Secure digital communications

• US 10,505,731 B1
• Filed: 07/20/2018
• Issued: 12/10/2019
• Est. Priority Date: 09/13/2016
• Status: Active Grant

• Current Assignee: Wells Fargo Bank NA (Wells Fargo & Company)
• Original Assignee: Wells Fargo Bank NA (Wells Fargo & Company)
• Inventors: Maeng, Joon, Ramanathan, Ramanathan, Hayes, Thomas
• Primary Examiner(s): Holder, Bradley W
• Application Number:
  US16/041,000
• Time in Patent Office: 508 Days
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Disclosed in some examples are methods, systems, and machine readable mediums for secure end-to-end digital communications involving mobile wallets. The result is direct, secure, in-band messaging using mobile wallets that may be used to send messages such as payments, requests for money, financial information, or messages to authorize a debit or credit.

Claims

1. A system for securing transactional communication messages, the system comprising:

at least one hardware processor; and

a computer readable medium including instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to;

divide a transactional message into a first transaction unit and a second transaction unit by extracting odd lines and even lines from the transactional message, wherein the first transaction unit includes the odd lines and the second transaction unit includes the even lines;

generate a first cryptographic key and a second cryptographic key;

encrypt the first transaction unit using the first cryptographic key and the second transaction unit using the second cryptographic key;

create a first data packet including the encrypted first transaction unit and the second cryptographic key and a second data packet including the encrypted second transaction unit and the first cryptographic key;

transmit the first data packet over a first transmission path and the second data packet over a second transmission path;

receive a request that indicates that one of the first data packet and the second data packet was not received by a recipient, and

retransmit, in response to receipt of the request, the first data packet and the second data packet.

2. The system of claim 1, wherein the first data packet includes a reference to the second data packet and the second data packet includes a reference to the first data packet.

3. The system of claim 1, wherein the first transmission path uses a first wireless protocol and the second transmission path uses a second wireless protocol.

4. The system of claim 1, wherein the first transmission path uses a first physical network and the second transmission path uses a second physical network.

5. The system of claim 1, wherein the first transmission path uses a cellular network and the second communication path uses a Wi-Fi network.

6. The system of claim 1, wherein the first communication path uses a telephone company network and the second transmission path uses an internet connection.

7. The system of claim 1, wherein the instructions further cause the at least one processor to perform operations to:

generate a third cryptographic key and a fourth cryptographic key; and

encrypt the first transaction unit and the second transaction unit before retransmitting the first data packet and the second data packet, wherein the fourth cryptographic key is used to encrypt the first transaction unit and the third cryptographic key is used to encrypt the second transaction unit.

8. The system of claim 1, wherein the instructions further cause the at least one processor to perform operations to:

determine a first half and a second half of the transactional message, wherein the first transaction unit includes the first half and the second transaction unit includes the second half.

9. At least one non-transitory computer readable medium comprising instructions for securing transactional communication messages that, when executed by at least one processor, cause the at least one processor to perform operations to:

divide a transactional message into a first transaction unit and a second transaction unit by extracting odd lines and even lines from the transactional message, wherein the first transaction unit includes the odd lines and the second transaction unit includes the even lines;

generate a first cryptographic key and a second cryptographic key;

encrypt the first transaction unit using the first cryptographic key and the second transaction unit using the second cryptographic key;

create a first data packet including the encrypted first transaction unit and the second cryptographic key and a second data packet including the encrypted second transaction unit and the first cryptographic key;

transmit the first data packet over a first transmission path and the second data packet over a second transmission path;

receive a request that indicates that one of the first data packet and the second data packet was not received by a recipient, and

retransmit, in response to receipt of the request, the first data packet and the second data packet.

10. The at least one computer readable medium of claim 9, wherein the first data packet includes a reference to the second data packet and the second data packet includes a reference to the first data packet.

11. The at least one computer readable medium of claim 9, wherein the first transmission path uses a first wireless protocol and the second transmission path uses a second wireless protocol.

12. The at least one computer readable medium of claim 9, wherein the first transmission path uses a first physical network and the second transmission path uses a second physical network.

13. The at least one computer readable medium of claim 9, wherein the instructions further cause the at least one processor to perform operations to:

generate a third cryptographic key and a fourth cryptographic key; and

encrypt the first transaction unit and the second transaction unit before retransmitting the first data packet and the second data packet, wherein the fourth cryptographic key is used to encrypt the first transaction unit and the third cryptographic key is used to encrypt the second transaction unit.

14. A method for securing transactional communication messages, the method comprising:

dividing a transactional message into a first transaction unit and a second transaction unit by extracting odd lines and even lines from the transactional message, wherein the first transaction unit includes the odd lines and the second transaction unit includes the even lines;

generating a first cryptographic key and a second cryptographic key;

encrypting the first transaction unit using the first cryptographic key and the second transaction unit using the second cryptographic key;

creating a first data packet including the encrypted first transaction unit and the second cryptographic key and a second data packet including the encrypted second transaction unit and the first cryptographic key;

transmitting the first data packet over a first transmission path and the second data packet over a second transmission path;

receiving a request indicating that one of the first data packet and the second data packet was not received by a recipient, and

retransmitting, in response to receipt of the request, the first data packet and the second data packet.