Systems and methods for cryptographic authentication of contactless cards

Patent metadata

Field	Value
Publication number	US-10511443-B1
Application number	US-201916351433-A
Country	US
Kind code	B1
Filing date	Mar 12, 2019
Priority date	Oct 2, 2018
Publication date	Dec 17, 2019
Grant date	Dec 17, 2019

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

First claim

What is claimed is:

1. A data transmission system comprising:
a transmitting device having a processor and memory, the memory of the transmitting device containing a diversified master key, transmission data and a counter value;
an application comprising instructions for execution on a receiving device having a processor and memory, the memory of the receiving device containing the master key;
wherein the transmitting device is configured to:
generate a diversified key using the diversified master key, one or more cryptographic algorithms, and the counter value,
generate a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key,
encrypt the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data, and
transmit the cryptographic result and encrypted transmission data to the application; and

wherein the application is configured to:
generate an authentication diversified key based on the master key and a unique identifier;
generate a session key based on the authentication diversified key and the cryptographic result;
decrypt the encrypted transmission data and validate the received cryptographic result using the one or more cryptographic algorithms and the diversified key; and
notify the transmitting device of the successful decryption and validation;

wherein, upon receipt of the notification, the transmitting device is configured to transmit reward data to the application, and
wherein the application is configured to generate a code to reset at least one selected from the group of expiring coupons and promotions.

2. The data transmission system of claim 1 , wherein the reward data comprises a loyalty program account number.

3. The data transmission system of claim 2 , wherein the application generates a discount upon receipt of the loyalty program account number.

4. The data transmission system of claim 2 , wherein the application awards reward points to the loyalty program account associated with the loyalty program account number.

5. The data transmission system of claim 1 , wherein the application comprises instructions for execution on a kiosk.

6. The data transmission system of claim 1 , wherein the application requests additional loyalty program information from a server upon receipt of the loyalty program account number.

7. The data transmission system of claim 6 , wherein the additional loyalty program information requested is dependent upon the location of the application.

8. The data transmission system of claim 1 , wherein:
the application is configured to monitor user activity, and
the application generates a reward based upon a user interaction with a product.

9. The data transmission system of claim 8 , wherein the user interaction comprises operating the product.

10. The data transmission system of claim 8 , wherein the user interaction comprises viewing an advertisement relating to the product.

11. The data transmission system of claim 8 , wherein the user interaction comprises viewing a tutorial relating to the product.

12. The data transmission system of claim 8 , wherein the user interaction comprises sending information relating to the product to a second user.

13. The data transmission system of claim 8 , wherein the reward is generated based on the date of the user interaction.

14. The data transmission system of claim 1 , wherein the application is configured to provide access to media content.

15. The data transmission system of claim 1 , wherein the application is configured to display expiration time associated with at least one selected from the group of the expiring coupons and promotions.

16. The data transmission system of claim 1 , wherein the application is configured to verify presence of a reward balance available for redemption.

17. The data transmission system of claim 4 , wherein the application is configured to apply the rewards points within a predetermined time period after occurrence of a transaction.

18. A contactless card comprising:
a substrate, including:
a memory containing one or more applets, a counter value, and a plurality of keys;
a communication interface; and
one or more processors in communication with the memory and communication interface,

wherein the one or more processors is configured to update the counter value when the communication interface is within a range of a communication field of an application comprising instructions for execution on a receiving device,
wherein the contactless card is configured to create a cryptogram using the plurality of keys and the counter value, and
wherein the cryptogram is transmitted, via the communication interface, to the application, and
wherein loyalty program information is transmitted, via the communication interface, to the application,
wherein the application is configured to update the loyalty program information stored on the contactless card,
wherein the application is configured to update a reward value stored on the contactless card, and
wherein the application is configured to update the reward value based on a number of times the communication interface enters the communication field.

19. The contactless card of claim 18 , wherein the loyalty program information comprises a loyalty program account number and the reward value.

20. The contactless card of claim 18 , wherein the contactless card is configured to selectively load and unload rewards onto the memory of the contactless card following communication with the application.

Assignees

• Capital One Services Llc

Inventors

• Newman Kaitlin
• Haynes Kimberly
• Crank Charles Nathan
• Cogswell Andrew
• Hart Colin
• Rule Jeffrey
• Mossler Lara
• Gulati Latika
• Benkreira Abdelkader
• Cunningham Sarah Jane
• Bermudez Sophie
• Mossoba Michael
• Lutz Wayne

Classifications

• H04L2209/80

  Wireless · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/0897

  involving additional devices, e.g. trusted platform module [TPM], smartcard or USB · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title