Tap to autofill card data

Patent metadata

Field	Value
Publication number	US-12299673-B2
Application number	US-202217685098-A
Country	US
Kind code	B2
Filing date	Mar 2, 2022
Priority date	Jan 24, 2019
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

Various embodiments are generally directed to autofilling card data from a contactless card to a form of a computing device. An application may determine that a payment field of a form has received focus. The application may then receive encrypted data from a communications interface of a contactless card associated with an account. The application may then receive, from a server, verification of the encrypted data. The application may then receive, from the server, an encrypted account number associated with the account, and decrypt the encrypted account number to yield the account number. An autofill service of an operating system (OS) executing on the processor circuit, may then autofill the account number to the payment field of the form.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
determining, by an application executing on a processor of a device, that a first form field of one or more form fields of a form has received focus based on a metadata attribute of the first form field indicating the first form field has received focus;
receiving, by the application, encrypted data from a contactless card;
transmitting, by the application, the encrypted data to a server;
receiving, by the application from the server, a decryption result indicating the server decrypted the encrypted data;
receiving, by the application based on the decryption result, account data, wherein the account data comprises an account number for the contactless card, a card verification value (CVV) for the contactless card, an expiration date for the contactless card, or a combination thereof;
providing, by the application, at least a portion of the account data to a service of an operating system (OS) executing on the processor to autofill one or more of the form fields;
autofilling, by the service, the portion of the account data into the first form field based on another metadata attribute of the first form field indicating the first form field is associated with a type of the portion of the account data; and
completing by the application, a checkout based at least in part on the portion of the account data autofilled into at least the first form field by the service.

2. The computer-implemented method of claim 1 , wherein the account data is encrypted account data, and the method further comprising:
decrypting, by one or more of the application and the OS, the encrypted account data prior to providing the portion of the account data to the service; and
autofilling, by the service, the portion of the account data into the first form field.

3. The computer-implemented method of claim 1 , wherein the portion of the account data is provided to an application programming interface (API) of the service.

4. The computer-implemented method of claim 1 , wherein the account number comprises: (i) an account number of the contactless card, (ii) a virtual account number, or (iii) a token.

5. The computer-implemented method of claim 1 , wherein the encrypted data is received from the contactless card in a near-field communication (NFC) Data Exchange Format (NDEF) message.

6. The computer-implemented method of claim 1 , comprising:
presenting an indication on a display device to tap the contactless card on a surface of a computing device including the processor executing the application to autofill the account data to complete the checkout; and
initiating a near-field communication (NFC) exchange with the contactless card to receive the encrypted data.

7. A computing apparatus comprising:
a short-range wireless communication interface;
a processor; and
a memory storing instructions that, when executed by the processor, cause the processor to:
determine, by an application executing on the processor, that a first form field of a plurality of form fields of a form has received focus based on a metadata attribute of the first form field indicating the first form field has received focus;
receive, by the application, encrypted data from a contactless card;
transmit, by the application, the encrypted data to a server;
receive, by the application from the server, a decryption result indicating the server decrypted the encrypted data;
receive, by the application based on the decryption result, account data;
provide, by the application, the account data to a service of an operating system (OS) executing on the processor to autofill to the first form field;
autofill, by the service, the portion of the account data into the first form field based on another metadata attribute of the first form field indicating the first form field is associated with a type of the portion of the account data; and
complete by the application, a purchase based at least in part on the account data autofilled into at least the first form field by the service.

8. The computing apparatus of claim 7 , wherein the account data is encrypted account data, and the instructions are further configured to cause the processor to decrypt the encrypted account data prior to providing the account data to the service.

9. The computing apparatus of claim 7 , wherein the account data is provided to an application programming interface (API) of the service.

10. The computing apparatus of claim 7 , wherein the account data comprises an account number, wherein the account number comprises: (i) an account number of the contactless card, (ii) a virtual account number, or (iii) a token.

11. The computing apparatus of claim 7 , wherein the account data is received from the contactless card in a near-field communication (NFC) Data Exchange Format (NDEF) message.

12. The computing apparatus of claim 7 , further comprising instructions configured to cause the processor to:
present an indication on a display device to tap the contactless card on a surface of a computing device including the processor executing the application; and
initiate a near-field communication (NFC) exchange with the contactless card to receive the account data.

13. A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor of a device, cause the processor to:
determine, by an application executing on the processor, that a first form field of a plurality of form fields of a form has received focus based on a metadata attribute of the first form field indicating the first form field has received focus;
receive, by the application, encrypted data from a contactless card;
transmit, by the application, the encrypted data to a server;
receive, by the application from the server, a decryption result indicating the server decrypted the encrypted data;
receive, by the application based on the decryption result, account data;
provide, by the application, the account data to a service of an operating system (OS) executing on the processor to autofill to the first form field;
autofill, by the service, the portion of the account data into the first form field based on another metadata attribute of the first form field indicating the first form field is associated with a type of the portion of the account data; and
complete by the application, a checkout based at least in part on the account data autofilled into at least the first form field by the service.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the account data is encrypted account data, and the medium further including instructions further configured to cause the processor to decrypt the encrypted account data prior to providing the account data to the service.

15. The computer-implemented method of claim 1 , wherein the application provides the portion of the account data to the service based on the decryption result.

16. The computer-implemented method of claim 15 , wherein the encrypted data is based on a diversified key of the contactless card, wherein the diversified key is based on a counter value and another key of the contactless card, wherein the counter value changes each time data is exchanged between the contactless card and a device including the processor.

17. The computer-implemented method of claim 16 , wherein the counter value of the contactless card is synchronized between the contactless card and the server, wherein the server decrypts the encrypted data based on generating the diversified key of

Assignees

• Capital One Services Llc

Inventors

• Rule Jeffrey
• Lutz Wayne
• Moreton Paul

Classifications

• G06Q20/4018

  using the card verification value [CVV] associated with the card · CPC title

• G06Q20/363

  with the personal data of a user · CPC title

• G06Q20/352 Primary

  Contactless payments by cards · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/40975

  using encryption therefor · CPC title