Granted Patent B2

US 12,374,181 · App. 17/095,584 · Granted Jul 29, 2025

Inventors: Kevin Osborn (Newton, MA); Kevin Kelly (Austin, TX)

Assignee: Capital One Services, LLC

G07F7/1008G06F1/04G06K19/0702G06K19/0723G06Q20/3278G06Q20/341G06Q20/4014

Abstract

Claims (46)

1. A non-transitory computer readable medium including instructions, which, when executed by a processor, cause the processor to perform a method for authenticating a user with a card, the method comprising:

receiving, by a service provider device, a request for authentication, the request for authentication comprising a received encrypted value generated, based on a private key and an incremented counter value, by the card, wherein the incremented counter value is generated by incrementing a card counter value stored on the card;

generating a plurality of counter values;

generating a plurality of generated encrypted values by encrypting the plurality of counter values and a private key associated with the card;

storing the plurality of generated encrypted values; and

authenticating the user based on a comparison of a first generated encrypted value from the plurality of generated encrypted values and the received encrypted value,

wherein, upon determining that the first generated encrypted value is not equal to the received encrypted value, authenticating the user if the received encrypted value is equal to a second generated encrypted value from the plurality of generated encrypted values.

2. The non-transitory computer readable medium of claim 1 , wherein generating the plurality of counter values comprises incrementing the counter value.

3. The non-transitory computer readable medium of claim 2 , wherein the counter value is incremented by a predetermined amount.

4. The non-transitory computer readable medium of claim 3 , wherein the predetermined amount is unique to the card.

5. The non-transitory computer readable medium of claim 1 , wherein the method further comprises the step of transmitting instructions configured to cause a user device to complete an action associated with the request for authentication.

6. The non-transitory computer readable medium of claim 1 , wherein the method further comprises the steps of:

determining the received encrypted value and the first generated encryption value of the plurality of generated encrypted values are not equal;

generating a fraud alert message; and

transmitting the fraud alert message.

7. The non-transitory computer readable medium of claim 1 , wherein the request for authentication comprises an account number associating the user to the card.

8. The non-transitory computer readable medium of claim 1 , wherein the plurality of generated encrypted values comprise hashes of the plurality of counter values and the private key.

9. A computer-implemented method for authenticating a user with a card, the method comprising:

receiving, by a service provider device, a request for authentication, the request for authentication comprising a received encrypted value generated, based on a private key and an incremented counter value, by the card, wherein the incremented counter value is generated by incrementing a card counter value, stored on the card;

generating, by the service provider device, a plurality of counter values;

generating, by the service provider device, a plurality of generated encrypted values by encrypting the plurality of counter values with the private key associated with the card;

storing the plurality of generated encrypted values; and

authenticating the user based on a comparison of a first generated encrypted value from the plurality of generated encrypted values and the received encrypted value,

wherein, upon determining that the first generated encrypted value is not equal to the received encrypted value, authenticating the user if the received encrypted value is equal to a second generated encrypted value from the plurality of generated encrypted values.

10. The method of claim 9 , wherein the received encrypted value is valid for a predetermined time window.

11. The method of claim 9 , wherein the method further comprises transmitting an instruction to reset a counter value stored by the card.

12. The method of claim 9 , wherein generating the plurality of counter values comprises applying an algorithm.

13. The method of claim 12 , wherein the algorithm alters an increment by which the plurality of counter values are incremented.

14. The method of claim 9 , wherein generating the plurality of counter values comprises incrementing the counter value.

15. A system, comprising:

a service provider device,

wherein the service provider device is configured to:

receive a request for authentication of a user with a card;

generate a plurality of counter values;

generate a plurality of generated encrypted values by encrypting the plurality of counter values and a private key associated with the card;

store the plurality of generated encrypted values;

receive a received encrypted value from a radio frequency transmitter of the card, wherein the received encrypted value is generated, by the card, based on an incremented card counter value and the private key stored on the card, wherein the incremented card counter value is generated upon receipt of a notification signal, transmitted from the radio frequency transmitter, by the card; and

authenticate the user based on a comparison of a first generated encrypted value from the plurality of generated encrypted values and the received encrypted value,

wherein upon determining that the first generated encrypted value is not equal to the received encrypted value, authenticating the user if the received encrypted value is equal to a second generated encrypted value from the plurality of generated encrypted values.

16. The system of claim 15 , wherein the card further stores an initial value that is unique to the card.

17. The system of claim 15 , wherein the card is further configured to:

reset the card counter value in response to a signal received from a user device; and

store the reset card counter value.

18. The system of claim 15 , wherein the card comprises a transaction card.

19. The system of claim 15 , wherein the card comprises at least one selected from the group of a passport card, a driver's license, and an entry point access card.

20. The system of claim 15 , wherein the received encrypted value, generated by the card, is provided to the radio frequency transmitter for transmission to the service provider device.

Assignments (1)

Continuity (3)

References Cited (400)