One-tap payment using a contactless card
An authentication application may receive, from a merchant application of a client device, a merchant identifier, a transaction identifier of a transaction, encrypted data, and a location of the client device. The authentication application may decrypt the encrypted data based at least in part on a private key. The authentication application may determine that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with a contactless card. A virtual account number generator may generate a virtual account number and transmit the merchant identifier, the transaction identifier, the virtual account number, an expiration date, and a card verification value (CVV) to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.
1. A system, comprising:
a processor; and
a memory storing instructions which when executed by the processor cause the processor to:
receive, by an authentication application executing on the processor from a merchant application executing on a client device: (i) a merchant identifier of a merchant associated with the merchant application, (ii) a transaction identifier of a transaction, (iii) encrypted data, and (iv) a location of the client device;
verify, by the authentication application, the encrypted data by decrypting the encrypted data based at least in part on a private key for a contactless card;
determine, by the authentication application, that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with the contactless card;
generate, by a virtual account number generator executing on the processor, a virtual account number based on the verification of the encrypted data, the determination that the contactless card has previously been used to make a purchase with the merchant, and the determination that the client device is within the threshold distance of the known location; and
transmit, by the virtual account number generator, the merchant identifier, the transaction identifier, the virtual account number, an expiration date associated with the virtual account number, and a card verification value (CVV) associated with the virtual account number to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.
2. The system of claim 1 , the memory storing instructions which when executed by the processor cause the processor to:
receive, by the virtual account number generator from an account database, an account holder name of an account associated with the contactless card and an address associated with the account; and
transmit, by the virtual account number generator, the account holder name and address to the merchant server.
3. The system of claim 1 , the memory storing instructions which when executed by the processor cause the processor to:
receive, by the authentication application, authentication information for a user account associated with the contactless card, the authentication information comprising one or more of: (i) a username and a password, (ii) one or more biometric credentials; and
verify, by the authentication application, the authentication information for the user account.
4. The system of claim 1 , the memory storing instructions which when executed by the processor cause the processor to:
determine, by the authentication application, a device identifier received from the client device is associated with a user account associated with the contactless card.
5. The system of claim 1 , wherein the expiration date and the CVV comprise one or more of: (i) an expiration date and a CVV generated by the virtual account number generator, and (ii) an expiration date and a CVV of the contactless card received by the virtual account number generator from an account database.
6. The system of claim 1 , wherein the virtual account number is different than an account number associated with the contactless card.
7. The system of claim 1 , the known location to comprise at least one of a home location or a work location associated with the contactless card.
8. A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by a processor to cause the processor to:
receive, by an authentication application executing on the processor from a merchant application executing on a client device: (i) a merchant identifier of a merchant associated with the merchant application, (ii) a transaction identifier of a transaction, (iii) encrypted data, and (iv) a location of the client device;
verify, by the authentication application, the encrypted data by decrypting the encrypted data based at least in part on a private key for a contactless card;
determine, by the authentication application, that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with the contactless card;
generate, by a virtual account number generator executing on the processor, a virtual account number based on the verification of the encrypted data, the determination that the contactless card has previously been used to make a purchase with the merchant, and the determination that the client device is within the threshold distance of the known location; and
transmit, by the virtual account number generator, the merchant identifier, the transaction identifier, the virtual account number, an expiration date associated with the virtual account number, and a card verification value (CVV) associated with the virtual account number to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.
9. The non-transitory computer-readable storage medium of claim 8 , further comprising computer-readable program code executable by the processor to cause the processor to:
receive, by the virtual account number generator from an account database, an account holder name of an account associated with the contactless card and an address associated with the account; and
transmit, by the virtual account number generator, the account holder name and address to the merchant server.
10. The non-transitory computer-readable storage medium of claim 8 , further comprising computer-readable program code executable by the processor to cause the processor to:
receive, by the authentication application, authentication information for a user account associated with the contactless card, the authentication information comprising one or more of: (i) a username and a password, (ii) one or more biometric credentials; and
verify, by the authentication application, the authentication information for the user account.
11. The non-transitory computer-readable storage medium of claim 8 , further comprising computer-readable program code executable by the processor to cause the processor to:
determine, by the authentication application, a device identifier received from the client device is associated with a user account associated with the contactless card.
12. The non-transitory computer-readable storage medium of claim 8 , wherein the expiration date and the CVV comprise one or more of: (i) an expiration date and a CVV generated by the virtual account number generator, and (ii) an expiration date and a CVV of the contactless card received by the virtual account number generator from an account database.
13. The non-transitory computer-readable storage medium of claim 8 , wherein the virtual account number is different than an account number associated with the contactless card.
14. The non-transitory computer-readable storage medium of claim 8 , the known location to comprise at least one of a home location or a work location associated with the contactless card.
15. A method, comprising:
receiving, by an authentication application executing on a processor from a merchant application executing on a client device: (i) a merchant identifier of a merchant associated with the merchant application, (ii) a transaction identifier of a transaction, (iii) encrypted data, and (iv) a location of the client device;
verifying, by the authentication application, the encrypted data by decrypting the encrypted data based at least in part on a private key for a contactless card;
determining, by the authentication application, that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with the contactless card;
generating, by a virtual account number generator executing on the processor, a virtual account number based on the verification of the encrypted data, the determination that the contactless card has previously been used to make a purchase with the merchant, and the determination that the client device is within the threshold distance of the known location; and
transmitting, by the virtual account number generator, the merchant identifier, the transaction identifier, the virtual account number, an expiration date associated with the virtual account number, and a card verification value (CVV) associated with the virtual account number to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.
16. The method of claim 15 , further comprising:
receiving, by the virtual account number generator from an account database, an account holder name of an account associated with the contactless card and an address associated with the account; and
transmitting, by the virtual account number generator, the account holder name and address to the merchant server.
17. The method of claim 15 , further comprising:
receiving, by the authentication application, authentication information for a user account associated with the contactless card, the authentication information comprising one or more of: (i) a username and a password, (ii) one or more biometric credentials; and
verifying, by the authentication application, the authentication information for the user account.
18. The method of claim 15 , further comprising:
determining, by the authentication application, a device identifier received from the client device is associated with a user account associated with the contactless card.
19. The method of claim 15 , wherein the expiration date and the CVV comprise one or more of: (i) an expiration date and a CVV generated by the virtual account number generator, and (ii) an expiration date and a CVV of the contactless card received by the virtual account number generator from an account database.
20. The method of claim 15 , wherein the virtual account number is different than an account number associated with the contactless card, wherein the known location comprises at least one of a home location or a work location associated with the contactless card.