Card issuing with restricted virtual numbers
Various embodiments are directed to applying, via contactless card authentication, one or more restrictions to a virtual card number and generating the card number for use by a recipient. The one or more restrictions may be specifically personalized to the recipient and may include, for example, a merchant restriction, an amount restriction, a time period restriction, or a location restriction. The generated virtual card number along with the applied one or more restrictions may be consumed in various ways, such as writing the number to a blank card, transmitting the number directly to the recipient's computing device, etc., all via near-field communication.
1. A system comprising:
(i) an apparatus comprising one or more processors operable to execute stored instructions that, when executed, cause the one or more processors to:
receive, via a software application, instruction or a selection from a user to generate a virtual card number;
determine whether one or more restrictions are associated with the generation of the virtual card number, wherein the one or more restrictions are input, set, or specified by the user via the software application;
establish near field communication (NFC) with a first contactless card via NFC circuitry, the first contactless card being tapped to the apparatus;
in response to the NFC established with the first contactless card, receive one or more cryptograms from the first contactless card, wherein the one or more cryptograms includes at least a first customer identifier;
send the one or more cryptograms to one or more first remote computing devices and receive an indication from the one or more first remote computing devices of successful authentication of the user;
provide, based on the successful user authentication, the one or more restrictions to the one or more remote computing devices and receive the virtual card number having the one or more restrictions from the one or more remote computing devices, the virtual card number funded with a predefined amount of money from a user account associated with the first contactless card; and
establish NFC with a second contactless card different from the first contactless card via the NFC circuitry, the second contactless card being tapped to the apparatus; and
in response to the NFC established with the second contactless card, write the virtual card number to the second contactless card by providing the card virtual number with the one or more restrictions as an NFC data exchange format (NDEF) tag only to a first applet of the second contactless card;
(ii) the one or more remote computing devices comprising one or processors operable to execute stored instructions that, when executed, cause the one or more processors to:
receive and perform decryption on the one or more cryptograms;
authenticate the user based on the first customer identifier;
send the indication of the successful authentication of the user to the apparatus;
receive the one or more restrictions; and
generate and provide the virtual card number to the apparatus; and
(iii) the second contactless card comprising NFC circuitry and memory, the memory comprising the first and second applets, and
wherein the first applet is different from a payment applet, and
wherein the first and second applets reside in a same security domain of the memory of the second contactless card and communicate with each other via a secure communication tunnel.
2. The system of claim 1 , wherein the one or more restrictions include a merchant restriction, an amount restriction, a time period restriction, and/or a location restriction.
3. The system of claim 1 , wherein the one or more processors of the apparatus are further caused to:
detect an NFC compatible device via the NFC circuitry; and
provide the virtual card number to the NFC compatible device, and
wherein the virtual card number is encrypted with a personal identification number (PIN) such that the PIN is required to use or access the virtual number.
4. The apparatus system of claim 3 , wherein the one or more processors of the apparatus are further caused to send and provision the virtual card number to a third-party digital wallet.
5. The system of claim 1 , wherein the one or more processors of the apparatus are further caused to securely transmit, via NFC, expiration date and card verification value (CVV) information to the second contactless card.
6. The system of claim 1 , wherein the one or more processors of the apparatus are further caused to:
prompt the user for confirmation or modification of the one or more restrictions input, set, or specified by the user prior to the authentication and receive a conformation or modification selection; and
allow, based on the modification selection, the user to modify the one or more restrictions.
7. The system of claim 1 , further comprising the first contactless card, the first contactless card comprising memory and processing circuitry for executing instructions stored in the memory to send the one or more cryptograms as one or more NFC data exchange format (NDEF) messages to the apparatus.
8. The system of claim 1 , wherein the second contactless card further comprises processing circuitry for executing instructions stored in the memory to process and execute the first and second applets residing in the same secure domain.
9. The system of claim 1 , wherein the second contactless card is a blank unlocked card and is associated with a recipient of the generated virtual card number.
