Granted Patent B2

US 12,524,768 · App. 18/602,220 · Granted Jan 13, 2026

Inventors: Jeffrey Rule (Chevy Chase, MD); Bob Uni Koshy (Henrico, VA); Kevin Osborn (Newton, MA)

Assignee: Capital One Services, LLC

G06Q20/4018G06F8/60G06Q20/352G06Q20/382H04L9/3228H04L67/02

Abstract

Claims (73)

1 . A computer-implemented method, comprising:

receiving, by a processor of a device from an ecommerce server, a web page including a uniform resource locator (URL), the URL directed to an on-demand application hosted by an application server and the URL including one or more of a merchant identifier associated with the web page and a cart identifier for a transaction;

downloading, by the processor of the device based on a selection of the URL in a web browser of the device, the on-demand application from the application server;

selecting, by the on-demand application, a first financial institution based on a plurality of financial institution applications installed on the device;

generating, by a contactless card associated with an account of the first financial institution, encrypted data including a cryptogram by encrypting a customer identifier using a master key of the contactless card;

receiving, by the on-demand application through a communication interface of the device, the encrypted data from the contactless card;

transmitting, by the on-demand application, the encrypted data to an authentication server of the first financial institution;

receiving, by the on-demand application from the authentication server, an authentication result specifying the authentication server decrypted the encrypted data;

receiving, by the web browser of the device based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and

providing, by the web browser of the device, the payment information to a payment processor server associated with the on-demand application to process a transaction.

2 . The method of claim 1 , wherein the selection of the first financial institution comprises:

computing, by the on-demand application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device.

3 . The method of claim 2 , wherein the scores are computed based on: (i) an amount of time that has elapsed since the respective financial institution application was used on the device, and (ii) a number of times the respective financial institution application has been used on the device.

4 . The method of claim 1 , further comprising:

storing, by the web browser, a cookie on the device based on an indication received from the server associated with the application, the indication specifying payment for the transaction has been processed using the payment information.

5 . The method of claim 1 , further comprising prior to providing the payment information to the payment processor server associated with the on-demand application:

receiving, by the device at a phone number of the device, a one-time passcode from the authentication server;

receiving, by the on-demand application, an input value;

comparing, by the on-demand application, the input value to the one-time passcode; and

determining, by the on-demand application based on the comparison, that the input value matches the one-time passcode, wherein the on-demand application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode.

6 . The method of claim 1 , wherein the URL comprises a first identifier of a first merchant associated with the merchant web page and a transaction identifier associated with the transaction, wherein the first merchant is one of a plurality of merchants, wherein the merchant web page is one of a plurality of merchant web pages on a web server.

7 . The method of claim 6 , wherein the web server hosts the plurality of merchant web pages, wherein each merchant web page is associated with a respective one of the plurality of merchants, and wherein each merchant is associated with a respective identifier of a plurality of identifiers, the plurality of identifiers including the first identifier.

8 . The method of claim 1 , wherein the on-demand application is a non-persistent on-demand application, wherein the URL is a deep link uniform resource locator (URL) or a universal link URL.

9 . The method of claim 1 , wherein a page identifier parameter of the URL identifies a page of the on-demand application, the method further comprising:

identifying, by the on-demand application, the page identifier parameter; and

opening, by the on-demand application, the page of the on-demand application based on the page identifier parameter.

10 . The method of claim 1 , wherein the payment information comprises an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number, the method further comprising, prior to downloading the on-demand application:

receiving, by the web browser, selection of the URL.

11 . A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor of a device, cause the processor to:

receive, from an ecommerce server, a web page including a uniform resource locator (URL), the URL directed to an on-demand application hosted by an application server and the URL including one or more of a merchant identifier associated with the web page and a cart identifier for a transaction;

download, based on a selection of the URL in a web browser of the device, the on-demand application from the application server;

select, by the on-demand application, a first financial institution based on a plurality of financial institution applications installed on the device;

cause a contactless card associated with an account of the first financial institution, to generate encrypted data including a cryptogram by encrypting a customer identifier using a master key of the contactless card;

receive, by the on-demand application through a communication interface of the device, the encrypted data from the contactless card;

transmit, by the on-demand application, the encrypted data to an authentication server of the first financial institution;

receive, by the on-demand application from the authentication server, an authentication result specifying the authentication server decrypted the encrypted data;

receive, by the web browser of the device based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and

provide, by the web browser of the device, the payment information to a payment processor server associated with the on-demand application to process a transaction.

12 . The computer-readable storage medium of claim 11 , wherein the selection of the first financial institution comprises:

compute, by the on-demand application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device.

13 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to:

receive, by the web browser of the device, a confirmation for the processed transaction; and

display, by the web browser of the device, the confirmation.

14 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to:

store, by the web browser of the device, a cookie on the device based on an indication received from the payment processor server associated with the on-demand application, the indication specifying payment for the transaction has been processed using the payment information.

15 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to, prior to providing the payment information to the payment processor server associated with the on-demand application:

receive, by the device at a phone number of the device, a one-time passcode from the authentication server;

receive, by the on-demand application, an input value;

compare, by the on-demand application, the input value to the one-time passcode; and

determine, by the on-demand application based on the comparison, that the input value matches the one-time passcode, wherein the application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode.

16 . A computing system comprising:

a contactless card; and

a computing apparatus comprising a processor; and a memory storing instructions that, when executed by the processor, cause the processor to:

receive, from an ecommerce server, a web page including a uniform resource locator (URL), the URL directed to an on-demand application hosted by an application server and the URL including one or more of a merchant identifier associated with the web page and a cart identifier for a transaction;

download, based on a selection of the URL in a web browser of the computing apparatus, the on-demand application from the application server;

select, by the on-demand application, a first financial institution based on a plurality of financial institution applications installed on the computing apparatus;

receive, by the on-demand application through a communication interface of the computing apparatus, encrypted data from the contactless card associated with an account of the first financial institution, wherein the contactless card generates the encrypted data including a cryptogram by encrypting a customer identifier using a master key of the contactless card;

transmit, by the on-demand application, the encrypted data to an authentication server of the first financial institution;

receive, by the on-demand application from the authentication server, an authentication result specifying the authentication server decrypted the encrypted data;

receive, by the web browser of the computing apparatus based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and

provide, by the web browser of the computing apparatus, the payment information to a payment processor server associated with the on-demand application to process a transaction.

17 . The computing system of claim 16 , wherein the selection of the first financial institution comprises:

compute, by the on-demand application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the apparatus.

18 . The computing system of claim 16 , wherein the instructions further cause the processor to:

receive, by the web browser of the computing apparatus, a confirmation for the processed transaction; and

display, by the web browser of the computing apparatus, the confirmation.

19 . The computing system of claim 16 , wherein the instructions further cause the processor to:

store, by the web browser of the computing apparatus, a cookie in the memory based on an indication received from the payment processor server associated with the on-demand application, the indication specifying payment for the transaction has been processed using the payment information.

20 . The computing system of claim 16 , wherein the instructions further cause the processor to prior to providing the payment information to the payment processor server associated with the on-demand application:

receive, by the apparatus at a phone number of the apparatus, a one-time passcode from the authentication server;

receive, by the on-demand application, an input value;

compare, by the on-demand application, the input value to the one-time passcode; and

determine, by the on-demand application based on the comparison, that the input value matches the one-time passcode, wherein the on-demand application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode.

Assignments (1)

Continuity (2)

References Cited (205)