Granted Patent B2

US 12,580,767 · App. 18/498,420 · Granted Mar 17, 2026

Inventors: Anthony Glynn (Fairfax, VA); Soumendra Bhattacharya (Union City, CA); Robert Mantoni (Reston, VA)

Assignee: Capital One Services, LLC.

H04L9/3234H04L9/0841H04L9/085H04L9/3066H04L9/3213

Abstract

Claims (31)

1 . A computer implemented method, comprising:

triggering, using at least one processor, generation of a validity token based on a received contactless card identifier associated with a contactless card, the validity token is generated upon validating the contactless card using the contactless card identifier, and transmitted to a first computing device communicatively coupled with the at least one processor;

identifying, using the at least one processor, a second computing device in a plurality of second computing devices based on an information request received from the first computing device, the information request including a first public key associated with the first computing device and the validity token, and being associated with the contactless card, wherein the identifying includes identifying the second computing device using information stored in at least one field of the validity token;

sending, using the at least one processor, an encrypted response to the information request and a second public key associated with the identified second computing device to the first computing device, the encrypted response being generated by the identified second computing device and encrypted using a shared key generated using the first public key associated with the first computing device, wherein generation of the encrypted response is based on comparing information identifying the first computing device stored in at least another field of the validity token and the first public key; validating the first computing device upon determining a match between the information identifying the first computing device stored in the at least another field of the validity token and the first public key; and

causing, using the at least one processor, based on the sending, the first computing device to decrypt the encrypted response to the information request upon generation of the shared key using the second public key associated with the identified second computing device.

2 . The method according to claim 1 , wherein the sending the encrypted response to the identified second computing device includes sending the encrypted response to the identified second computing device without decrypting the encrypted response.

3 . The method according to claim 1 , wherein the contactless card identifier is received from a mobile device communicatively coupled to the at least one processor.

4 . The method according to claim 3 , wherein the contactless card identifier is received in response to the executing a near-field communication (NFC) exchange between the contactless card and the mobile device upon the contactless card being detected by the mobile device to be located within a predetermined distance of the mobile device.

5 . The method according to claim 4 , wherein the contactless card identifier includes a contactless card number.

6 . The method according to claim 1 , wherein the identifying includes extracting, using the at least one processor, the information stored in the at least one field of the validity token included in the information request.

7 . The method according to claim 1 , wherein generation of the encrypted response includes validation of the first public key associated with the first computing device.

8 . The method according to claim 7 , wherein the encrypted response is generated upon validation of the information identifying the first computing device stored in the at least another field of the validity token and validation of the first public key associated with the first computing device.

9 . The method according to claim 1 , wherein the shared key is generated using an elliptic-curve Diffie-Hellman key agreement protocol.

10 . The method according to claim 1 , wherein the causing includes validation of the second public key associated with the second computing device.

11 . The method according to claim 10 , wherein the causing includes a comparison of information identifying the second computing device stored in at least one field of the validity token and the second public key, wherein the second computing device is validated upon the information identifying the second computing device stored in the at least one field of the validity token matching the second public key.

12 . The method according to claim 11 , wherein the encrypted response is decrypted, using the shared key, upon validation of the information identifying the second computing device stored in the at least one field of the validity token and validation of the second public key associated with the second computing device.

13 . The method according to claim 1 , wherein at least one of the first and second computing devices are associated with an issuer of the contactless card.

14 . The method according to claim 1 , wherein the contactless card includes at least one of the following: a credit card, a debit card, an electronic gift card, a pre-paid credit card, a pre-paid debit card, and any combination thereof.

15 . A system, comprising: at least one processor; and

at least one non-transitory storage media storing instructions, that when executed by the at least one processor, cause the at least one processor to perform operations including receiving a validity token generated using a contactless card identifier associated with a contactless card; transmitting the validity token to a first computing device;

identifying a second computing device in a plurality of second computing devices based on an information request received from the first computing device, the information request including a first public key associated with the first computing device and the validity token, and being associated with the contactless card, the identified second computing device generating an encrypted response to the information request, wherein the identifying includes identifying the second computing device using information stored in at least one field of the validity token, wherein generation of the encrypted response is based on comparing information identifying the first computing device stored in at least another field of the validity token and the first public key; validating the first computing device upon determining a match between the information identifying the first computing device stored in the at least another field of the validity token and the first public key; and

causing the first computing device to decrypt the encrypted response to the information request upon generation of a shared key using a second public key associated with the identified second computing device.

16 . The system according to claim 15 , wherein the validity token is generated upon validating the contactless card using the contactless card identifier.

17 . The system according to claim 15 , wherein the operations further comprise sending the encrypted response to the information request and the second public key associated with the identified second computing device to the first computing device, the encrypted response being generated by the identified second computing device and encrypted using the shared key generated using the first public key associated with the first computing device.

18 . The system according to claim 15 , wherein the identifying includes extracting information stored in at least one field of the validity token included in the information request.

19 . A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising:

receiving, from a mobile device, a contactless card identifier associated with a contactless card based on execution of a near-field communication (NFC) exchange between the contactless card and the mobile device upon the contactless card being detected by the mobile device to be located within a predetermined distance of the mobile device;

transmitting, to a first computing device, a validity token generated based on the received contactless card identifier, the validity token being generated upon validating the contactless card using the contactless card identifier;

identifying a second computing device in a plurality of second computing devices based on an information request received from the first computing device, the information request including a first public key associated with the first computing device and the validity token, and being associated with the contactless card, wherein the identifying includes identifying the second computing device using information stored in at least one field of the validity token;

sending an encrypted response to the information request and a second public key associated with the identified second computing device to the first computing device, the encrypted response being generated by the identified second computing device and encrypted using a shared key generated using the first public key associated with the first computing device, the sending of the encrypted response to the identified second computing device includes sending the encrypted response to the identified second computing device without decrypting the encrypted response, wherein generation of the encrypted response is based on comparing information identifying the first computing device stored in at least another field of the validity token and the first public key; validating the first computing device upon determining a match between the information identifying the first computing device stored in the at least another field of the validity token and the first public key; and

causing the first computing device to decrypt the encrypted response to the information request upon generation of the shared key using the second public key associated with the identified second computing device.

Assignments (1)

Continuity (1)

References Cited (400)