIRONMENT

摘要

A method for generating cryptograms in a webservice environment includes: receiving, in a first environment of a computing system, a credential request transmitted by an external computing device using a secure communication protocol, the credential request including a transaction identifier and account identifier; transmitting, by the first environment, a data request to a second environment of the computing system, the data request including the account identifier; receiving, by the first environment, an account profile and session key from the second environment; transmitting, by the first environment, a cryptogram request to a third environment of the computing system, the cryptogram request including the account profile and session key; receiving, by the first environment, a cryptogram from the third environment generated using the account profile and session key; and transmitting, by the first environment, the cryptogram and transaction identifier to the external computing device via the secure communication protocol.

主权项

1. A method for generating cryptograms in a webservice environment, comprising:
receiving, by a receiving device in a first environment of a computing system, a data signal superimposed with a credential request transmitted by an external computing device, wherein the credential request includes at least a transaction identifier and an account identifier and wherein the data signal is transmitted via a secure communication protocol; transmitting, by a transmitting device in the first environment of the computing system, a data request to a second environment of the computing system, wherein the data request includes at least the account identifier; receiving, by the receiving device in the first environment of the computing system, at least an account profile and a session key from the second environment of the computing system; transmitting, by the transmitting device in the first environment of the computing system, a cryptogram request to a third environment of the computing system, wherein the cryptogram request includes at least the account profile and one of: the session key or a secondary key derived from the session key; receiving, by the receiving device in the first environment of the computing system, a cryptogram from the third environment of the computing system, wherein the third environment of the computing system is configured to generate the cryptogram using at least the account profile and the session key or the secondary key; and transmitting, by the transmitting device the first environment of the computing system, a data signal superimposed with credential data to the external computing device, wherein the credential data includes at least the cryptogram and the transaction identifier and wherein the data signal is transmitted via the secure communication protocol.