Abstract: A payment card includes interface circuitry and a processor coupled to the interface circuitry. The processor initiates operations using the interface circuitry as part of a transaction. The operations include receiving a certificate from a merchant system, encrypting the certificate, and sending the encrypted certificate to the merchant system with an instruction to forward the encrypted certificate to an authorization system for the payment card. An encrypted response is received. The encrypted response originates from the authorization system and is forwarded to the payment card by the merchant system. The merchant system is unable to decrypt the encrypted certificate and the encrypted response. The payment card decrypts the encrypted response and determines whether authentication of the merchant system is successful according to the response.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: Secure device and proxy operation include generating, using a processor, a first proxy and a first proxy companion paired with the first proxy and providing the first proxy to a host data processing system for installation therein. The first proxy in the host data processing system and the first proxy companion communicate. A proxy change event for the host data processing system is detected. Responsive to the detecting, a second proxy and a second proxy companion paired with the second proxy are generated. The second proxy is provided to the host data processing system for installation therein.

Abstract: A payment card includes interface circuitry and a processor coupled to the interface circuitry. The processor initiates operations using the interface circuitry as part of a transaction. The operations include receiving a certificate from a merchant system, encrypting the certificate, and sending the encrypted certificate to the merchant system with an instruction to forward the encrypted certificate to an authorization system for the payment card. An encrypted response is received. The encrypted response originates from the authorization system and is forwarded to the payment card by the merchant system. The merchant system is unable to decrypt the encrypted certificate and the encrypted response. The payment card decrypts the encrypted response and determines whether authentication of the merchant system is successful according to the response.