Authentication for third party digital wallet provisioning

Patent metadata

Field	Value
Publication number	US-12112310-B2
Application number	US-202318119518-A
Country	US
Kind code	B2
Filing date	Mar 9, 2023
Priority date	Dec 23, 2019
Publication date	Oct 8, 2024
Grant date	Oct 8, 2024

Abstract

Various embodiments are directed to securely verifying an identity of a user who is requesting to add or link a financial instrument to a third-party digital wallet using one-tap contactless card authentication. The financial instrument may be added or linked to the third-party wallet in at least two scenarios: pull provisioning and push provisioning. In either provisioning scenarios, the user may be required to authenticate the financial instrument being added or linked by successfully verifying the identity of the user via the one-tap contactless card authentication at a banking application associated with the financial instrument.

First claim

What is claimed is:

1. An apparatus, comprising:
a display device;
one or more processors coupled with the display device;
memory coupled with the display device and the one or more processors, the memory storing instructions that, when executed by the one or more processors, causes the one or more processors to:
provide access to a first-party banking application in response to authentication of user login information;
present, by the first-party banking application in a first-display graphical user interface (GUI) on the display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application;
receive, by the first-party banking application, a selection of the indication;
present, by the first-party banking application in the first-display GUI on the display device, a one-tap authentication option for the user to tap a contactless card on or near the apparatus, and wherein the contactless card is the payment card to add or link to the third-party wallet application;
establish a first wireless communication with the contactless card;
receive a message comprising encrypted data and a random number via the first wireless communication from the contactless card, wherein the contactless card generates the message by encrypting the encrypted data and the random number with a session key, wherein the encrypted data comprises a unique identifier associated with the contactless card;
send, by the first-party banking application, at least a portion of the message to one or more remote computing devices associated with a first-party entity;
receive, by the first-party banking application, a second indication from the one or more remote computing devices of a successful authentication based on the portion of the message; and
initiate, by the first-party banking application, a transition to the third-party wallet application, the transition to include sending information for the payment card to the third-party wallet application to add or link to the third-party wallet application, the transition to further include causing the third-party wallet application to display at least confirmation that the payment card has been successfully added or linked to the third-party wallet application in a second-display GUI on the display device.

2. The apparatus of claim 1 , wherein the instructions further cause the one or more processors to receive, from the user, permission to share data with the third-party wallet application.

3. The apparatus of claim 1 , the one or more processors to:
receive user login information; and
authenticate, via the first-party banking application, the user login information.

4. The apparatus of claim 1 , wherein the first-party banking application is a mobile-based application, a native application, a web application, or a web browser and wherein the third-party wallet application is a mobile-based application, a native application, a web application, or a web browser.

5. The apparatus of claim 1 , the one or more processors to receive the message in one or more NFC data exchange format (NDEF) messages.

6. The apparatus of claim 1 , wherein the contactless card comprises memory and processing circuitry for executing instructions stored in the memory to generate the encrypted data, determine the random number, and send the message.

7. The apparatus of claim 1 , wherein the one or more remote computing devices are associated with the first-party banking application and are first-party remote computing devices.

8. A computer-implemented method, comprising:
providing, by a computing device, access to a first-party banking application in response to authentication of user login information;
presenting, by the first-party banking application in a first-display graphical user interface (GUI) on a display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application;
receiving, by the first-party banking application, a selection of the indication;
presenting, by the first-party banking application in the first-display GUI on the display device, a one-tap authentication option for the user to tap a contactless card on or near the apparatus, and wherein the contactless card is the payment card to add or link to the third-party wallet application;
establishing a first wireless communication with the contactless card;
receiving a message comprising a message authentication code (MAC) cryptogram and a random number via the first wireless communication from the contactless card, wherein the contactless card generates the message by encrypting the MAC cryptogram and the random number with a session key, wherein the MAC cryptogram comprises a unique identifier associated with the contactless card;
sending, by the first-party banking application, at least a portion of the message to one or more remote computing devices associated with the financial entity;
receiving, by the first-party banking application, a second indication from the one or more remote computing devices of a successful authentication based on the portion of the message; and
initiating, by the first-party banking application, a transition to the third-party wallet application, the transition to include sending information for the payment card to the third-party wallet application to add or link to the third-party wallet application, the transition to further include causing the third-party wallet application to display at least confirmation that the payment card has been successfully added or linked to the third-party wallet application in a second-display GUI on the display device.

9. The computer-implemented method of claim 8 , comprising receiving, from the user, permission to share data with the third-party wallet application.

10. The computer-implemented method of claim 8 , comprising:
receiving user login information; and
authenticating, via the first-party banking application, the user login information.

11. The computer-implemented method of claim 8 , wherein the first-party banking application is a mobile-based application, a native application, a web application, or a web browser and wherein the third-party wallet application is a mobile-based application, a native application, a web application, or a web browser.

12. The computer-implemented method of claim 8 , comprising receiving the message in one or more NFC data exchange format (NDEF) messages.

13. The computer-implemented method of claim 8 , wherein the contactless card comprises memory and processing circuitry for executing instructions stored in the memory to generate the MAC cryptogram, determine the random number, and send the message.

14. The computer-implemented method of claim 8 , wherein the one or more remote computing devices are associated with the first-party banking application and are first-party remote computing devices.

15. A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to:
provide access to a first-party banking application in response to authentication of user login information;
present, by the first-party banking application in a first-display graphical user interface (GUI) on the display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application;
receive, by the first-party banking application, a selection of the indication;
present, by the first-party banking application in the first-display GUI on the display device, a one-tap authentic

Assignees

• Capital One Services Llc

Inventors

• Mchugh Katherine
• Newton Lesley
• Barrett Casey
• Zearfoss Patrick

Classifications

• G06Q20/4014

  Identity check for transactions · CPC title

• G06Q20/38215

  Use of certificates or encrypted proofs of transaction rights · CPC title

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title

• G06Q20/352

  Contactless payments by cards · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title