IP Library › Granted Patent US 10,878,651
Granted Patent B2
US 10,878,651 · App. 16/667,244 · Granted Dec 29, 2020

Systems and methods for secure read-only authentication

Inventors: Kevin Osborn (Newton, MA); Kevin Kelly (Austin, TX)
Assignee: CAPITAL ONE SERVICES, LLC
G07F7/1008G06F1/04G06K19/0702G06K19/0723G06Q20/3278G06Q20/341G06Q20/4014
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,878,651
App. No.
16/667,244
Filed
Oct 29, 2019
Granted
Dec 29, 2020
Kind
B2
Art Unit
2876
USPC
235/380
Abstract

A system for authenticating a user with a mobile device comprising a memory storing instructions, and a processor in communication with a network. The processor may be configured to execute the stored instructions to receive, from a mobile device, an authentication request; obtain, from a database, a permanent identifier associated with a transaction card; generate a temporary identifier associated with the transaction card; generate an expected value by encrypting the permanent identifier and the temporary identifier; verify the expected value against an encrypted value received from the mobile device; and transmit an authorization command to the mobile device.

Claims (60)

1. A transaction card, the transaction card comprising:

a microprocessor;

a radio frequency transmitter coupled to the microprocessor, the radio frequency transmitter configured to, in response to a read signal received by the radio frequency transmitter from an external radio frequency reader device, transmit a notification signal to the microprocessor; and

a near field communication tag coupled to the microprocessor and to the radio frequency transmitter, the near field communication tag storing a private key and a counter value;

wherein, upon receipt of the notification signal, the microprocessor is configured to:

apply an algorithm to increment the counter value; and

transmit the incremented counter value to the near field communication tag; and

wherein the near field communication tag is configured to:

receive, from the microprocessor, the incremented counter value;

generate an encrypted value based on the private key and the incremented counter value; and

provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

2. The transaction card of claim 1 , wherein the microprocessor is configured to increment the counter value by a predetermined amount.

3. The transaction card of claim 2 , wherein the predetermined amount is unique to the transaction card.

4. The transaction card of claim 1 , wherein the near field communication tag further stores an initial value that is unique to the transaction card.

5. The transaction card of claim 1 , wherein the encrypted value comprises a hash of the private key and the incremented counter value.

6. The transaction card of claim 1 , wherein the near field communication tag is further configured to store the incremented counter value.

7. The transaction card of claim 1 , wherein the near field communication tag is further configured to:

reset the counter value in response to a signal received from a user device; and

store the reset counter value.

8. A computer-implemented method for authenticating a user with a transaction card, the method comprising:

receiving, via a network, a request for authentication from a user device associated with the transaction card;

applying, in response to the request for authentication, an algorithm to generate a counter value;

obtaining, from a database, a private key associated with the transaction card;

generating a generated encrypted value by encrypting the counter value and the private key;

receiving, from the user device, a received encrypted value generated by the transaction card;

authenticating the user based on a comparison of the generated encrypted value and the received encrypted value; and

transmitting, to the user device, instructions configured to cause the user device to complete an action associated with the request for authentication.

9. The method of claim 8 , further comprising:

generating a plurality of counter values;

generating a plurality of generated encrypted values by encrypting the private key and each of the plurality of counter values; and

storing the plurality of generated encrypted values.

10. The method of claim 9 , further comprising:

determining the received encrypted value and the generated encrypted value are not equal; and

authenticating the user if the received encrypted value is equal to one of the plurality of generated encrypted values.

11. The method of claim 9 , further comprising:

determining the received encrypted value and the generated encrypted value are not equal;

generating instructions configured to cause the user device to display, via a user interface, a prompt for the user to tap the transaction card to the user device a predetermined number of times, thereby generating a series of received encrypted values;

receiving the series of received encrypted values from the user device;

comparing the series of received encrypted values with the plurality of generated encrypted values; and

when the series of received encrypted values matches at least a predetermined number of the plurality of generated encrypted values, transmitting instructions to the user device configured to cause the transaction card to reset the counter value stored by the transaction card.

12. The method of claim 11 , further comprising:

determining that a counter value of the transaction card is out of sync with the generated counter value;

determining a number of taps required to increment the counter value of the transaction card such that the counter value of the transaction card matches the generated counter value; and

generating instructions configured to cause the user device to display, via a user interface, a prompt for the user to execute the number of taps of the transaction card to the user device, thereby causing the counter value of the transaction card to fall back in sync with the generated counter value.

13. The method of claim 9 , wherein generating the plurality of counter values comprises incrementing a plurality of initial counter values by a second counter value a predetermined number of times.

14. The method of claim 13 , wherein the second counter value is calculated based on an algorithm unique to the transaction card.

15. The method of claim 8 , wherein the authentication request comprises an account number associating the user to the transaction card.

16. The method of claim 8 , wherein at least one of the generated encrypted value or the received encrypted value is valid for a predetermined amount of time.

17. The method of claim 8 , further comprising:

determining the received encrypted value and the generated encrypted value are not equal;

generating a fraud alert message; and

transmitting the fraud alert message to the user device.

18. A non-transitory computer readable medium including instructions, which, when executed by a processor, cause the processor to perform a method for authenticating a user with a transaction card, the method comprising:

receiving, via a network, a request for authentication from a user device associated with the transaction card;

applying, in response to the request for authentication, an algorithm to generate a counter value;

obtaining, from a database, a private key associated with the transaction card;

generating a generated encrypted value by encrypting the counter value and the private key;

receiving, from the user device, a received encrypted value generated by the transaction card;

authenticating the user based on a comparison of the generated encrypted value and the received encrypted value; and

transmitting, to the user device, instructions configured to cause the user device to complete an action associated with the request for authentication.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 29, 2019
From: OSBORN, KEVIN; KELLY, KEVIN
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 050855/0563 →
Continuity (2)
Continuation 16014542 · Jun 21, 2018
Related Publication 20200066082A1 · Feb 27, 2020
Cited By (2)
US 12,374,181 US 12,530,937