Generating barcodes utilizing cryptographic techniques
Various embodiments are generally directed to secure generation of barcodes using cryptographic techniques. A processor of a contactless card may generate a cryptogram based on a cryptographic algorithm and a diversified key stored in a memory of the contactless card. The processor may receive an encrypted authorization token based on verification of the cryptogram by a server. The processor may generate a barcode utilizing the encrypted authorization token.
1. A contactless card, comprising:
a communications interface;
a memory storing instructions; and
a processor operable to execute the instructions to cause the processor to:
generate a cryptogram based on a cryptographic algorithm and a diversified key stored in the memory;
receive, via the communications interface based on verification of the cryptogram, an encrypted authorization token; and
generate a barcode utilizing the encrypted authorization token.
2. The contactless card of claim 1 , further comprising a display, the processor operable to execute the instructions to cause the processor to:
display the barcode on the display.
3. The contactless card of claim 1 , the processor operable to execute the instructions to cause the processor to:
generate the diversified key based on a master key and a counter value stored in the memory.
4. The contactless card of claim 1 , wherein the barcode is pre-configured by the authorization token to authorize a single transaction.
5. The contactless card of claim 4 , wherein the barcode and the authorization token are configured to expire after the authorization of the single transaction.
6. The contactless card of claim 5 , wherein the single transaction is a payment transaction and the authorization token is a payment token.
7. The contactless card of claim 1 , the processor operable to execute the instructions to cause the processor to:
generate a digital signature based on a private key stored in the memory; and
transmit the cryptogram and the digital signature to a computing device via the communications interface.
8. A non-transitory computer-readable storage medium storing instructions that when executed by a processor circuit of a contactless card cause the processor circuit to:
generate a cryptogram based on a cryptographic algorithm and a diversified key stored in the medium;
receive, via a communications interface of the contactless card based on verification of the cryptogram, an encrypted authorization token; and
generate a barcode utilizing the encrypted authorization token.
9. The medium of claim 8 , storing instructions that when executed by the processor circuit of the contactless card cause the processor circuit to:
display the barcode on a display of the contactless card.
10. The medium of claim 8 , storing instructions that when executed by the processor circuit of the contactless card cause the processor circuit to:
generate the diversified key based on a master key and a counter value stored in the medium.
11. The medium of claim 8 , wherein the barcode is pre-configured by the authorization token to authorize a single transaction.
12. The medium of claim 11 , wherein the barcode and the authorization token are configured to expire after the authorization of the single transaction.
13. The medium of claim 12 , wherein the single transaction is a payment transaction and the authorization token is a payment token.
14. The medium of claim 8 , storing instructions that when executed by the processor circuit of the contactless card cause the processor circuit to:
generate a digital signature based on a private key stored in the medium; and
transmit the cryptogram and the digital signature to a computing device via the communications interface of the contactless card.
15. A method, comprising:
generating, by a processor of a contactless card, a cryptogram based on a cryptographic algorithm and a diversified key stored in a memory of the contactless card;
receiving, by the processor based on verification of the cryptogram by a server, an encrypted authorization token; and
generating, by the processor, a barcode utilizing the encrypted authorization token.
16. The method of claim 15 , further comprising:
displaying the barcode on a display of the contactless card.
17. The method of claim 15 , further comprising:
generating, by the processor, the diversified key based on a master key and a counter value stored in the memory.
18. The method of claim 15 , wherein the barcode is pre-configured by the authorization token to authorize a single transaction.
19. The method of claim 18 , wherein the barcode and the authorization token are configured to expire after the authorization of the single transaction, wherein the single transaction is a payment transaction and the authorization token is a payment token.
20. The method of claim 15 , further comprising:
generating, by the processor, a digital signature based on a private key stored in the memory; and
transmitting, by the processor, the cryptogram and the digital signature to a computing device via a communications interface of the contactless card, wherein the computing device verifies the digital signature based on a public key corresponding to the private key, wherein the server decrypts the cryptogram received from the computing device to verify the cryptogram.