Systems and methods for performing transactions with contactless cards
Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.
1. A data transmission system comprising:
a contactless card having a processor and a memory, the memory of the contactless card containing a card key and transmission data;
an application comprising instructions for execution on a receiving device having a processor and a memory, the memory of the receiving device containing an application key;
wherein the contactless card is configured to:
encrypt the transmission data using one or more cryptographic algorithms and the card key to yield encrypted transmission data, and
transmit the encrypted transmission data; and
wherein the application is configured to:
decrypt the encrypted transmission data using the one or more cryptographic algorithms and the application key, and
validate a tap password, wherein:
the tap password comprises a plurality of taps of the contactless card on the receiving device, and
the tap password is requested by the application for a transaction that exceeds a threshold value.
2. The data transmission system of claim 1 , wherein:
the receiving device comprises at least one selected from the group of a mobile device, a smart device, a terminal, a server, and a wearable device, and
the taps comprising the plurality of taps are at least one selected from the group of a tap directly on the receiving device and a tap directly on an intermediary device that is transmitted to the receiving device.
3. The data transmission system of claim 1 , wherein the tap password is associated with a sequence of at least one selected from the group of a first set of taps and a second set of taps.
4. The data transmission system of claim 3 , wherein the first set of taps comprises one or more taps having a first duration and the set second of taps comprises one or more taps having a second duration.
5. The data transmission system of claim 1 , wherein the tap password is stored in the memory of the contactless card and read by the application for validation by comparison with a reference tap password.
6. The data transmission system of claim 1 , wherein the tap password is generated based on a receipt of an input to a uniform resource locator.
7. The data transmission system of claim 1 , wherein the application is configured to, based on one or more taps received from the contactless card, select at least one from the group of lock the contactless card and unlock the contactless card.
8. The data transmission system of claim 1 , wherein the application is configured to determine an allocation of a payment based on a number of scans associated with a plurality of contactless cards.
9. A method for transmitting data by a contactless card having a processor and a memory, the memory containing a card key and an identification number, the method comprising:
generating a cryptogram, the cryptogram comprising the identification number;
encrypting the cryptogram using the card key;
transmitting the encrypted cryptogram; and
transmitting a tap password, wherein:
the tap password comprises a plurality of taps of the contactless card on a receiving device, and
the tap password is requested by an application comprising instructions for execution on the receiving device for a transaction that exceeds a threshold value.
10. The method of claim 9 , wherein:
the receiving device comprises at least one selected from the group of a mobile device, a smart device, a terminal, a server, and a wearable device, and
the taps comprising the plurality of taps are at least one selected from the group of a tap directly on the receiving device and a tap directly on an intermediary device that is transmitted to the receiving device.
11. The method of claim 9 , wherein the tap password is associated with a sequence of at least one selected from the group of a first set of taps and a second set of taps.
12. The method of claim 11 , wherein the first set of taps includes one or more taps having a first duration and the second set of taps includes one or more taps having a second duration.
13. The method of claim 12 , wherein the first duration exceeds the second duration.
14. The method of claim 9 , further comprising:
storing the tap password in the memory;
reading, by the application, the tap password; and
transmitting, by the application, the tap password for validation based on comparison with a reference tap password.
15. The method of claim 14 , further comprising receiving, at the application, one or more messages indicating that the tap password is correct based on the comparison.
16. The method of claim 9 , further comprising generating the tap password based on one or more inputs to a uniform resource locator.
17. The method of claim 9 , further comprising locking the contactless card based on one or more taps received from the contactless card.
18. A computer readable non-transitory medium comprising computer-executable instructions that are executed on a processor, the instructions comprising the steps of:
generating a cryptogram, the cryptogram comprising an identification number;
encrypting the cryptogram using a card key;
transmitting the encrypted cryptogram; and
transmitting a tap password, wherein:
the tap password comprises a plurality of taps of a contactless card on a receiving device, and
the tap password is requested by an application for a transaction that exceeds a threshold value, the application comprising instructions for execution on the receiving device.
19. The computer readable non-transitory medium of claim 18 , wherein the tap password is associated with a sequence of at least one selected from the group of a first set of taps and a second set of taps.
20. The computer readable non-transitory medium of claim 19 , wherein the first set of taps comprises one or more taps having a first duration and the set second of taps comprises one or more taps having a second duration.
21. The computer readable non-transitory medium of claim 20 , wherein the second duration exceeds the first duration.
22. The computer readable non-transitory medium of claim 18 , wherein the tap password is generated based on a receipt of an input to a uniform resource locator.