Smart card multi-factor authentication device

Patent metadata

Field	Value
Publication number	US-10535068-B2
Application number	US-201715661493-A
Country	US
Kind code	B2
Filing date	Jul 27, 2017
Priority date	Dec 28, 2016
Publication date	Jan 14, 2020
Grant date	Jan 14, 2020

Abstract

A dynamic transaction card may be paired with a user application executed on a user device card to facilitate multi-factor authentication of a user by utilizing the dynamic transaction card as a physical token. Various communication technologies may be utilized to create a connection between the dynamic transaction card and the user device application which may include wireless connections and physical connections. Validation information stored in a passive tag on the dynamic transaction card may be received by the user device application, which may evaluate the connection between the dynamic transaction card and the user device, log in credentials of the user, and user information stored in a digital security delivery storage to authenticate the user. This unique pairing of the dynamic transaction card and user device application may automatically facilitate a secure multi-factor authentication by utilizing the dynamic transaction card as a physical token.

First claim

The invention claimed is:

1. A dynamic transaction card comprising:
an antenna;
a secure payment chip that stores financial data;
a payment processing microprocessor; and
an application processor storing a dynamic transaction card application, wherein the dynamic transaction card application when executed causes the dynamic transaction card to:
receive, at the application processor, a request from a user device application executed on a user device to authenticate a user of the user device, wherein the user has logged in to the user device application on the user device using one or more log-in credentials before the request is received;
receive, at the payment processing microprocessor, data from the user device application for a user purchase being initiated by a transaction system, wherein the transaction system is in communication with the user device application and configured to store user information;
create, with the antenna, a wireless connection between the dynamic transaction card and the user device; and
provide, to the user device application, user validation information to complete the user purchase initiated by the transaction system, wherein the user validation information is stored in a passive tag of the dynamic transaction card,

wherein the user validation information includes a unique identifier associated with the user and is used to authenticate the user of the user device based on (1) an evaluation of the wireless connection between the dynamic transaction card and the user device, (2) the one or more login credentials of the user, and (3) a comparison of the user validation information received from the dynamic transaction card application to user information stored in the transaction system; and
wherein the user information includes: characteristics of the dynamic transaction card, the user device and login information for the user for the user device application.

2. The dynamic transaction card of claim 1 , wherein the secure payment chip comprises a EuroPay-MasterCard-Visa (EMV) chip.

3. The dynamic transaction card of claim 1 , wherein the user device comprises a mobile device.

4. The dynamic transaction card of claim 3 , wherein the connection between the dynamic transaction card and the user device application comprises a Near Field Communication (NFC) connection.

5. The dynamic transaction card of claim 4 , wherein the user device application enables an active NFC communication mode on the user device.

6. The dynamic transaction card of claim 3 , wherein the connection between the dynamic transaction card and the user device application comprises a short range wireless connection.

7. The dynamic transaction card of claim 6 , wherein the short range wireless connection comprises a Bluetooth or Bluetooth Low Energy (BLE) connection.

8. The dynamic transaction card of claim 6 , wherein the user device application enables a passive communication mode on the user device.

9. The dynamic transaction card of claim 1 , wherein the user device comprises a personal computer and the user device application comprises a desktop application.

10. The dynamic transaction card of claim 9 , wherein the dynamic transaction card is connected to a portable connection device.

11. The dynamic transaction card of claim 10 , wherein the portable connection device comprises a Universal Serial Bus (USB) dongle.

12. The dynamic transaction card of claim 10 , wherein the dynamic transaction card connected to the portable connection device is inserted in to the personal computer to facilitate user authentication.

13. The dynamic transaction card of claim 9 , wherein the connection between the dynamic transaction card and the desktop application comprises a Near Field Communication (NFC) connection.

14. The dynamic transaction card of claim 13 , wherein the desktop application enables an active NFC communication mode on the personal computer.

15. The dynamic transaction card of claim 9 , wherein the connection between the dynamic transaction card and the desktop application comprises a short range wireless connection.

16. The dynamic transaction card of claim 15 , wherein the short range wireless connection between the dynamic transaction card and the desktop application comprises a Bluetooth or Bluetooth Low Energy (BLE) connection.

17. The dynamic transaction card of claim 15 , wherein the desktop application enables a passive communication mode on the user device.

18. The dynamic transaction card of claim 1 , wherein the dynamic transaction card application generates a unique key associated with the one or more log-in credentials.

19. The dynamic transaction card of claim 18 , wherein the unique key comprises a single-use transaction key.

20. The dynamic transaction card of claim 18 , wherein an account provider system is configured to evaluate the unique key to authenticate the user.

21. The dynamic transaction card of claim 1 , wherein the dynamic transaction card is inserted into a magnetic stripe reader to facilitate user authentication.

22. The dynamic transaction card of claim 1 , wherein the dynamic transaction card is inserted into a smart payment terminal to facilitate user authentication.

Assignees

• Capital One Services Llc

Inventors

• LOCKE Tyler
• Kelly Kevin

Classifications

• G06Q20/3226 Primary

  Use of secure elements separate from M-devices · CPC title

• G07F7/0826

  Embedded security module · CPC title

• G07F7/084

  Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/3821

  Electronic credentials · CPC title