Utilizing a transaction card to provide secondary authentication for accessing a secure application with a user device

Patent metadata

Field	Value
Publication number	US-12223498-B2
Application number	US-202318537905-A
Country	US
Kind code	B2
Filing date	Dec 13, 2023
Priority date	Jan 10, 2018
Publication date	Feb 11, 2025
Grant date	Feb 11, 2025

Abstract

A transaction card includes a near-field communication (NFC) component, a security component, a wireless component, one or more memories, and one or more processors communicatively coupled to the one or more memories. The device receives a signal from a user device attempting to access a secure application, and energizes the NFC component based on the signal received from the user device. The device causes the security component to generate an encrypted code based on the NFC component being energized, and provides, via the security component, the encrypted code to the wireless component. The device provides, via the wireless component, the encrypted code to the user device to permit the user device to utilize the encrypted code as authentication for accessing the secure application.

First claim

What is claimed is:

1. A user device, comprising:
one or more memories; and
one or more processors communicatively coupled to the one or more memories, configured to cause the user device to:
generate a signal associated with a request to access an application;
receive, in response to the generated signal and based on a transaction card being within a threshold proximity to the user device, an encrypted code from the transaction card;
provide the encrypted code to another device; and
receive, from the other device, access to the application.

2. The user device of claim 1 , wherein the one or more processors are further configured to cause the user device to:
provide the request to the other device.

3. The user device of claim 1 , wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard.

4. The user device of claim 1 , wherein the one or more processors are further configured to cause the user device to:
decrypt the encrypted code to generate a code; and
provide, for display, the code.

5. The user device of claim 4 , wherein the one or more processors are further configured to cause the user device to:
provide the code to the other device.

6. The user device of claim 1 , wherein the encrypted code represents one authentication factor for two factor authentication.

7. The user device of claim 1 , wherein the one or more processors are further configured to cause the user device to:
provide, for display, information associated with the application based on access to the application being received.

8. A method, comprising:
generating, by a user device, a signal associated with a request to access an application;
receiving, by the user device and in response to the generated signal, an encrypted code from a transaction card based on the transaction card being within a threshold proximity to the user device;
providing, by the user device, the encrypted code to another device; and
receiving, from the other device, access to the application.

9. The method of claim 8 , further comprising:
providing the request to the other device.

10. The method of claim 9 , wherein the request includes authentication information associated with a user.

11. The method of claim 9 , wherein the generated signal is generated based on providing the request to the other device.

12. The method of claim 9 , wherein authentication information in the request represents a first authentication factor of a two factor authentication; and
wherein the encrypted code represents a second authentication factor of the two factor authentication.

13. The method of claim 8 , further comprising:
providing, for display, information associated with the application based on receiving access to the application.

14. The method of claim 8 , wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard.

15. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a user device, cause the user device to:
generate a signal associated with a request to access an application;
receive, in response to the generated signal and based on a transaction card being within a threshold proximity to the user device, an encrypted code from the transaction card;
provide the encrypted code to another device; and
receive, from the other device, access to the application.

16. The non-transitory computer-readable medium of claim 15 , wherein the one or more instructions further cause the user device to:
provide the request to the other device.

17. The non-transitory computer-readable medium of claim 15 , wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard.

18. The non-transitory computer-readable medium of claim 15 , wherein the one or more instructions further cause the user device to:
decrypt the encrypted code to generate a code; and
provide, for display, the code.

19. The non-transitory computer-readable medium of claim 15 , wherein the encrypted code represents one authentication factor for two factor authentication, and
wherein authentication information in the request represents another authentication factor for the two factor authentication.

20. The non-transitory computer-readable medium of claim 15 , wherein the one or more instructions further cause the user device to:
provide, for display, information associated with the application based on access to the application being received.

Assignees

• Capital One Services Llc

Inventors

• ZARAKAS James
• Johnson Molly
• Perry Robert
• Koeppel Adam
• LOCKE Tyler

Classifications

• G06Q20/3226

  Use of secure elements separate from M-devices · CPC title

• G06Q20/353

  Payments by cards read by M-devices · CPC title

• G07F7/0833

  Card having specific functional components · CPC title

• G06Q40/02

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title