Securely Storing and Using Sensitive Information for Making Payments Using a Wallet Application

摘要

A payment system implemented on a mobile device authorizes and processes transactions. The mobile device generates a public-private key pair and receives payment information. The private key and the payment information are split into a local and a remote fragment. The public key, a private key fragment, and a payment information fragment are sent to a secure payment system, and the other fragments are stored on the mobile device. When a transaction is received by the mobile device to authorize, the mobile device sends a payment fragment to the secure payment system and receives a private key fragment from the secure payment system. The mobile device authorizes the transaction using the private key, recovered from the private key fragments. The secure payment system verifies the transaction using the public key and processes the transaction using the recovered payment information. Additional techniques to process transactions using data splitting are disclosed.

主权项

1. A method for processing a transaction comprising:
receiving payment information; splitting the payment information into a remote payment fragment and a local payment fragment, wherein splitting is performed according to a secret sharing scheme; sending the remote payment fragment for storage at a secure payment system, the remote payment fragment not being stored at a mobile device; sending the local payment fragment for storage at the mobile device, the local payment fragment not being stored at the secure payment system; and responsive to a request to initiate the transaction, sending the local payment fragment to the secure payment system.