IP Library Granted Patent US 10,607,214
Granted Patent B1
US 10,607,214 · App. 16/546,657 · Granted Mar 31, 2020

Systems and methods for cryptographic authentication of contactless cards

Inventors: Jeffrey Rule (Chevy Chase, MD); Melissa Heng (Glen Allen, VA); James Ashfield (Midlothian, VA); Colin Hart (Arlington, VA); Rajko Ilincic (Annandale, VA); Wayne Lutz (Fort Washington, MD)
Assignee: CAPITAL ONE SERVICES, LLC
G06Q20/354G06Q20/352G06Q20/409G06Q20/4018
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,607,214
App. No.
16/546,657
Filed
Aug 21, 2019
Granted
Mar 31, 2020
Kind
B1
Examiner
KORSAK, OLEG
Art Unit
2492
USPC
713/171
Abstract

Example embodiments of systems and methods for data transmission between a contactless card, a client device, and one or more servers are provided. The contactless card may include one or more processors and memory. The memory may include one or more applets. The client device may include one or more processors and memory. The client device may be in data communication with the contactless card. One or more servers may be in data communication with the client device. A first set of information may be transmitted from the contactless card to the client device. The first set of information may include one or more links to activate the contactless card. The client device may be configured to receive the first set of information from the contactless card. Upon validation of the first set of information, the contactless card may be activated.

Claims (27)

1. A card activation system comprising:

a contactless card including one or more processors and memory, wherein the memory contains one or more applets;

a client application comprising instructions for execution on a client device including one or more processors and memory; and one or more servers, wherein the contactless card is configured to transmit a first set of information to the client application after entry of the contactless card into a communication field, the first set of information comprising one or more links configured to activate the contactless card and the one or more links includes a first link comprising one or more information elements to activate the contactless card, wherein the one or more information elements includes a first information element comprising a dynamically generated phone number, a second information element comprising one or more commas, and a third information element comprising an encrypted payload, wherein the client application is configured to receive the first set of information from the contactless card and transmit to the one or more servers for validation, and wherein, upon the validation of the first set of information, the contactless card is activated.

2. The card activation system of claim 1 , wherein the second information element comprises one or more commas indicative of durational pauses associated with a phone call initiated by the client application.

3. The card activation system of claim 1 , wherein the third information element is decrypted with one or more keys via the one or more servers.

4. The card activation system of claim 1 , wherein the first set of information further comprises a card verification value to activate the contactless card.

5. The card activation system of claim 1 , wherein the one or more information elements further includes a list including a plurality of phone numbers is received from the contactless card.

6. The card activation system of claim 5 , wherein a phone number is selected from the list based on a purpose of authentication.

7. The card activation system of claim 1 , wherein the contactless card is configured to stop dynamic generation of the first set of information after the client application receives notification from the one or more servers that the contactless card is activated.

8. A method of activating a contactless card, the method comprising the steps of:

entering, by the contactless card, into a communication field;

transmitting, by one or more applets contained in a memory of the contactless card, a first set of information to a client application comprising instructions for execution on a client device via the communication field after entry of the contactless card into a communication field, the first set of information comprising one or more links configured to activate the contactless card, wherein:

the one or more links includes a first link comprising one or more information elements to activate the contactless card, and the one or more information elements includes a first information element comprising a dynamically generated phone number, a second information element comprising one or more commas, and a third information element comprising an encrypted payload;

transmitting, by the client application, the first set of information to one or more servers;

performing, by one or more servers, one or more cryptographic operations to validate the first set of information; and

activating, upon the validation of the first set of information, the contactless card.

9. The method of claim 8 , wherein the one or more commas are indicative of durational pauses associated with a phone call initiated by the client application.

10. The method of claim 8 , wherein the third information element is decrypted with one or more keys via the one or more servers.

11. The method of claim 8 , wherein the first set of information comprises a card verification value to activate the contactless card.

12. The method of claim 8 , wherein the one or more information elements further includes a list including a plurality phone numbers is received from the contactless card and a phone number is selected from the list based on a purpose of authentication.

13. The method of claim 8 , wherein the contactless card is configured to stop dynamic generation of the first set of information after the client application receives notification from the one or more servers that the contactless card is activated.

14. A contactless card comprising:

a processor;

a memory, wherein the memory contains one or more applets and a first set of information, wherein, after entry of the contactless card into a communication field, the one or more applets are configured to transmit the first set of information, wherein the first set of information comprises one or more links configured to activate the contactless card, the one or more links including a first information element and a second information element, and wherein the first information element comprises a dynamically generated phone number and the second information element comprises an encrypted payload.

15. The contactless card of claim 14 , wherein the encrypted payload is encrypted by a public key.

16. The contactless card of claim 15 , wherein the encrypted payload comprises an identification token.

17. The contactless card of claim 15 , wherein the first set of information comprises a card verification value to activate the contactless card.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 21, 2019
From: RULE, JEFFREY; HENG, MELISSA; ASHFIELD, JAMES; HART, COLIN; ILINCIC, RAJKO; LUTZ, WAYNE
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 050116/0743 →
Continuity (2)
Continuation In Part 16205119 · Nov 29, 2018
Provisional Application 62740352 · Oct 2, 2018
Cited By (7)
US 12,288,206 US 12,450,591 US 12,493,868 US 12,499,433 US 12,561,669 US 12,561,673 US 12,626,242