Systems and methods for secure read-only authentication

Patent metadata

Field	Value
Publication number	US-10546444-B2
Application number	US-201816014542-A
Country	US
Kind code	B2
Filing date	Jun 21, 2018
Priority date	Jun 21, 2018
Publication date	Jan 28, 2020
Grant date	Jan 28, 2020

Abstract

A system for authenticating a user with a mobile device comprising a memory storing instructions, and a processor in communication with a network. The processor may be configured to execute the stored instructions to receive, from a mobile device, an authentication request; obtain, from a database, a permanent identifier associated with a transaction card; generate a temporary identifier associated with the transaction card; generate an expected value by encrypting the permanent identifier and the temporary identifier; verify the expected value against an encrypted value received from the mobile device; and transmit an authorization command to the mobile device.

First claim

What is claimed is:

1. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:
a radio frequency transmitter;
a clock generator coupled to the radio frequency transmitter, the clock generator being configured to increment a counter value responsive to a wireless read signal received from an external radio frequency reader device; and
a near field communication tag coupled to the radio frequency transmitter and storing a permanent identifier and the counter value;
wherein the near field communication tag is configured, in response to the received read signal, to:
generate an encrypted value based on the permanent identifier and the counter value; and
provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

2. The transaction card of claim 1 , wherein the permanent identifier comprises a private key.

3. The transaction card of claim 1 , wherein the radio frequency transmitter is configured to generate a digital signal when the clock generator cycles on.

4. The transaction card of claim 1 , wherein the clock generator is configured to increment the counter value by a preconfigured amount when the clock generator cycles on.

5. The transaction card of claim 4 , wherein the clock generator is configured to update a temporary identifier, a numerical value, and the incremented counter value when the clock cycle generator cycles on.

6. The transaction card of claim 5 , wherein the numerical value is unique to the transaction card.

7. The transaction card of claim 6 , wherein the near field communication tag is configured to generate the encrypted value based on the permanent identifier, the counter value, and the numerical value.

8. The transaction card of claim 5 , wherein the near field communication tag is configured to store the numerical value after transmissions by the radio frequency transmitter.

9. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:
a radio frequency transmitter;
a near field communication tag coupled to the radio frequency transmitter; and
a clock coupled to the near field communication tag and powered by a power source, wherein:
the clock is configured to send a time value to the near field communication tag responsive to a wireless read signal received by the near field communication tag from an external radio frequency reader device;
the near field communication tag is configured to store a permanent identifier and the time value; and
the near field communication tag is configured, in response to the received read signal, to:
generate an encrypted value based on the permanent identifier and the time value; and
provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

10. The transaction card of claim 9 , wherein the power source comprises a battery.

11. The transaction card of claim 9 , wherein the time value comprises a timestamp of the clock.

12. The transaction card of claim 11 , wherein the time value comprises the timestamp and a numerical value unique to the transaction card.

13. The transaction card of claim 9 , wherein the time value is valid only during a preconfigured time period.

14. The transaction card of claim 9 , wherein the power source supplies power to at least one of the radio frequency transmitter or the near field communication tag.

15. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:
a radio frequency transmitter;
a near field communication tag coupled to the radio frequency transmitter and
a microprocessor coupled to the near field communication tag and powered by a power source, wherein:
the microprocessor is configured to calculate an update value responsive to a wireless read signal received from an external radio frequency reader device;
the near field communication tag is configured to:
store a permanent identifier and the update value, and
in response to the received read signal:
generate an encrypted value based on the permanent identifier and the update value, and
provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

16. The transaction card of claim 15 , wherein the near field communication tag is configured to generate a temporary identifier based on the update value while the radio frequency transmitter is transmitting.

17. The transaction card of claim 15 , wherein the microprocessor is further configured to vary the update value between subsequent transmissions.

18. The transaction card of claim 15 , wherein the update value is calculated based on an algorithm.

19. The transaction card of claim 18 , wherein the algorithm is unique to the transaction card.

20. The transaction card of claim 15 further comprising a memory component coupled to the microprocessor.

Assignees

• Capital One Services Llc

Inventors

• Osborn Kevin
• Kelly Kevin

Classifications

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q20/322

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/352

  Contactless payments by cards · CPC title