Granted Patent B2

US 12,261,960 · App. 17/845,204 · Granted Mar 25, 2025

Inventors: Kevin Osborn (Newton Highlands, MA); Jeffrey Rule (Chevy Chase, MD); Paul Moreton (Glen Allen, VA); William Duane (Westford, MA); Colin Hart (Arlington, VA); Kaitlin Newman (Washington, DC); Lara Mossler (Farmville, VA); Daniel Herrington (New York, NY); Srinivasa Chigurupati (Long Grove, IL); Ian Prince (Toronto, CA); Wayne Lutz (Fort Washington, MD)

Assignee: Capital One Services, LLC

H04L9/3234G06Q20/204G06Q20/3226G06Q20/3278G06Q20/352G06Q20/40H04L9/0866H04L9/14H04L9/3228H04L9/3242H04L63/0853

Abstract

Claims (63)

1. A contactless card, comprising:

a substrate;

a memory containing a first card key generated based on a first master key and a second card key generated based on a second master key; and

a processor,

wherein the processor is configured to:

generate a first session key using the first card key,

generate a second session key using the second card key,

generate a cryptogram using the first session key, and

encrypt the cryptogram using the second session key.

2. The contactless card of claim 1 , wherein the memory further stores a counter.

3. The contactless card of claim 2 , wherein the cryptogram includes the counter.

4. The contactless card of claim 2 , wherein the first session key is generated using the first card key and the counter.

5. The contactless card of claim 4 , wherein the second session key is generated using the second card key and the counter.

6. The contactless card of claim 2 , wherein the processor is further configured to:

transmit the cryptogram to a server, and

update the counter for each transmission of the cryptogram.

7. The contactless card of claim 6 , wherein the processor is configured to transmit the cryptogram to the server via a client device.

8. The contactless card of claim 6 , wherein the first session key and the second session key are generated for each transmission of the cryptogram.

9. The contactless card of claim 1 , wherein the first card key is generated based on the first master key and at least one selected from the group of a unique identifier and a sequence number.

10. The contactless card of claim 9 , wherein the second card key is generated based on the second master key and at least one selected from the group of the unique identifier and the sequence number.

11. The contactless card of claim 10 , wherein the cryptogram includes the unique identifier.

12. A system, comprising:

a server comprising a processor and a memory, the memory containing a first diversified key generated based on a first master key and a second diversified key generated based on a second master key,

wherein the server is configured to:

receive a cryptogram,

generate a first session key based on the first diversified key,

generate a second session key based on the second diversified key,

decrypt the cryptogram using the second session key, and

validate the cryptogram using the first session key.

13. The system of claim 12 , further comprising:

a contactless card comprising a substrate, a processor, and a memory, the memory containing a first card key and a second card key,

wherein the contactless card is configured to:

generate a first card session key using the first card key,

generate a second card session key using the second card key,

generate the cryptogram using the first card session key,

encrypt the cryptogram using the second card session key, and

transmit the cryptogram to the server.

14. The system of claim 12 , wherein:

the first session key is generated using the first diversified key and a counter, and

the second session key is generated using the second diversified key and the counter.

15. The system of claim 13 , wherein:

the memory of the contactless card contains a card counter,

the contactless card is further configured to update the card counter for each transmission of the cryptogram,

the memory of the server contains a server counter, and

the server is further configured to update the server counter for each receipt of the cryptogram.

16. The system of claim 15 , wherein:

the contactless card is further configured to independently update the card counter, and

the server is further configured to independently update the server counter.

17. A method for performance by a contactless card comprising a substrate, a processor, and a memory, the memory containing a first card key generated based on a first master key and a second card key generated based on a second master key, the method comprising:

generating a first session key using the first card key;

generating a second session key using the second card key;

generating a cryptogram using the first session key; and

encrypting the cryptogram using the second session key.

18. The method of claim 17 , wherein:

the memory further stores a counter,

the first session key is generated using the first card key and the counter, and

the second session key is generated using the second card key and the counter.

19. The method of claim 18 , wherein:

the counter comprises a one-time passcode, and

the cryptogram comprises activation data for the contactless card.

20. The method of claim 18 , wherein:

the cryptogram includes the counter, and

the method further comprises transmitting the counter and the cryptogram to a server.

Assignments (1)

Continuity (5)

References Cited (400)