System and method for parallel manufacture and verification of one-time-password authentication cards

Abstract

The disclosed system and method are directed to a novel implementation of encryption service provision which obviates a need for network communication between a card manufacturing/personalization entity and a validation entity during the card personalization phase. The proposed solution decouples the operation flow associated with personalization of an OTP card (as carried out by a manufacturing HSM) and the validation of an OTP card cryptogram (as carried out by a distinct validation HSM). This is accomplished by the generation and distribution of a third master key which enables the personalization and the validation HSMs to independently derive the shared secret value used in generation and validation of a transaction cryptogram associated with an OTP card operation.

CPC Classifications