Systems and methods for contactless smart card authentication

Patent metadata

Field	Value
Publication number	US-12499433-B1
Application number	US-202117493548-A
Country	US
Kind code	B1
Filing date	Oct 4, 2021
Priority date	Mar 27, 2015
Publication date	Dec 16, 2025
Grant date	Dec 16, 2025

Abstract

Systems, methods, and computer-readable storage media of activating a card having a contactless chip are provided. One method includes receiving, from a mobile device via a wireless transmission from the card having the contactless chip to the mobile device, a cryptogram, and decrypting the cryptogram to reveal information. The method further includes comparing the revealed information regarding at least one of the card or the user to information in a customer database, confirming the revealed information, and updating the customer database to indicate that the revealed information regarding the at least one of the card or the user is confirmed. The method further includes activating the card for an initial card transaction based on updating the customer database, and providing, to the mobile device, a payment card token associated with the card as part of a mobile wallet transaction using the mobile device involving the card.

First claim

What is claimed is:

1 . A method of activating a card having a contactless chip, the method comprising:
providing the card in a non-activated state; activating the card prior to an initial card transaction, wherein activating the card comprises:
receiving, from a mobile device via a wireless transmission from the card having the contactless chip to the mobile device, an authentication request including a cryptogram and a transaction charge amount of $0.00 or $0.01;
processing, based on the transaction charge amount, the authentication request as a transaction request to reveal the cryptogram;
decrypting the cryptogram to reveal information regarding at least one of the card or a user;
comparing the revealed information regarding the at least one of the card or the user to information in a customer database, and verifying the cryptogram generated by the card corresponds to an active payment account;
updating the customer database to indicate that the revealed information regarding the at least one of the card or the user is confirmed and verified; and
activating, in response to a successful user authentication at the mobile device, the card for the initial card transaction based on updating the customer database and the successful user authentication; and
providing, to the mobile device, a payment card token associated with the card as part of a mobile wallet transaction using the mobile device involving the card.

2 . The method of claim 1 , wherein the payment card token causes a payment application on the mobile device to add the card and present a status of the card.

3 . The method of claim 2 , further comprising:
receiving, via the payment application of the mobile device, a selection of a selectable element on a graphical user interface indicating the card is lost or stolen.

4 . The method of claim 3 , further comprising:
updating the customer database to disallow subsequent transactions associated with the payment card token based on the indication that the card is lost or stolen; and providing, to a replacement mobile device, a replacement payment card token.

5 . The method of claim 1 , wherein the wireless transmission is a near-field communication (NFC) tap with the mobile device.

6 . The method of claim 1 , wherein the successful user authentication includes information associated with at least one of a PIN, biometric data, or an answer to an identification question prior to activating the card.

7 . The method of claim 1 , further comprising:
generating an encryption key for the card; and providing, to the mobile device, the encryption key for generating the cryptogram.

8 . The method of claim 7 , wherein the cryptogram is encrypted using the encryption key, and wherein confirming that the revealed information regarding the at least one of the card or the user corresponds to the information in the customer database further comprises verifying the cryptogram was generated by the card.

Assignees

• Wells Fargo Bank Na

Inventors

• Ho Peter

Classifications

• G06Q20/354 Primary

  Card activation or deactivation · CPC title

• G06Q20/409

  Device specific authentication in transaction processing · CPC title

• G06Q20/4018

  using the card verification value [CVV] associated with the card · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title