Systems and methods for controlling secured data transfer via URLs

Patent metadata

Field	Value
Publication number	US-11822994-B2
Application number	US-202117534761-A
Country	US
Kind code	B2
Filing date	Nov 24, 2021
Priority date	Aug 5, 2020
Publication date	Nov 21, 2023
Grant date	Nov 21, 2023

Abstract

An authenticated data sharing system may include a contactless card comprising a processor and a memory including one or more applets and an application comprising instructions for execution on a device. The application is configured to determine a capability associated with the contactless card after a first entry into a communication field. The application is configured to request additional information based on the determination. The one or more applets are configured to transmit, to the application, a generated tokenized link after a second entry into the communication field based on the requested additional information. The application is configured to transmit the link to obtain the requested additional information.

First claim

We claim:

1. A contactless card, comprising:
a processor; and
a memory,
wherein the contactless card is associated with a capability, and
wherein the processor is configured to:
receive, following a first entry of the contactless card into a communication field, a request for additional information,
generate, based on the additional information, a tokenized link, and
transmit the tokenized link to an application associated with a device.

2. The contactless card of claim 1 , wherein the additional information comprises at least one selected from the group of insurance information, cardholder information, and email information.

3. The contactless card of claim 1 , wherein the tokenized link comprises a limited use uniform resource locator (URL).

4. The contactless card of claim 3 , wherein the limited use URL is limited to a one-time use.

5. The contactless card of claim 3 , wherein the limited use URL is limited to a specified number of uses within a specified time.

6. The contactless card of claim 1 , wherein the tokenized link comprises a dynamically generated uniform resource locator (URL).

7. The contactless card of claim 1 , wherein the tokenized link comprises an encrypted one-time link.

8. A data sharing system, comprising:
a processor;
an application comprising instructions for execution on the processor,
wherein, after entry of a contactless card into a communication field, the application is configured to:
determine a capability associated with the contactless card,
request, from the contactless card, additional information based on the determination,
receive, from the contactless card after a second entry into the communication field, a tokenized link, and
transmit the tokenized link to obtain the additional information.

9. The data sharing system of claim 8 , wherein:
the system further comprises a server, and
the server is configured to authenticate information approved for sharing based on a permission level.

10. The data sharing system of claim 9 , wherein the permission level comprises at least one selected from the group of a merchant type and transaction type.

11. The data sharing system of claim 9 , wherein the application is further configured to control the permission level.

12. The data sharing system of claim 9 , wherein the server is further configured to receive the tokenized link and obtain the additional information.

13. The data sharing system of claim 9 , wherein the tokenized link is generated based on the additional information.

14. The data sharing system of claim 9 , wherein the tokenized link is limited to a specified number of uses within a specified time.

15. The data sharing system of claim 9 , wherein the application is further configured to:
update shareable information,
request an additional entry of the contactless card into the communication field, and
save a setting associated with the updated shareable information.

16. The data sharing system of claim 15 , wherein:
the system further comprises a server, and
the application is configured to transmit an updated link to the server based on the updated shareable information.

17. A computer readable non-transitory medium comprising computer-executable instructions that are executed on a processor and comprise the steps of:
determining a capability associated with a contactless card;
requesting, from the contactless card, additional information based on the determination;
receiving, from the contactless card after a second entry into the communication field, a tokenized link; and
transmitting the tokenized link to obtain the additional information.

18. The computer readable non-transitory medium of claim 17 , wherein the tokenized link comprises a dynamically generated uniform resource locator (URL).

19. The computer readable non-transitory medium of claim 18 , wherein the tokenized link is limited to a specified number of uses within a specified time.

20. The computer readable non-transitory medium of claim 17 , further comprising the step of re-determining the capability up to a threshold number of read attempts the contactless card prior to requesting the additional information.

Assignees

• Capital One Services Llc

Inventors

• Hart Colin
• Rule Jeffrey
• Newman Kaitlin
• Cody Lea

Classifications

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• G06K7/087 Primary

  flux-sensitive, e.g. magnetic, detectors (G06K7/10336 takes precedence) · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F16/9566

  URL specific, e.g. using aliases, detecting broken or misspelled links · CPC title