Systems and methods for cryptographic authentication of contactless cards
Example embodiments of systems and methods for data transmission between contactless card and receiving devices are provided. In an embodiment, the contactless card may be configured to create a cryptogram based on a plurality of keys and a counter. The cryptogram may be transmitted to the receiving device. The contactless card may be configured to transmit a one-time password to the client device. The counter value may be adjusted each time the one-time password is generated, and the counter may be configured to increment in a non-monotonic sequence, the sequence associated with one or more cryptographic algorithms.
1. A contactless card, comprising:
a memory, the memory containing a counter; and
a processor, wherein the processor:
generates a one-time password, and
transmits the one-time password for authentication;
wherein the counter is adjusted at one or more intervals in a non-monotonic sequence;
wherein the non-monotonic sequence is created by one or more cryptographic algorithms; and
wherein the counter determines the number of cryptographic operations performed to generate the one time-password.
2. The contactless card of claim 1 , wherein the counter is incremented by a first value for a first account and decremented by a second value for a second account.
3. The contactless card of claim 1 , wherein the counter is decremented at the one or more intervals in the non-monotonic sequence.
4. The contactless card of claim 1 , wherein the one or more cryptographic algorithms are selected to avoid wrapping of the counter.
5. The contactless card of claim 1 , wherein the processor performs one or more cryptographic hashes to generate the counter.
6. The contactless card of claim 1 , wherein the counter is decremented by a first value for a first account and incremented by a second value for a second account.
7. The contactless card of claim 1 , wherein the one or more cryptographic algorithms encrypt a starting value to obtain one or more additional counters.
8. The contactless card of claim 7 , wherein an output of the encryption is truncated to derive the counter.
9. The contactless card of claim 8 , wherein the truncated output is incremented and encrypted to obtain one or more additional counters.
10. A method for authentication, comprising:
generating, by a processor, a one-time password;
transmitting, by the processor, the one-time password for authentication;
wherein the counter is adjusted at one or more intervals in a non-monotonic sequence;
wherein the non-monotonic sequence is created by one or more cryptographic algorithms; and
wherein the counter determines the number of cryptographic operations performed to generate the one time-password.
11. The method of claim 10 , wherein the counter is incremented by a first value for a first account and decremented by a second value for a second account.
12. The method of claim 10 , wherein the counter is incremented at the one or more intervals in the non-monotonic sequence.
13. The method of claim 10 , wherein the counter is decremented at the one or more intervals in the non-monotonic sequence.
14. The method of claim 10 , further comprising performing, by the processor, one or more cryptographic hashes to generate the counter.
15. The method of claim 10 , wherein the one or more cryptographic algorithms encrypt a starting value to obtain one or more additional counters.
16. The method of claim 15 , wherein an output of the encryption is truncated to derive the counter.
17. The method of claim 16 , wherein the truncated output is incremented and encrypted to obtain one or more additional counters.
18. A computer readable non-transitory medium comprising computer executable instructions that, when executed on a processor, perform procedures comprising the steps of:
generating a one-time password;
transmitting the one-time password for authentication;
wherein the counter is adjusted at one or more intervals in a non-monotonic sequence;
wherein the non-monotonic sequence is created by one or more cryptographic algorithms; and
wherein the counter determines the number of cryptographic operations performed to generate the one time-password.
19. The computer readable non-transitory medium of claim 18 , wherein the counter is incremented at the one or more intervals in the non-monotonic sequence.
20. The computer readable non-transitory medium of claim 18 , wherein the counter is decremented at the one or more intervals in the non-monotonic sequence.