Granted Patent B2

US 12,597,012 · App. 18/524,866 · Granted Apr 7, 2026

Inventors: Jeffrey Rule (Chevy Chase, MD); Wayne Lutz (Fort Washington, MD)

Assignee: Capital One Services, LLC

G06Q20/354G06Q20/352G06Q20/3829G06Q2220/00

Abstract

Claims (58)

1 . A method, comprising:

transmitting, by a server to a web browser on a client device, a web page;

receiving, by the server from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;

encrypting, by the server, an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;

decrypting, by the server based on the diversified key, the encrypted data;

transitioning, by the server based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database that the contactless card is in the active payment state; and

transmitting, by the server to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

2 . The method of claim 1 wherein the unencrypted data includes an unencrypted customer identifier.

3 . The method of claim 1 , further comprising:

prior to transitioning the contactless card:

receiving, by the server, a first request to process a payment using the contactless card; and

rejecting, by the server, the first request based on the contactless card being in the inactive payment state; and

subsequent to transitioning the contactless card:

receiving, by the server, a second request to process a payment with the contactless card; and

processing, by the server, the second request based on the contactless card being in the active payment state.

4 . The method of claim 1 , further comprising:

identifying, in the activation request, an indication specifying that the encrypted data and the unencrypted data were read from the contactless card.

5 . The method of claim 1 , wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the server transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

6 . The method of claim 1 , further comprising:

identifying, by the server based on the unencrypted data, a copy of the card master key for the contactless card, wherein the copy of the card master key is stored on the server.

7 . A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:

transmit, to a web browser on a client device, a web page;

receive, from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;

encrypt an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;

decrypt, based on the diversified key, the encrypted data;

transition, based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database that the contactless card is in the active payment state; and

transmit, to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

8 . The computer-readable storage medium of claim 7 , wherein the instructions further cause the processor to, prior to transitioning the contactless card:

receive a first request to process a payment using the contactless card; and

reject the first request based on the contactless card being in the inactive payment state.

9 . The computer-readable storage medium of claim 8 , wherein the instructions further cause the processor to, subsequent to transitioning the contactless card:

receive a second request to process a payment with the contactless card; and

process the second request based on the contactless card being in the active payment state.

10 . The computer-readable storage medium of claim 7 , wherein the instructions further cause the processor to:

identify, in the activation request, an indication specifying the encrypted data and the unencrypted data were read from the contactless card.

11 . The computer-readable storage medium of claim 7 , wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the processor transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

12 . The computer-readable storage medium of claim 7 , wherein the instructions further cause the processor to:

identify, based on the unencrypted data, a copy of the card master key for the contactless card.

13 . A computing apparatus comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to:

transmit, to a web browser on a client device, a web page;

receive, from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;

encrypt an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;

decrypt, based on the diversified key, the encrypted data;

transition, based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database in the memory that the contactless card is in the active payment state; and

transmit, to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

14 . The computing apparatus of claim 13 , wherein the instructions further cause the processor to, prior to transitioning the contactless card:

receive a first request to process a payment using the contactless card; and

reject the first request based on the contactless card being in the inactive payment state.

15 . The computing apparatus of claim 14 , wherein the instructions further cause the processor to, subsequent to transitioning the contactless card:

receive a second request to process a payment with the contactless card; and

process the second request based on the contactless card being in the active payment state.

16 . The computing apparatus of claim 13 , wherein the instructions further cause the processor to:

identify, in the activation request, an indication specifying that the encrypted data and the unencrypted data were read from the contactless card.

17 . The computing apparatus of claim 13 , wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the processor transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

18 . The computing apparatus of claim 13 , wherein the instructions further cause the processor to:

identify, based on the unencrypted data, a copy of the card master key for the contactless card.

Assignments (1)

Continuity (3)

References Cited (205)