Granted Patent B2

US 12,299,672 · App. 18/128,582 · Granted May 13, 2025

Inventors: Kevin Osborn (Newton Highlands, MA); Jeffrey Rule (Chevy Chase, MD)

Assignee: Capital One Services, LLC

G06Q20/352H04L9/0825H04L9/0869H04L2209/56

Abstract

Claims (60)

1. A method for synchronizing a counter value, comprising:

receiving, by a contactless card having a processor and a memory, a random number,

wherein the memory comprises a counter value, a public key, and a private key;

generating, by the contactless card, a cryptogram based on the random number, the private key, and the counter value, the cryptogram including an encrypted version of the counter value;

transmitting, by the contactless card to a client application of a client device, the cryptogram, including the encrypted version of the counter value, when the client application is not connected to an external network;

transmitting, by the contactless card to the client application of the client device, an issuer public key certificate, the issuer public key certificate including an issuer public key, a certificate authority private key, and static data;

verifying, by the client application of the client device, the issuer public key certificate with a certificate authority public key which was previously provisioned to the client device when the client device was connected to the external network;

verifying, by the client application of the client device, the static data;

decrypting, by the client application, the cryptogram using the public key and the random number that was generated by the client application, wherein decrypting the cryptogram includes decrypting the encrypted version of the counter value, thereby providing the counter value, as decrypted, to the client application;

storing the counter value into memory on the client device; and

calling, by the client application, an application programming interface to update the counter value within a first server to thereby synchronize the counter value between the contactless card, the client device, and the first server;

wherein, in response to the client device determining that the counter value of the client device later becomes unsynchronized with at least the first server, the method further includes the client application communicating with the first server to synchronize the counter value with the first server without waiting for a new interaction with the contactless card.

2. The method of claim 1 , wherein the method further comprises the steps of:

transmitting, by the client application, the random number to the contactless card, before the cryptogram is generated; and

authenticating, by the client application, a signature of the public key with a signature authority list.

3. The method of claim 2 , wherein the counter value is stored in the memory of the client device by the client application.

4. The method of claim 2 , wherein the counter value is sent by the client application to a second server to be stored in a memory of the second server.

5. The method of claim 2 , wherein the client application transmits the counter value to the first server over the external network when the client application is connected to the external network.

6. The method of claim 2 , wherein the authenticating of the signature of the public key is a dynamic data authentication process.

7. The method of claim 6 , wherein the dynamic data authentication process is performed locally.

8. The method of claim 2 , wherein the authenticating of the signature of the public key is a combined dynamic data authentication process wherein the client application transmits an indication of a transaction amount associated with the cryptogram to the first server.

9. The method of claim 7 , wherein the cryptogram is validated with a secret key by the client application.

10. The method of claim 1 , wherein:

the memory further comprises a unique identifier associated with the card, and

the cryptogram is generated based on the random number, the private key, the counter value, and the unique identifier.

11. The method of claim 2 , wherein the method further comprises the step verifying, by the client application with the counter value, a transaction involving the contactless card.

12. A system for synchronizing a counter value, comprising:

a contactless card having a processor and a memory, the memory of the contactless card containing a counter value, a public key, and a private key, wherein the contactless card is configured to:

receive a random number; and

generate a cryptogram based on the random number, the private key, and the counter value, the cryptogram including an encrypted version of the counter value; and

a client device having a client application comprising instructions for execution on the client device, wherein the client application is configured to:

receive, from the contactless card when the client application is not connected to an external network, the cryptogram, including the encrypted version of the counter value;

receive, from the contactless card, an issuer public key certificate, the issuer public key certificate including an issuer public key, a certificate authority private key, and static data;

verify the issuer public key certificate with a certificate authority public key which was previously provisioned to the client device when the client device was connected to the external network;

verify the static data;

decrypt the cryptogram using the public key and the random number that was generated by the client application, wherein decrypting the cryptogram includes the client application to decrypt the encrypted version of the counter value, thereby providing the counter value, as decrypted, to the client application;

store the counter value into memory on the client device; and

call an application programming interface to update the counter value within a first server to thereby synchronize the counter value between the contactless card, the client device, and the first server;

wherein, in response to the client device determining that the counter value of the client device later becomes unsynchronized with at least the first server, the client device is further configured to communicate with the first server to synchronize the counter value with the first server without waiting for a new interaction with the contactless card.

13. The system of claim 12 , wherein the client application is configured to:

transmit the random number to the contactless card before the cryptogram is generated,

receive the public key from the contactless card, and

verify a signature of the public key with a signature authority list.

14. The system of claim 13 , wherein the signature authority list is stored in the memory of the client device.

15. The system of claim 13 , wherein the client application is configured to transmit the counter value to the first server when the client device is connected to the external network.

16. The system of claim 12 , wherein the client application is associated with an issuer of the contactless card.

17. The system of claim 13 , wherein the client application is further configured to transmit an offline zero dollar authorization request to the first server based on the cryptogram.

18. A computer readable non-transitory medium comprising computer executable instructions that, when executed on one or more processors, configure the one or more processors to perform procedures comprising:

receiving, at a contactless card, a random number;

generating a cryptogram based on the random number, a private key, and a counter value, the cryptogram including an encrypted version of the counter value;

transmitting the cryptogram, including the encrypted version of the counter value, to a client application of a client device when the client application is not connected to an external network;

transmitting an issuer public key certificate, the issuer public key certificate including an issuer public key and a certificate authority private key;

verifying the issuer public key certificate with a certificate authority public key which was previously provisioned to the client device when the client device was connected to the external network,

decrypting the cryptogram using the public key and the random number that was generated by the client application, wherein decrypting the cryptogram includes decrypting the encrypted version of the counter value, thereby providing the counter value, as decrypted, to the client application;

storing the counter value into memory on the client device; and

calling an application programming interface to update the counter value within a first server to thereby synchronize the counter value between the contactless card, the client device, and the first server;

wherein, in response to the client device determining that the counter value of the client device later becomes unsynchronized with at least the first server, the procedures further include the client application communicating with the first server to synchronize the counter value with the first server without waiting for a new interaction with the contactless card.

19. The computer readable non-transitory medium of claim 18 , wherein the computer executable instructions that, when executed on the one or more processors, further configure the one or more processors to perform procedures comprising:

transmitting, the random number to the contactless card, before the cryptogram is generated; and

verifying a signature of the public key with a signature authority list.

Assignments (1)

Continuity (1)

References Cited (400)