Systems and methods for cryptographic authentication of contactless cards

Patent metadata

Field	Value
Publication number	US-12079798-B2
Application number	US-202318106393-A
Country	US
Kind code	B2
Filing date	Feb 6, 2023
Priority date	Oct 2, 2018
Publication date	Sep 3, 2024
Grant date	Sep 3, 2024

Abstract

Example embodiments of systems and methods for data transmission between a contactless card, a client application, and a server are provided. The memory of the contactless card may include a first card number table storing a first plurality of card numbers, each card number associated with a user account. A first applet may cycle through the first card number table and transmit each of the first plurality of card numbers to a second applet. In response to detection of one or more gestures by the card, the client application may read one or more of the first plurality of card numbers from the second applet and transmit a verification request associated with the one or more read card numbers to the server, which may compare the one or more read card numbers to a number from a second card number table and transmit a verification determination to authenticate the card.

First claim

What is claimed is:

1. A method of authentication, the method comprising the steps of:
transitioning, by a first applet of a contactless card, through a first plurality of card identifiers;
transmitting, by the first applet to a second applet, the first plurality of card identifiers; and
transmitting, by the second applet and after one or more entries into a communication field, the first plurality of card identifiers for verification,
wherein each of the card identifiers from the first plurality of card identifiers are transitioned in a sequential manner.

2. The method of claim 1 , further comprising generating, by the first applet, the first plurality of card identifiers.

3. The method of claim 2 , wherein the first plurality of card identifiers are generated based on a seed.

4. The method of claim 3 , further comprising projecting, by the first applet using an algorithm, one or more upcoming card identifiers to be cycled.

5. The method of claim 4 , wherein the one or more upcoming card identifiers are not stored by the first applet.

6. The method of claim 1 , further comprising:
receiving, by a server, the first plurality of card identifiers; and
verifying, by the server, the first plurality of card identifiers based on a comparison with a second plurality of card identifiers.

7. The method of claim 6 , further comprising authenticating, by the server after verification of the first plurality of card identifiers, the contactless card.

8. The method of claim 1 , further comprising transitioning from a first card identifier from the first plurality of card identifiers to a second card identifier from the first plurality of card identifiers after detection of a first entry into the communication field.

9. The method of claim 8 , further comprising transitioning from the second card identifier from the first plurality of card identifiers to a third card identifier from the first plurality of card identifiers upon detection of a second entry into the communication field.

10. The method of claim 9 , further comprising transitioning from the third card identifier from the first plurality of card identifiers to the first card identifier from the first plurality of card identifiers upon detection of a third entry into the communication field.

11. An authentication system, comprising:
a contactless card including a processor and a memory, wherein the memory contains:
a first plurality of card identifiers,
a first applet, and
a second applet in data communication with a first applet,

wherein the first applet:
transitions through the first plurality of card identifiers, and
transmits, to the second applet, the first plurality of card identifiers,

wherein the second applet transmits, after one or more entries into a communication field, the first plurality of card identifiers for verification, and
wherein each of the card identifiers from the first plurality of card identifiers are transitioned in a sequential manner.

12. The authentication system of claim 11 , wherein each entry is associated with a read of a near field data exchange format (NDEF) tag.

13. The authentication system of claim 11 , wherein a first set of the first plurality of card identifiers are cycled in a sequential manner and a second set of the first plurality of card identifiers are cycled in a non-sequential manner.

14. The authentication system of claim 11 , wherein each of the card identifiers is transitioned back to another card identifier upon detection of one or more entries into the communication field.

15. The authentication system of claim 11 , further comprising:
a server,
wherein the server:
receives the first plurality of card identifiers, and
verifies the first plurality of card identifiers based on a comparison with a second plurality of card identifiers.

16. The authentication system of claim 15 , wherein the server authenticates, after verification of the first plurality of card identifiers, the contactless card.

17. A non-transitory computer readable medium comprising computer executable instructions that, upon execution by a processor, perform procedures comprising:
transitioning through a first plurality of card identifiers; and
transmitting, after one or more entries into a communication field, the first plurality of card identifiers for verification,
wherein each of the card identifiers from the first plurality of card identifiers are transitioned in a sequential manner.

18. The non-transitory computer readable medium of claim 17 , wherein the procedures further comprise generating the first plurality of card identifiers.

19. The non-transitory computer readable medium of claim 18 , wherein the first plurality of card identifiers are generated based on a seed.

20. The non-transitory computer readable medium of claim 17 , wherein the procedures further comprise transitioning from a first card identifier from the first plurality of card identifiers to a second card identifier from the first plurality of card identifiers after detection of a first entry into the communication field.

Assignees

• Capital One Services Llc

Inventors

• Hart Colin
• Saia Michael
• Yee Bryant
• Carroll William

Classifications

• G06K7/10297

  arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 (cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00) · CPC title

• G06K19/0723

  the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs · CPC title

• G06F21/123

  by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices · CPC title

• G07F9/001

  Interfacing with vending machines using mobile or wearable devices · CPC title

• G06Q20/401

  Transaction verification · CPC title