10. A method comprising:
receiving, via an apparatus, instruction or a selection from a user to generate a virtual card number;
determining, via the apparatus, whether one or more restrictions are associated with the generation of the virtual card number, wherein the one or more restrictions are input, set, or specified by the user via the software application;
establishing, via the apparatus, near field communication (NFC) with a first contactless card using NFC circuitry, the first contactless card being tapped to the apparatus;
in response to the NFC established with the first contactless card, receiving one or more cryptograms from the first contactless card, wherein the one or more cryptograms includes at least a first customer identifier;
sending, via the apparatus, the one or more cryptograms to one or more remote computing devices and receiving an indication from the one or more remote computing devices of successful authentication of the user;
providing, via the apparatus, the one or more restrictions to the one or more remote computing devices based on the successful user authentication and receiving the virtual card number having the one or more restrictions from the one or more remote computing devices, the virtual card number funded with a predefined amount of money from a user account associated with the first contactless card; and
establishing, via the apparatus, NFC with a second contactless card different from the first contactless card using the NFC circuitry, the second contactless card being tapped to the apparatus; and
in response to the NFC established with the second contactless card, writing the virtual card number to the second contactless card by providing the card virtual number with the one or more restrictions as an NFC data exchange format (NDEF) tag only to a first applet of the second contactless card;
receiving and performing, via the one or more remote computing devices, decryption on the one or more cryptograms;
authenticating, via the one or more remove computing devices, the user based on the first customer identifier;
sending, via the one or more remote computing devices, the indication of the successful authentication of the user to the apparatus;
receiving the one or more restrictions; and
generating and providing, via the one or more remote computing devices, the virtual card number to the apparatus; and
wherein memory of the second contactless device comprises the first and second applets, wherein the first applet is different from a payment applet, and wherein the first and second applets reside in a same security domain of the memory of the second contactless card and communicate with each other via a secure communication tunnel.
11. The method of claim 10 , wherein the one or more restrictions include a merchant restriction, an amount restriction, a time period restriction, and/or a location restriction.
12. The method of claim 10 , wherein the second contactless card is a blank unlocked card and is associated with a recipient of the generated virtual card number.
13. At least one non-transitory computer-readable storage medium storing computer-readable program code executable by at least processor to:
receive, via an apparatus, instruction or a selection from a user to generate a virtual card number;
determine, via the apparatus, whether one or more restrictions are associated with the generation of the virtual card number, wherein the one or more restrictions are input, set, or specified by the user via the software application;
establish, via the apparatus, near field communication (NFC) with a first contactless card using NFC circuitry, the first contactless card being tapped to the apparatus;
in response to the NFC established with the first contactless card, receive one or more cryptograms from the first contactless card, wherein the one or more cryptograms includes at least a first customer identifier;
send, via the apparatus, the one or more cryptograms to one or more remote computing devices and receive an indication from the one or more remote computing devices of successful authentication of the user;
provide, via the apparatus, the one or more restrictions to the one or more remote computing devices based on the successful user authentication and receive the virtual card number having the one or more restrictions from the one or more remote computing devices, the virtual card number funded with a predefined amount of money from a user account associated with the first contactless card; and
establish, via the apparatus, NFC with a second contactless card different from the first contactless card using the NFC circuitry, the second contactless card being tapped to the apparatus; and
in response to the NFC established with the second contactless card, write the virtual card number to the second contactless card by providing the card virtual number with the one or more restrictions as an NFC data exchange format (NDEF) tag only to a first applet of the second contactless card;
receive and perform, via the one or more remote computing devices, decryption on the one or more cryptograms;
authenticate, via the one or more remove computing devices, the user based on the first customer identifier;
send, via the one or more remote computing devices, the indication of the successful authentication of the user to the apparatus;
receive the one or more restrictions; and
generate and provide, via the one or more remote computing devices, the virtual card number to the apparatus; and
wherein memory of the second contactless device comprises the first and second applets, wherein the first applet is different from a payment applet, and wherein the first and second applets reside in a same security domain of the memory of the second contactless card and communicate with each other via a secure communication tunnel.
14. The at least one non-transitory computer-readable storage medium of claim 13 , wherein the one or more restrictions include a merchant restriction, an amount restriction, a time period restriction, and/or a location restriction.
15. The at least one non-transitory computer-readable storage medium of claim 13 , wherein the user account is a money account, a checking account, a credit card account, a debit card account, a digital wallet account, or a cryptocurrency account.