Systems and methods for contactless smart card authentication
A method of activating a smart card includes issuing a smart card in a deactivated state such that the smart card is incapable of performing a transaction; receiving an authentication token from a mobile device via a wireless communication of the authentication token from the smart card in the deactivated state to the mobile device; extracting data from the authentication token; confirming the extracted data corresponds to stored data regarding a customer who was issued smart card; and in response to confirming the extracted data, enabling the smart card for a subsequent transaction.
1. A method of activating a smart card, the method comprising:
issuing, to a customer, the smart card in a deactivated state such that the smart card is incapable of performing a transaction; and
activating the smart card prior to an initial smart card transaction at a physical point of sale by:
receiving an authentication token from a mobile device via a wireless transmission of the authentication token from the smart card in the deactivated state to the mobile device, the authentication token including a cryptogram and customer information;
extracting data from the authentication token regarding the customer information;
confirming the extracted data corresponds to stored data regarding the customer issued the smart card;
decrypting the cryptogram to reveal resulting information;
verifying that the revealed resulting information corresponds to the customer and the smart card;
updating a customer database to indicate that the extracted data and the revealed resulting information is confirmed to activate the smart card for the initial smart card transaction; and
providing a payment card token associated with the smart card to the mobile device as part of a mobile wallet transaction using the mobile device involving the smart card.
2. The method of claim 1 , further comprising receiving at least one of a PIN, biometric data, and an answer to an identification question as part of the confirmation process.
3. The method of claim 2 , wherein in response to receiving a successful response of the at least one of the PIN, biometric data, and the answer to the identification question, the smart card is enabled for the subsequent transaction.
4. The method of claim 1 , further comprising updating information in a customer database to show an authentication of the smart card.
5. The method of claim 1 , wherein the wireless transmission is a near-field communication exchange.
6. A method of activating a payment card, the method comprising:
issuing, to a customer, the payment card in a deactivated state such that the payment card is incapable of performing a transaction; and
activating the payment card prior to an initial payment card transaction at a physical point of sale by:
receiving an authentication request from a mobile device based on a near-field communication tap of the payment card with the mobile device, the authentication request including a cryptogram and customer information;
extracting data from the authentication request regarding the customer information;
comparing the extracted data with stored information regarding the customer issued the payment card;
decrypting the cryptogram to reveal resulting information;
confirming that the revealed resulting information corresponds to the customer and the payment card; and
updating a customer database to indicate that the extracted data and the revealed resulting information is confirmed to activate the payment card for the initial payment card transaction; and
providing a payment card token associated with the payment card to the mobile device as part of a mobile wallet transaction using the mobile device involving the payment card.
7. The method of claim 6 , wherein the authentication request is a transaction authorization of entailing a charge of less than one dollar.
8. The method of claim 6 , further comprising receiving at least one of a PIN, biometric information, and an answer to an identification question as part of the comparison process.
9. The method of claim 6 , further comprising:
receiving an indication that identifies the payment card as lost or stolen; and
disabling subsequent transaction requests involving the payment card.