Systems and methods for inventory management using cryptographic authentication of contactless cards
Example embodiments of systems and methods for data transmission system between transmitting and receiving devices for use in a tap and walk store are provided. In an example embodiment, the transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key. Disclosed systems allow a user to purchase items utilizing the disclosed transmitting device.
1. A computer readable non-transitory medium containing instructions for execution by a contactless card comprising a processor and a memory, wherein, upon execution by the contactless card, the instructions cause the contactless card to perform procedures comprising:
generating a first token in response to a first request for a first identification token received from a first inventory management device;
encrypting the first token using a cryptographic algorithm;
transmitting to the first inventory management device, after entry of the contactless card into a first communication field of the first inventory management device, the first token;
receiving from the first inventory management device an authorization token;
receiving a first message from the first inventory management device, the first message including at least one product identifier;
receiving from a second inventory management device a second request for a second identification token; and
transmitting to the second inventory management device, after entry of the contactless card into a second communication field of the second inventory management device, the authorization token.
2. The computer readable non-transitory medium of claim 1 , wherein:
the memory of the contactless card contains a list of a plurality of product identifiers, and
the procedures further comprise updating the list of the plurality of product identifiers based on the first message.
3. The computer readable non-transitory medium of claim 2 , wherein:
the procedures further comprise transmitting a second message to execute an operation, and
the second message includes one of the plurality of product identifiers.
4. The computer readable non-transitory medium of claim 3 , wherein the operation comprises obtaining, by a point of sale device from a pricing server, a price of a product associated with the one of the plurality of product identifiers included in the second message.
5. The computer readable non-transitory medium of claim 3 , wherein the operation further comprises determining, by a point of sale device, an anticipated produced weight based on the one of the plurality of product identifiers included in the second message.
6. The computer readable non-transitory medium of claim 1 , wherein the procedures further comprise:
receiving a second message from the second inventory management device, the second message including another product identifier.
7. The computer readable non-transitory medium of claim 1 , wherein the authorization token is generated by the first inventory management device based on the first token.
8. The computer-readable non-transitory medium of claim 1 , wherein the authorization token expires after a predetermined period of time.
9. The computer readable non-transitory medium of claim 2 , the procedures further comprising:
receiving a second message, the second message including a first product identifier from the list of a plurality of product identifiers; and
removing the first product identified from the list of the plurality of product identifiers.
10. The computer-readable non-transitory medium of claim 1 , wherein the at least one product identifier comprises a stock keeping unit number.
11. An authentication system, comprising:
a contactless card comprising a processor and a memory,
wherein the contactless card is configured to:
receive a first request for a first identification token from a first inventory management device,
generate a first token in response to the first request,
encrypt the first token using a cryptographic algorithm,
transmit to the first inventory management device, after entry of the contactless card into a first communication field of the first inventory management device, the first token,
receive from the first inventory management device an authorization token,
receive from the first inventory management device a first message, the first message including at least one product identifier,
receive from a second inventory management device a second request for a second identification token; and
transmit to the second inventory management device, after entry of the contactless card into a second communication field of the second inventory management device, the authorization token.
12. The authentication system of claim 11 , wherein:
the memory of the contactless card contains a list of a plurality of product identifiers, and
the contactless card is further configured to update the list of the plurality of product identifiers based on the first message.
13. The authentication system of claim 12 , wherein:
the second inventory management device is further configured to transmit a second message to the contactless card the second message including another product identifier.
14. The authentication system of claim 11 , wherein:
the contactless card is further configured to transmit a second message, and
the second message includes one of the plurality of product identifiers.
15. The authentication system of claim 14 , wherein the contactless card is further configured to transmit the second message after a second entry into the first communication field.
16. The authentication system of claim 15 , wherein:
the contactless card is further configured to transmit the second message after a third entry into the first communication field,
the contactless card is configured to remove the one of the plurality of product identifiers from the list of the plurality of product identifiers.
17. A method performed by a contactless card comprising a processor and a memory, the method comprising:
generating a first token in response to a first request for a first identification token received from a first inventory management device;
encrypting the first token using a cryptographic algorithm;
transmitting to the first inventory management device, after entry of the contactless card into a first communication field of the first inventory management device, the first token;
receiving from the first inventory management device an authorization token;
receiving a first message from the first inventory management device, the first message including at least one product identifier,
receiving from a second inventory management device a second request for a second identification token; and
transmitting to the second inventory management device, after entry of the contactless card into a second communication field of the second inventory management device, the authorization token.
18. The method of claim 17 , wherein:
the memory contains a list of a plurality of product identifiers, and
the method further comprises updating the list of the plurality of product identifiers based on the first message.
19. The method of claim 18 , further comprising:
receiving a second message, the second message including a first product identifier from the list of the plurality of product identifiers; and
removing the first product identified from the list of the plurality of product identifiers.
20. The method of claim 18 , further comprising:
transmitting a second message to execute an operation; and
the second message includes one of the plurality of product identifiers.