The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 28, 2017

Filed:

Nov. 13, 2015
Applicant:

Visa International Service Association, San Francisco, CA (US);

Inventors:

Minghua Xu, Austin, TX (US);

Jose Rios Trevino, Austin, TX (US);

Ying Hao, Foster City, CA (US);

Assignee:

VISA INTERNATIONAL SERVICE ASSOCIATION, San Francisco, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/32 (2006.01); H04L 9/30 (2006.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 9/3263 (2013.01); H04L 9/3066 (2013.01); H04L 9/3247 (2013.01); H04L 9/3249 (2013.01); H04L 9/3252 (2013.01); H04L 63/0209 (2013.01); H04L 63/105 (2013.01); H04L 63/12 (2013.01); H04L 63/0218 (2013.01); H04L 63/0823 (2013.01);
Abstract

Methods, systems, and devices are provided for authenticating API messages using PKI-based authentication techniques. A client system can generate a private/public key pair associated with the client system and sign an API message using the private key of the private/public key pair and a PKI-based cryptographic algorithm, before sending the signed API message to a server system. The server system (e.g., operated by a service provider) can authenticate the incoming signed API message using a proxy authenticator located in less trusted zone (e.g., a perimeter network) of the server system. In particular, the proxy authenticator can be configured to verify the signature of the signed API message using the public key corresponding to the private key and the same cryptographic algorithm. The authenticated API message can then be forwarded to a more trusted zone (e.g., an internal network) of the server system for further processing.


Find Patent Forward Citations

Loading…