Mastercard International Incorporated

Mondex International Limited

John Beric

David Anthony Roberts

Duncan Garrett

Mehdi Collinge

Sumeet Bhatt

Michael C Ward

James Christian Noe

Fikret Ates

Jean-Paul Edmond Rans

Paul Vanneste

Dave Anthony Roberts

James David Sinton

Barry Sim Hochfield

Jean-Louis Rouquet

Thomas Tan

Emil Johan Sjoberg

Dimitrios Markakis

Jonathan Grossar

Dave Sylvester

Michael Ward

A method for trusted notifications comprises: receiving, at a first host having at least one trusted server, a request message from a sender computing device, the request message comprising a request identifier and instructions to: update, at a second host, a recipient account associated with a recipient computing device, and to make a corresponding update at the first host to a sender account associated with the sender computing device. The method further comprises authorizing, at the first host, the request message; updating the sender account; generating a secure message at the at least one trusted server, the secure message comprising the request identifier and an indication from the at least one trusted server that the update completed; and sending the secure message from the first host to the sender computing device. The secure message can be received at the sender computer device and conveyed to the recipient computing device.

Method and system for trusted notifications

A transaction device is described. The device comprises storage configured to store a first data record comprising first value data and a unique identifier associated with one other device; communications circuitry configured to receive an identifier and second value data from a device; and control circuitry configured to compare the received identifier with the unique identifier and in the event of a positive comparison, the control circuitry is further configured to update the stored first value data in accordance with the exchanged second value data.

Transaction device, computer program and transaction method

The present disclosure relates to an access security system and method, for example for securing access to data, objects or locations. According to one aspect there is provided a computer-implemented access security method, the method comprising: receiving, at a processor, a first authentication credential from a near-field communication, 'NFC' reader; generating a one-time token, at the processor, in dependence on the first authentication credential, the one-time token being in a form which is capable of reproduction by a user; and outputting the one-time token via an interface for use as an authentication credential in an access procedure. Other aspects relate to a user device for implementing such a method, a computer program product for storing instructions which, when executed, cause such a method to be implemented, and a system in which such a method can be used.

Access security system and method

A method of establishing a secure channel for communication between a first computing device and a second computing device is described. The method uses an elliptic curve Diffie-Hellman protocol, wherein G is an elliptic curve generator point and the first computing device has a unique private key dwith a public key Q=dG certified by a party trusted by the second computing device. The first computing device generates () a blinding factor r and sends () a blinded public key R=r&#xb7;Qto the second computing device. The second computing device generates () an ephemeral private key dand a corresponding ephemeral public key Q=dG and sends Qto the first computing device. The first computing device generates () K=KDF(r d&#xb7;Q) and the second computing device generates () K=KDF(d&#xb7;R), where KDF is a key derivation function used in both generation operations, to establish a secure channel between the first computing device and the second computing device. G is a point in the elliptic curve group E, wherein E is a group of prime order but E* is the quadratic twist of E and is a group of order m=z&#xb7;m' where m&#x2032; is prime and z is an integer, wherein r&#xb7;dis chosen such that z is a factor of r&#xb7;d. Suitable apparatus for performing the method is also described.

Secure channel establishment between payment device and terminal device

A system and method for generating an authentication token which is used by an issuer associated with a integrated circuit card to authenticate a transaction. A personal card reader receives data, including an authentication cryptogram, from the integrated circuit card. The personal card reader uses the data received from the integrated circuit card to select one of at least two default bitmaps stored in a memory portion of the personal card reader. The personal card reader uses the selected default bitmap and the authentication cryptogram to build the authentication token.

Authentication arrangement and method for use with financial transaction

In a multiple application card system including an IC card comprising a microprocessor, a read-only memory, a random access memory and an electronically erasable programmable read only memory, a system for controlling access to one or more sets of programming instructions embedded in said read-only memory comprising means for storing on said IC card for at least one application loaded onto said card at least one access flag having a value indicating whether or not access by the at least one application to the at least one set of programming instructions shall be granted and means dependent on said value for allowing access to one or more sets of programming instructions.

System and method for controlling access to computer code in an IC card

Growing community of inventors

London, United Kingdom

John Beric