Granted Patent B2

US 12,580,752 · App. 18/403,001 · Granted Mar 17, 2026

Inventors: Kevin Osborn (Newton Highlands, MA); Srinivasa Chigurupati (Long Grove, IL); John Jones (Leesburg, VA)

Assignee: Capital One Services, LLC

H04L9/0861H04L9/30

Abstract

Claims (43)

1 . A system for generating a shared secret key for a transaction card, the system comprising:

the transaction card comprising a processor and a memory containing a transaction card private key and a transaction card public key derived from the transaction card private key;

a server comprising a processor and a memory containing a server private key and a server public key derived from the server private key; and

a user device comprising a processor and a memory, the user device configured to:

open a communication field,

read the transaction card public key,

transmit the transaction card public key to the server, wherein the server generates a shared secret key from the transaction card public key and the server private key,

receive the server public key from the server, and

transmit the server public key to the transaction card, wherein the transaction card generates the same shared secret key from the server public key and the transaction card private key.

2 . The system of claim 1 , wherein the transaction card stores the shared secret key in a transaction card memory.

3 . The system of claim 1 , wherein the communication field comprises at least one selected from the group of a near field communication (NFC) field, a radio-frequency identification (RFID) field, or Bluetooth.

4 . The system of claim 1 , wherein the transaction card is newly or recently issued.

5 . The system of claim 1 , wherein both the transaction card public key and the server public key are further derived from a shared common value.

6 . The system of claim 5 , wherein the shared common value is a unique identifier associated with the transaction card.

7 . The system of claim 1 , wherein the user device opens a second communication field and receives from the transaction card the shared secret key.

8 . The system of claim 1 , wherein the server encrypts the shared secret key with a key encryption key, then stores the encrypted shared secret key in a data storage unit.

9 . The system of claim 8 , wherein prior to storing the encrypted shared secret key, the server transmits an authentication request to the user device, then receives an authentication credential from the user device.

10 . A method for generating a shared secret key for a transaction card, comprising:

providing the transaction card comprising a transaction card private key and a transaction card public key derived from the transaction card private key;

providing a server comprising a server private key and a server public key derived from the server private key;

opening, by a user device, a communication field;

reading, by the user device, the transaction card public key;

transmitting, by the user device, the transaction card public key to the server, wherein the server generates a shared secret key from the transaction card public key and the server private key;

receiving, by the user device, the server public key from the server; and

transmitting, by the user device, the server public key to the transaction card, wherein the transaction card generates the same shared secret key from the server public key and the transaction card private key.

11 . The method of claim 10 , wherein the communication field comprises at least one selected from the group of a near field communication (NFC) field, a radio-frequency identification (RFID) field, or Bluetooth.

12 . The method of claim 10 , further comprising authenticating the user device based on the shared secret key.

13 . The method of claim 10 , further comprising automatically initiating a key exchange process upon detecting proximity to the transaction card.

14 . The method of claim 10 , wherein the user device and the transaction card are associated with the same user.

15 . The method of claim 10 , further comprising requesting an authentication credential from a user associated with the user device before initiating a key exchange process.

16 . The method of claim 10 , further comprising generating a unique transaction-specific shared secret key for each transaction.

17 . The method of claim 10 , further comprising:

receiving, by the user device from the server, a request for the shared secret key;

transmitting, by the user device to the server, the shared secret key; and

receiving, by the user device from the server, a validation response indicating that the shared secret key from the transaction card matches the shared secret key on the server.

18 . The method of claim 10 , wherein the method further comprises generating a unique session specific shared secret key for each transaction.

19 . The method of claim 18 , wherein encryption data includes at least one selected from the group of a unique user identification datum, a unique transaction card datum, or time datum.

20 . A non-transitory computer readable medium containing computer executable instructions that, when executed by a computer hardware arrangement, cause the computer hardware arrangement to perform procedures for generating a shared secret key for a transaction card comprising:

opening a communication field;

reading, from the transaction card upon entering the communication field, a transaction card public key derived from a transaction card private key;

transmitting the transaction card public key to a server, wherein the server generates a shared secret key from the transaction card public key and a server private key;

receiving, from the server, a server public key derived from the server private key; and

transmitting the server public key to the transaction card, wherein the transaction card generates the same shared secret key from the server public key and the transaction card private key.

Assignments (2)

Continuity (1)

References Cited (400)