Granted Patent B2

US 12,749,068 · App. 19/250,966 · Granted Sep 29, 2026

Inventors: Jeffrey Rule (Chevy Chase, MD); Wayne Lutz (Fort Washington, MD)

Assignee: Capital One Services, LLC

G06Q20/354G06Q20/352G06Q20/3829G06Q2220/00

Abstract

Claims (63)

1 . A method comprising:

receiving, by a wireless card reader of a computing device, a network address from a contactless card;

accessing, via a web browser executing on the computing device, a web page at the network address;

receiving, by the wireless card reader, encrypted data and unencrypted data from the contactless card;

transmitting, via the web page in the web browser and to a server, an activation request to activate the contactless card, the activation request including both the encrypted data and the unencrypted data;

receiving, via the web page in the web browser, an activation response from the server;

determining, via the web page in the web browser and based on the activation response, that the server transitioned the contactless card from an inactivated payment state to an activated payment state based on the encrypted data and the unencrypted data;

generating, via the web page in the web browser and based on determining that the server transitioned the contactless card from the inactivated payment state to the payment state, an instruction to activate a payment applet of the contactless card; and

transmitting, via the web page in the web browser and to the contactless card, the instruction to activate the payment applet.

2 . The method of claim 1 further comprising:

controlling, via the web page in the web browser, the wireless card reader.

3 . The method of claim 2 further comprising:

outputting, via the web page in the web browser, an instruction to tap the contactless card on the wireless card reader after accessing the web page.

4 . The method of claim 1 further comprising:

transmitting, by the computing device and to the server, an access request and the network address; and

receiving, by the computing device, the web page from the server.

5 . The method of claim 4 further comprising:

launching, by the computing device, the web browser responsive to receiving the network address.

6 . The method of claim 1 further comprising:

determining that the server transitioned the contactless card from the inactivated payment state to the activated payment state based on a diversified key generated by the server from encrypting an incremented counter value and a card master key associated with the unencrypted data.

7 . The method of claim 6 further comprising:

determining that the server transitioned the contactless card from the inactivated payment state to the activated payment state based on the server decrypting the encrypted data with the diversified key.

8 . The method of claim 1 further comprising:

transmitting, by the computing device and to the contactless card via the wireless card reader, an instruction to generate the network address and the encrypted data.

9 . An apparatus comprising:

a processor;

a wireless card reader; and

a memory comprising instructions that, when executed by the processor, cause the processor to:

receive, by the wireless card reader, a network address from a contactless card;

access, via a web browser, a web page at the network address;

receive, by the wireless card reader, encrypted data and unencrypted data from the contactless card;

transmit, via the web page in the web browser and to a server, an activation request to activate the contactless card, the activation request including both the encrypted data and the unencrypted data;

receive, via the web page in the web browser, an activation response from the server;

determine, via the web page in the web browser and based on the activation response, that the server transitioned the contactless card from an inactivated payment state to an activated payment state based on the encrypted data and the unencrypted data;

generate, via the web page in the web browser and based on determining that the server transitioned the contactless card from the inactivated payment state to the payment state, an instruction to activate a payment applet of the contactless card; and

transmit, via the web page in the web browser and to the contactless card, the instruction to activate the payment applet.

10 . The apparatus of claim 9 , wherein the instructions further cause the processor to control, via the web page in the web browser, the wireless card reader.

11 . The apparatus of claim 10 , wherein the instructions further cause the processor to output, via the web page in the web browser, an instruction to tap the contactless card on the wireless card reader after accessing the web page.

12 . The apparatus of claim 9 , wherein the instructions further cause the processor to:

transmit an access request and the network address to the server; and

receive the web page from the server.

13 . The apparatus of claim 12 wherein the instructions further cause the processor to launch the web browser responsive to receiving the network address.

14 . The apparatus of claim 9 wherein the instructions further cause the processor to determine that the server transitioned the contactless card from the inactivated payment state to the activated payment state based on a diversified key generated by the server from encrypting an incremented counter value and a card master key associated with the unencrypted data.

15 . The apparatus of claim 14 wherein the instructions further cause the processor to determine that the server transitioned the contactless card from the inactivated payment state to the activated payment state based on the server decrypting the encrypted data with the diversified key.

16 . The apparatus of claim 9 wherein the instructions further cause the processor to transmit, to the contactless card and via the wireless card reader, an instruction to generate the network address and the encrypted data.

17 . A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that, when executed by a processor, cause the processor to:

receive, via a wireless card reader, a network address from a contactless card;

access, via a web browser, a web page at the network address;

receive, by the wireless card reader, encrypted data and unencrypted data from the contactless card;

transmit, via the web page in the web browser and to a server, an activation request to activate the contactless card, the activation request including both the encrypted data and the unencrypted data;

receive, via the web page in the web browser, an activation response from the server;

determine, via the web page in the web browser and based on the activation response, that the server transitioned the contactless card from an inactivated payment state to an activated payment state based on the encrypted data and the unencrypted data;

generate, via the web page in the web browser and based on determining that the server transitioned the contactless card from the inactivated payment state to the payment state, an instruction to activate a payment applet of the contactless card; and

transmit, via the web page in the web browser and to the contactless card, the instruction to activate the payment applet.

18 . The computer-readable storage medium of claim 17 wherein the instructions further cause the processor to:

control, via the web page in the web browser, the wireless card reader;

output, via the web page in the web browser, an instruction to tap the contactless card on the wireless card reader after accessing the web page; and

transmit, to the contactless card and via the wireless card reader, an instruction to generate the network address and the encrypted data.

19 . The computer-readable storage medium of claim 17 wherein the instructions further cause the processor to:

transmit an access request and the network address to the server;

receive the web page from the server; and

launch the web browser responsive to receiving the network address.

20 . The computer-readable storage medium of claim 16 wherein the instructions further cause the processor to determine that the server transitioned the contactless card from the inactivated payment state to the activated payment state based the server decrypting the encrypting data.

Assignments (1)

Continuity (4)

References Cited (207)