American Express Travel Related Services Company, Inc.

Amit Kumar Atap

Abhijeet Dutta

Hicham Lozi

Sharma L Putrevu

Rana Dasgupta

Neelanjana Dasgupta

Lei Ma

Ajit Patra

Ramgopal Malathkar

Ritwik Bhar

Disclosed herein are system, method, and computer program product embodiments for providing a diversified cryptographic Root of Trust for application instances installed on different user devices. After installing an application, a client device transmits, to a cryptography server, (1) an application identification corresponding to a key from an operating system key store on the client device and (2) a device identification specific to an instance of the application on the client device. The cryptography server uses this data to generate and transmit a unique device fingerprint to the client device. The client device then diversifies a white-box cryptography (WBC) library using the application identification, the device identification, and the device fingerprint. The diversified WBC library protects the storage of cryptographic keys obtained from the cryptography server. These keys protect sensitive data on the client device and sensitive data sent to the cryptography server and other application servers.

Diversified protection of cryptographic keys using device identification

Growing community of inventors

Bengaluru, India

Amit Kumar Atap