Business method for secure installation of a credit authorization key on a remote tcpa compliant system

Abstract

Abstract of the Disclosure A business method employing hardware complaint to the Trusted Computing Platform Alliance (TCPA) Specification is implemented to allow a credit card company to remotely install a credit card private key into a TCPA module to create a Trusted Platform Module (TPM). More specifically, when a credit worthy user applies for a credit card, the user will send the credit card company a public portion of a "non-migratable storage key," which is accredited a TPM endorsed by a Certification Authority. The credit card company will create its own public / private key pair according to the TCPA Specification, to create a TCPA header, and wrap the full structure by encrypting it with the public portion of the TCPA non-migratable storage key. The credit card company then sends by email the encrypted bundle with a certificate for it, and sends a corresponding pass phrase by regular mail.

Description

Cross Reference to Related Applications[0001] This application is a continuation-in-part of application Serial No. 09 / 851956 entitled System andMethod for Installing a Remote Credit Card Authorization on a System with a TCPA ComplaintChipset.Technical Field[0002] The present invention relates in general to data processing systems, and in particular, toenabling secure communications over data processing networks.Background Information[0003] The Internet provides a new arena for electronic commerce in which credit card companies are very interested. Quite naturally, since "commerce" is a necessary part ofe-commerce, it stands to note that providing for the transfer of funds and credit duringe-commerce transactions bodes well for those credit card companies that can securely provide forsuch transactions. One of the main concerns that continues with respect to e-commerce is thelack of trust that the consuming public has in the security of such transactions to protect theircredit card an...

AI Technical Summary

Benefits of technology

[0009] An advantage of the present invention is that only one user computer can use the encrypted bundle sent by the credit card company, which will reduce the amount of fraud by useof credit cards in e-commerce transactions. Another advantage of the present invention is that thecertificate can easily be checked against the credit card company's database for revocation. Usingthis type of signature instead of a credit card number precludes someone from charging a creditcard multiple times, and also precludes someone keeping a database of credit card numbers to beexposed to a hacker accessing such numbers.

[0010] The foregoing has outlined rather broadly the features and technical advantages of the present invention in order that the

Problems solved by technology

However, creditcard theft is abundant, and according to some reports, accounts for half of the monetary loss ofthe credit card companies.

However, the problem with a smartcard is one ofexpense, since use of a smartcard requires a smartcard reader to be installed on the user'scomputer.

Images