Stripe, Inc.

Nicole DeBickes

Nate Barnett

Jack DeLoach

Vinay Padma

Michael Shafrir

Rustem Muslimov

Atul Bhatia

Shanshan Chen

Mark Fielbig

Ross Favero

Maggie White

Kelly Moriarty

The present disclosure is directed to handling secure deployment of applications to devices. In some embodiments, the secure deployment includes uploading a mobile application that is configured to perform a process for handling transactions on mobile devices; automatically scanning the mobile application to determine whether the mobile application is secure and compliant; cryptographically signing, via a signing service, the mobile application in response to determining the mobile application is secure and compliant; and enabling deployment of the mobile application to the mobile devices based on the cryptographically signing the mobile application.

Secure signing of applications for a payment terminal

A method and apparatus validating integrity of an environment of a terminal device remote to a commerce platform system are described. The method can include receiving, from the terminal device, a device provisioning request that comprises data indicative of an instance of an application installed on the terminal device, a first public key, a second public key, and a hardware attestation key, the first public key, the second public key, and the hardware attestation key generated within a trusted execution environment of the terminal device, and the first public key and the second public key having a corresponding first private key and second private key stored within the trusted execution environment. The method may also include verifying the first public key and the second public key as being generated by the trusted execution environment of the terminal device using the hardware attestation key, the hardware attestation key generated at least in part using the first public key, the second public key, and the data indicative of the instance of the application.

Systems and methods for terminal device attestation for contactless payments

The present disclosure is directed to handling communication, including handoffs, between applications on a payment terminal. In some embodiments, a method comprises: receiving, by the first mobile application, a first request from a user to conduct a transaction via the first mobile application and transitioning control from the first mobile application to a second mobile application running on the mobile device to collect a payment for the transaction being processed by the first mobile application in response to receiving the first request to conduct a transaction. Subsequently, after processing the payment for the transaction, the method includes transitioning control back to the first mobile application from the second mobile application as part of sending an indication of results of processing the payment by the second mobile application.

Handoff between applications on a payment terminal

Growing community of inventors

Boca Raton, FL, United States of America

Nicole DeBickes