EFFICIENT METHODS FOR PROTECTING IDENTITY IN AUTHENTICATED TRANSMISSIONS

摘要

Systems and methods are provided for protecting identity in an authenticated data transmission. For example, a contactless transaction between a portable user device and an access device may be conducted without exposing the portable user device's public key in cleartext. In one embodiment, an access device may send an access device public key to a portable user device. The user device may return a blinded user device public key and encrypted user device data. The access device may determine a shared secret using the blinded user device public key and an access device private key. The access device may then decrypt the encrypted user device data using the shared secret.

主权项

1. An access device comprising:
a processor; and a non-transitory computer-readable storage medium comprising code executable by the processor for implementing a method comprising:
sending an access device public key to a user device, wherein the access device public key is associated with an access device private key;receiving a blinded user device public key and encrypted user device data from the user device, wherein the blinded user device public key is generated using a user device public key and a cryptographic nonce; andgenerating a shared secret using the access device private key and the blinded user device public key; anddecrypting the encrypted user device data using the shared secret.