Systems and methods for performing a reissue of a contactless card

Patent metadata

Field	Value
Publication number	US-10909527-B2
Application number	US-201916731178-A
Country	US
Kind code	B2
Filing date	Dec 31, 2019
Priority date	Oct 2, 2018
Publication date	Feb 2, 2021
Grant date	Feb 2, 2021

Abstract

Example embodiments relate to reissuing or otherwise altering a contactless card. These embodiments are particularly well-suited to an emergency reissue in which many cards have been compromised as the result of a data breach of a major credit card provider or department store. An exemplary contactless card includes a chip that stores encrypted authentication information, including a primary account number (PAN) that identifies the card. The chip may include a first applet responsible making payments with the card; the first applet may manage the PAN. A second applet may be capable of interacting with an outside application, and may serve as a bridge to the first applet. A rewrite of the PAN may be triggered by issuing a write command to the second applet, or by interacting with the chip in a predetermined manner (e.g., tapping the card on an interactable element a predetermined number of times).

First claim

What is claimed is:

1. A non-transitory computer-readable medium storing:
a first applet configured to authorize transactions for a contactless card and maintaining a first primary account number (PAN) for the contactless card, the first PAN identifying the contactless card in the transactions;
a second applet distinct from the first applet and configured to interact with an outside application and serve as a bridge between the outside application and the first applet;
instructions configured to cause a processing circuit to:
receive an instruction, at the second applet, to change the first PAN;
authenticate the contactless card by instructing the contactless card to generate a cryptogram, encrypting the cryptogram using a diversified key based on a counter value, a master key, and a cryptographic algorithm, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server;
in response to authenticating the contactless card, instruct the first applet, on a secure communication channel from the second applet, to change the first PAN; and
change the first PAN to a second PAN at the first applet, wherein changing the first PAN causes the first applet to use the second PAN in place of the first PAN in future transactions.

2. The medium of claim 1 , wherein the first applet is preloaded with a plurality of PANs at the time that the contactless card is issued, and changing the first PAN to the second PAN comprises advancing to the next preloaded PAN.

3. The medium of claim 1 , wherein the instruction to change the first PAN received at the second applet is received via near field communication (NFC).

4. The medium of claim 1 , wherein the instruction to change the first PAN received at the second applet involves tapping the contactless card against an interactable element in a predetermined pattern.

5. The medium of claim 1 , wherein the instruction to change the first PAN received at the second applet is received from an automatic teller machine (ATM) or point of sale (POS) terminal.

6. The medium of claim 1 , wherein the contactless card includes an electronic ink (e-ink) display configured to display an identifying number of the card derived from the PAN currently assigned to the contactless card, and wherein changing the first PAN to the second PAN comprises updating the e-ink display.

7. The medium of claim 1 , wherein instructing the first applet to change the first PAN comprises coordinating the change in the first PAN with a backend server associated with the second applet.

8. A method comprising:
storing an original number for a credit account in digital payment logic on a chip of a contactless card;
receiving an instruction at communication logic, stored on the chip and distinct from the digital payment logic, to update the original number for the credit account;
authenticating the contactless card by instructing the contactless card to generate a cryptogram, encrypting the cryptogram using a diversified key based on a counter value, a master key, and a cryptographic algorithm, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server;
in response to authenticating the contactless card, establishing a secure data transmission from the communication logic to the digital payment logic;
issue a command from the communication logic to the digital payment logic to update the original number using the secure data transmission;
update the original number to an updated number using the digital payment logic in response to receiving the command.

9. The method of claim 8 , wherein the digital payment logic derives the updated number from the original number.

10. The method of claim 8 , wherein the instruction to update the original number received at the communication logic is received via near field communication (NFC).

11. The method of claim 8 , wherein the instruction to update the original number received at the communication logic comprises tapping the contactless card against an interactable element in a predetermined pattern.

12. The method of claim 8 , wherein the instruction to update the original number received at the communication logic is received from an automatic teller machine (ATM) or point of sale (POS) terminal.

13. The method of claim 8 , wherein the contactless card includes an electronic ink (e-ink) display configured to display an identifying number of the card based on the updated number.

14. The method of claim 8 , wherein issuing the command comprises coordinating the update to the number with a backend server associated with the communication logic.

15. An apparatus having a contact pad comprising:
an antenna configured to receive a short range communication from a device;
a microprocessor circuit powered by the antenna using energy from the short range communication;
a memory storing:
transaction logic configured to reference an identifier for the apparatus in connection with a transaction; and
encryption and authentication logic configured to communicate with the device via the antenna, wherein
the encryption and authentication logic is further configured to recognize a directive from the device and received by the antenna, the directive indicating that the identifier is to be rewritten, authenticate the contactless card by instructing the contactless card to generate a cryptogram, encrypting the cryptogram using a diversified key based on a counter value, a master key, and a cryptographic algorithm, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server, and, in response to authenticating the contactless card, communicate the directive to the transaction logic, and
the transaction logic is further configured to rewrite the identifier based on the directive.

16. The apparatus of claim 15 , wherein the first applet is preloaded with a plurality of PANs at the time that the contactless card is issued, and changing the first PAN to the second PAN comprises advancing to the next preloaded PAN.

17. The apparatus of claim 15 , wherein the instruction to rewrite the identifier is received via the antenna using near field communication (NFC).

18. The apparatus of claim 15 , wherein the instruction to rewrite the identifier registered by the encryption and authentication logic as a tapping of the apparatus against an interactable element in a predetermined pattern.

19. The apparatus of claim 15 , wherein the device is an automatic teller machine (ATM) or point of sale (POS) terminal.

20. The apparatus of claim 15 , further comprising a rewritable display configured to display the identifier, and wherein rewriting the identifier comprises updating the rewritable display.

Assignees

• Capital One Services Llc

Inventors

• Rule Jeffrey
• Herrington Daniel
• Ilincic Rajko

Classifications

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• G06Q20/409

  Device specific authentication in transaction processing · CPC title

• H04W12/06

  Authentication · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title