OFFLINE AUTHENTICATION

摘要

Techniques for enhancing the security of a communication device when conducting a transaction using the communication device may include using a limited-use key (LUK) to generate a transaction cryptogram, and using a signature key to generate a signature. The transaction can be an offline data authentication transaction, and access can be granted based on authentication of the signature prior to verifying the transaction cryptogram.

主权项

1. A method for enhancing security of a communication device when conducting a transaction using the communication device, the method comprising:
receiving, from a remote computer, a signature key, and a limited-use key (LUK) that is associated with a first set of one or more limited-use thresholds that limits usage of the LUK; generating, by the communication device, a transaction cryptogram using the LUK, and a signature using the signature key; sending, to an access device, the transaction cryptogram and the signature to request access to a good or a service associated with the transaction, wherein access to the good or the service associated with the transaction is granted based on authentication of the signature prior to verifying the transaction cryptogram.