Granted Patent B2

US 12,333,531 · App. 18/242,389 · Granted Jun 17, 2025

Inventors: Kevin Osborn (Newton Highlands, MA); Jeffrey Rule (Chevy Chase, MD)

Assignee: Capital One Services, LLC

G06Q20/3829G06Q20/1085

Abstract

Claims (47)

1. A secure reprovisioning system, comprising:

a first device having an association with a first account, comprising:

a memory containing one or more applets, a counter value, and transmission data;

a communication interface; and

one or more processors in communication with the memory and the communication interface;

wherein the first device is configured to:

create a cryptogram based on the counter value, wherein the cryptogram includes the counter value and the transmission data,

transmit, after entry of the communication interface into a communication field, the cryptogram,

update, after transmission of the cryptogram, the counter value,

receive, via the communication interface, one or more encrypted keys and one or more parameters,

decrypt the one or more encrypted keys, and

after decryption of the one or more encrypted keys, switch the association of the first device from the first account to a second account.

2. The secure reprovisioning system of claim 1 , wherein the first device is configured to receive the one or more encrypted keys and the one or more parameters after a determination of a security concern.

3. The secure reprovisioning system of claim 1 , wherein the first device is subject to one or more eligibility criteria prior to receiving the one or more encrypted keys and the one or more parameters.

4. The secure reprovisioning system of claim 1 , wherein the one or more parameters comprises a primary account number.

5. The secure reprovisioning system of claim 1 , wherein the one or more applets are configured to store the one or more decrypted keys in a secure element.

6. The secure reprovisioning system of claim 1 , wherein the first device is configured to receive the one or more encrypted keys and the one or more parameters on a predetermined time basis.

7. The secure reprovisioning system of claim 1 , wherein the one or more encrypted keys and the one or more parameters are received from a first automated teller machine (ATM) at a first location.

8. The secure reprovisioning system of claim 1 , wherein the first device is restricted to a predetermined use.

9. The secure reprovisioning system of claim 1 , wherein a first applet is configured to transmit, via a communication channel, the one or more decrypted keys and one or more parameters to a second applet.

10. The secure reprovisioning system of claim 1 , wherein the first device is configured to receive a command-application protocol data unit including the one or more encrypted keys, the one or more parameters, one or more applet identifiers, and one or more instructions associated with a class.

11. The secure reprovisioning system of claim 10 , wherein the first device is configured to transmit, responsive to the command-application protocol data unit, a response-application protocol data unit indicating an execution status associated with the one or more instructions.

12. A method of secure reprovisioning of a payment instrument, comprising:

creating a cryptogram based on a counter value, wherein the cryptogram includes the counter value and transmission data;

transmitting, via a communication interface, the cryptogram;

updating the counter value;

receiving, via the communication interface, a first set of one or more encrypted keys and a first set of one or more parameters;

decrypting the first set of one or more encrypted keys; and

changing an association of the payment instrument from a first account to a second account.

13. The method of claim 12 , further comprising receiving the first set of one or more encrypted keys and the first set of one or more parameters after a determination of a security concern.

14. The method of claim 12 , wherein the association is changed from the first account to the second account in response to a detection of a type of transaction.

15. The method of claim 12 , wherein the first set of one or more encrypted keys and the first set of one or more parameters are received from a first automated teller machine (ATM) at a first location.

16. The method of claim 15 , further comprising:

receiving, via the communication interface from a second ATM at a second location, a second set of one or more encrypted keys and a second set of one or more parameters;

decrypting the second set of one or more encrypted keys; and

changing the association from the second account to the first account.

17. The method of claim 12 , further comprising transmitting a response-application protocol data unit indicating an execution status responsive to one or more instructions of a command-application protocol data unit.

18. The method of claim 12 , further comprising transmitting, via a communication channel, a first set of one or more decrypted keys and first set of one or more parameters from a first applet to a second applet.

19. The method of claim 12 , further comprising receiving, after input authentication, the first set of one or more encrypted keys and the first set of one or more parameters.

20. A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform operations for secure reprovisioning of a payment instrument, the operations comprising:

creating a cryptogram based on a counter value, wherein the cryptogram includes the counter value and transmission data;

transmitting, via a communication interface, the cryptogram;

updating the counter value;

receiving, via the communication interface, a command-application protocol data unit including one or more encrypted keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class;

decrypting the one or more encrypted keys in accordance with the one or more instructions;

switching an association of the payment instrument from a first account to a second account; and

transmitting a response-application protocol data unit indicating an execution status associated with the one or more instructions.

Assignments (1)

Continuity (2)

References Cited (400)