IP Library Granted Patent US 11,233,645
Granted Patent B2
US 11,233,645 · App. 16/781,571 · Granted Jan 25, 2022

Systems and methods of key selection for cryptographic authentication of contactless cards

Inventors: Kevin Osborn (Newton Highlands, MA); Jeffrey Rule (Chevy Chase, MD)
Assignee: CAPITAL ONE SERVICES, LLC
H04L9/16G06K19/0723H04L9/0625H04L9/0631H04L9/30H04L9/3228H04L9/3242
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,233,645
App. No.
16/781,571
Granted
Jan 25, 2022
Kind
B2
Abstract

Example embodiments of systems and methods for data transmission between a contactless card and a server are provided. The card may include an applet, a counter, and a plurality of encryption keys. The applet may rotate the plurality of keys based on a predetermined key rotation, select one or more keys for a cryptographic operation, perform the operation using the selected keys and the counter to generate a cryptographic result, and transmit the result and the counter to the server. Upon receipt of the result, a server, in communication with the card and containing the plurality of encryption keys, may rotate the plurality of keys based on the predetermined key rotation, select one or more keys for decryption, wherein the keys selected by the server matches the keys selected by the applet, and perform the decryption on the result.

Claims (39)

1. A data encryption system comprising:

a contactless card comprising a processor and a memory, wherein the memory includes one or more applets, a counter, and a plurality of keys, the counter comprising a sequence; and

a server, the server comprising a processor and a memory, the memory containing the plurality of encryption keys,

wherein the one or more applets are configured to:

select one or more keys from the plurality of keys for use in a plurality of cryptographic operations based on a plurality of cryptographic algorithms, wherein a first cryptographic operation is performed with a first cryptographic algorithm and a first portion of the sequence, and a second cryptographic operation is performed with a second cryptographic algorithm and a second portion of the sequence,

generate a cryptographic result by performing the first and second cryptographic operations using the selected one or more keys and the counter, and

transmit the cryptographic result and the counter to the server, and wherein, upon receipt of the cryptographic result, the server is configured to:

select one or more keys from the plurality of keys, wherein the one or more keys selected by the server matches the one or more keys selected by the one or more applets, and

perform a decryption operation on the cryptographic result based on the one or more keys selected by the server.

2. The data encryption system of claim 1 , wherein:

the one or more applets and the server are configured to generate one or more mapping tables associated with the plurality of keys, and

the one or more mapping tables define a predetermined key rotation.

3. The data encryption system of claim 2 , wherein the one or more mapping tables comprise a plurality of transactions associated with the plurality of keys.

4. The data encryption system of claim 3 , wherein a first transaction utilizes a first key, and a second transaction utilizes a second key.

5. The data encryption system of claim 1 , wherein the first portion of the sequence comprises one or more even numbers, and the second portion of the sequence comprises one or more odd numbers.

6. The data encryption system of claim 1 , wherein the plurality of keys comprises one or more symmetric keys.

7. The data encryption system of claim 1 , the one or more applets are configured to rotate the plurality of keys on a predetermined rotation.

8. The data encryption system of claim 7 , wherein the plurality of keys are rotated in a random manner for a designated number of keys.

9. The data encryption system of claim 1 , wherein the first cryptographic algorithm comprises a symmetric key algorithm, and the second cryptographic algorithm comprises an asymmetric key algorithm.

10. A method of data encryption comprising:

selecting one or more keys from a plurality of keys of a contactless card for use in a plurality of cryptographic operations based on a plurality of cryptographic algorithms, the contactless card comprising a processor and a memory, wherein the memory includes one or more applets, a counter, and the plurality of keys, the counter comprising a sequence, wherein a first cryptographic operation is performed with a first cryptographic algorithm and a first portion of the sequence, and a second cryptographic operation is performed with a second cryptographic algorithm and a second portion of the sequence;

generating a cryptographic result by performing the first and second cryptographic operations using the selected one or more keys and the counter; and

transmitting the cryptographic result and counter for decryption.

11. The method of claim 10 , further comprising:

generating one or more mapping tables associated with the plurality of keys, wherein the one or more mapping tables define a predetermined key rotation.

12. The method of claim 11 , wherein the one or more mapping tables comprises a plurality of transactions associated with the plurality of keys.

13. The method of claim 12 , wherein a first transaction utilizes a first key, and a second transaction utilizes a second key.

14. The method of claim 10 , wherein decryption of the cryptographic result uses one or more of the selected keys.

15. The method of claim 10 , further comprising rotating, prior to selection, the plurality of keys using a sequence interval.

16. The method of claim 10 , wherein the plurality of keys are rotated in a random manner for a designated number of keys.

17. The method of claim 10 , wherein the plurality of keys comprises one or more symmetric keys.

18. The method of claim 10 , wherein the first cryptographic algorithm comprises a symmetric key algorithm, and the second cryptographic algorithm comprises an asymmetric key algorithm.

19. The method of claim 10 , wherein the first portion of the sequence comprises one or more odd numbers, and the second portion of the sequence comprises one or more even numbers.

20. A contactless card comprising:

a processor; and

a memory including one or more applets, a counter, and a plurality of keys, the counter comprising a sequence, wherein the one or more applets are configured to:

select one or more keys from the plurality of keys for use in a plurality of cryptographic operations based on a plurality of cryptographic algorithms, wherein a first cryptographic operation is performed with a first cryptographic algorithm and a first portion of the sequence, and a second cryptographic operation is performed with a second algorithm and a second portion of the sequence,

generate a cryptographic result by performing the first and second cryptographic operations using the selected one or more keys and the counter, and

transmit the cryptographic result and counter for decryption.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 4, 2020
From: OSBORN, KEVIN; RULE, JEFFREY
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 051715/0695 →
Continuity (4)
Continuation 16589476 · Oct 1, 2019
Continuation In Part 16205119 · Nov 29, 2018
Provisional Application 62740352 · Oct 2, 2018
Related Publication 20200228332A1 · Jul 16, 2020
Cited By (1)
US 12,489,625