IP Library Granted Patent US 12694394
Granted Patent B2
US 12694394 · App. 18/743,213 · Granted Jul 28, 2026

Delegated administration of permissions using a contactless card

Inventors: Jeffrey Rule (Chevy Chase, MD); Walter A. Miller (Glen Allen, VA)
Assignee: Capital One Services, LLC
G06Q20/352G06Q20/3829G06Q20/405H04L9/3234G06Q2220/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12694394
App. No.
18/743,213
Granted
Jul 28, 2026
Kind
B2
Abstract

Delegated administration of permissions using a contactless card. In one example, a permissions module may receive a request from a first account to grant a second account access to a computing resource. The permissions module may receive permissions data of the first account from a contactless card and encrypted data generated by the contactless card. The permissions module may transmit the permissions data and the encrypted data to an authentication server, which may verify the encrypted data based at least in part on the private key, and determine, based on the permissions data, that the first account has permissions to grant access to the computing resource. The permissions module may receive, from the authentication server, an indication of the verification of the encrypted data and a permissions vector associated with the second account, the permissions vector reflecting the grant of access to the computing resource to the second account.

Claims (65)

1 . A system, comprising:

a near-field communication (NFC) reader;

a processor circuit; and

a memory storing instructions which when executed by the processor circuit, cause the processor circuit to:

generate a NFC exchange request to request data;

communicate, via the NFC reader, the NFC exchange request to a NFC interface of a contactless card;

receive, via the NFC reader, a message from the contactless card comprising the data;

generate a communication based on a communications protocol, wherein the communication comprises the data;

transmit the communication to an authentication server via a network node of a network to determine access to a computing resource via a computing device;

receive, via the network, from the authentication server, a result indicating that the authentication server decrypted the data;

determine, based on the result, that the authentication server decrypted the data and, based on the data, that the contactless card is verified and an account has permissions to access the computing resource;

grant access to a first feature of the computing resource based on a first element in the data;

provide an indication that the access is granted on a graphical user interface (GUI) of a display device of the computing device;

disable access to a second feature of the computing resource based on a second element in the data; and

access the first feature of the computing resource via the computing device.

2 . The system of claim 1 , further comprising communicating an update for the data stored by the contactless card.

3 . The system of claim 2 , wherein the update for the data comprises one or more updated elements.

4 . The system of claim 1 , wherein the data comprises permissions data encrypted by the contactless card performing an encryption operation with a key stored on the contactless card.

5 . The system of claim 4 , wherein the result includes an indication that the data is verified by the authentication server.

6 . The system of claim 1 , wherein the instructions are further configured to cause the processor circuit to:

initiate a NFC exchange with the contactless card; and

receive the data in the NFC exchange.

7 . The system of claim 1 , comprising one or more wireless interfaces configured to operate in accordance with an NFC protocol, a Bluetooth protocol, a Wi-Fi protocol, or a combination thereof, and the processor circuit is configured to receive the data via the one or more wireless interfaces.

8 . The system of claim 1 , wherein the computing resource is a resource of the computing device or a resource of another computing device accessible via the computing device.

9 . A computer-implemented method, comprising:

generating a near-field communication (NFC) exchange request to request encrypted data and permissions data;

communicating, via a NFC reader, the NFC exchange request to a NFC interface of a contactless card;

receiving, via the NFC reader, a message from the contactless card comprising the encrypted data and permissions data;

generating a communication based on a communications protocol, wherein the communication comprises the encrypted data and permissions data;

sending the encrypted data and permissions data to a server, via a network node of a network, to authenticate access to a computing resource via a computing device;

receiving, via the network, from the server, a result indicating that the server decrypted the encrypted data;

verifying, based on the result, that the server decrypted the encrypted data and, based on the permissions data, that the contactless card is verified and an account has permissions to access the computing resource;

granting access to a first feature of the computing resource based on a first element in the permissions data;

disabling access to a second feature of the computing resource based on a second element in the permissions data; and

accessing the first feature of the computing resource via the computing device.

10 . The computer-implemented method of claim 9 , wherein the encrypted data comprises the permissions data encrypted by the contactless card performing an encryption operation with a key stored on the contactless card.

11 . The computer-implemented method of claim 10 , comprising:

granting access to the computing resource if the result indicates the contactless card is authenticated and at least one element of the permissions data indicates that at least one feature of the computing resource is permitted; and

preventing access to the computing resource if the result indicates the contactless card is not authenticated or elements of the permissions data indicates features are not permitted.

12 . The computer-implemented method of claim 9 , wherein the encrypted data comprises payment data encrypted by the contactless card performing an encryption operation with a key stored on the contactless card.

13 . The computer-implemented method of claim 12 , comprising:

enabling the payment if the result indicates the contactless card is authenticated; and

preventing the payment if the result indicates the contactless card is not authenticated.

14 . The computer-implemented method of claim 9 , comprising:

initiating a NFC exchange with the contactless card; and

receiving the encrypted data in the NFC exchange.

15 . A non-transitory computer-readable storage medium storing computer-readable program code that when executed by a processor causes the processor to:

generate a NFC exchange request to request data;

communicate, via a NFC reader, the NFC exchange request to a NFC interface of a contactless card;

receive, via the NFC reader, a message from the contactless card comprising the data;

generate a communication based on a communications protocol, wherein the communication comprises the data;

send the data to an authentication server to verify access to a computing resource via a computing device, the data from a contactless card;

receive, from the authentication server via a network node of a network, a result indicating that the authentication server decrypted the data, wherein the result includes a permissions vector;

verify, based on the result, that the authentication server decrypted the data and that the permissions vector indicates that the contactless card is verified and that an account has permissions to access the computing resource;

grant access to a first feature of the computing resource based on a first element in the permissions vector;

disable access to a second feature of the computing resource based on a second element in the permissions vector; and

access the first feature of the computing resource via the computing device.

16 . The computer-readable storage medium of claim 15 , wherein the program code further causes the processor to communicate an update for the data stored by the contactless card, wherein the update for the data comprises the permissions vector with one or more updated elements.

17 . The computer-readable storage medium of claim 15 , wherein the

data comprises permissions data encrypted by the contactless card performing an encryption operation with a key stored on the contactless card.

18 . The computer-readable storage medium of claim 16 , wherein the result includes an indication that the data is validated by the authentication server.

19 . The computer-readable storage medium of claim 15 , wherein the program code is further configured to cause the processor to:

initiate a NFC exchange with the contactless card; and

receive the data in the NFC exchange.

20 . The computer-readable storage medium of claim 15 , wherein the computing resource is a resource of the computing device or a resource of another computing device accessible via the computing device.