On-demand applications to extend web services

Patent metadata

Field	Value
Publication number	US-12524768-B2
Application number	US-202418602220-A
Country	US
Kind code	B2
Filing date	Mar 12, 2024
Priority date	Apr 20, 2021
Publication date	Jan 13, 2026
Grant date	Jan 13, 2026

Abstract

Systems, methods, articles of manufacture, and computer-readable media. A web browser of a device may receive selection of a uniform resource locator (URL). An operating system may download an application from an application server based on the URL. The application may identify a plurality of applications installed on the device and select a first institution corresponding to a first application. The application may receive a cryptogram from a contactless card associated with the first institution and transmit the cryptogram to an authentication server. The application may receive an authentication result specifying the authentication server decrypted the cryptogram. The web browser may receive, based on the decryption of the cryptogram, an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number. The web browser may provide the account number, expiration date, and CVV to a server associated with the application.

First claim

What is claimed is:

1 . A computer-implemented method, comprising:
receiving, by a processor of a device from an ecommerce server, a web page including a uniform resource locator (URL), the URL directed to an on-demand application hosted by an application server and the URL including one or more of a merchant identifier associated with the web page and a cart identifier for a transaction; downloading, by the processor of the device based on a selection of the URL in a web browser of the device, the on-demand application from the application server; selecting, by the on-demand application, a first financial institution based on a plurality of financial institution applications installed on the device; generating, by a contactless card associated with an account of the first financial institution, encrypted data including a cryptogram by encrypting a customer identifier using a master key of the contactless card; receiving, by the on-demand application through a communication interface of the device, the encrypted data from the contactless card; transmitting, by the on-demand application, the encrypted data to an authentication server of the first financial institution; receiving, by the on-demand application from the authentication server, an authentication result specifying the authentication server decrypted the encrypted data; receiving, by the web browser of the device based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and providing, by the web browser of the device, the payment information to a payment processor server associated with the on-demand application to process a transaction.

2 . The method of claim 1 , wherein the selection of the first financial institution comprises:
computing, by the on-demand application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device.

3 . The method of claim 2 , wherein the scores are computed based on: (i) an amount of time that has elapsed since the respective financial institution application was used on the device, and (ii) a number of times the respective financial institution application has been used on the device.

4 . The method of claim 1 , further comprising:
storing, by the web browser, a cookie on the device based on an indication received from the server associated with the application, the indication specifying payment for the transaction has been processed using the payment information.

5 . The method of claim 1 , further comprising prior to providing the payment information to the payment processor server associated with the on-demand application:
receiving, by the device at a phone number of the device, a one-time passcode from the authentication server; receiving, by the on-demand application, an input value; comparing, by the on-demand application, the input value to the one-time passcode; and determining, by the on-demand application based on the comparison, that the input value matches the one-time passcode, wherein the on-demand application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode.

6 . The method of claim 1 , wherein the URL comprises a first identifier of a first merchant associated with the merchant web page and a transaction identifier associated with the transaction, wherein the first merchant is one of a plurality of merchants, wherein the merchant web page is one of a plurality of merchant web pages on a web server.

7 . The method of claim 6 , wherein the web server hosts the plurality of merchant web pages, wherein each merchant web page is associated with a respective one of the plurality of merchants, and wherein each merchant is associated with a respective identifier of a plurality of identifiers, the plurality of identifiers including the first identifier.

8 . The method of claim 1 , wherein the on-demand application is a non-persistent on-demand application, wherein the URL is a deep link uniform resource locator (URL) or a universal link URL.

9 . The method of claim 1 , wherein a page identifier parameter of the URL identifies a page of the on-demand application, the method further comprising:
identifying, by the on-demand application, the page identifier parameter; and opening, by the on-demand application, the page of the on-demand application based on the page identifier parameter.

10 . The method of claim 1 , wherein the payment information comprises an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number, the method further comprising, prior to downloading the on-demand application:
receiving, by the web browser, selection of the URL.

11 . A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor of a device, cause the processor to:
receive, from an ecommerce server, a web page including a uniform resource locator (URL), the URL directed to an on-demand application hosted by an application server and the URL including one or more of a merchant identifier associated with the web page and a cart identifier for a transaction; download, based on a selection of the URL in a web browser of the device, the on-demand application from the application server; select, by the on-demand application, a first financial institution based on a plurality of financial institution applications installed on the device; cause a contactless card associated with an account of the first financial institution, to generate encrypted data including a cryptogram by encrypting a customer identifier using a master key of the contactless card; receive, by the on-demand application through a communication interface of the device, the encrypted data from the contactless card; transmit, by the on-demand application, the encrypted data to an authentication server of the first financial institution; receive, by the on-demand application from the authentication server, an authentication result specifying the authentication server decrypted the encrypted data; receive, by the web browser of the device based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and provide, by the web browser of the device, the payment information to a payment processor server associated with the on-demand application to process a transaction.

12 . The computer-readable storage medium of claim 11 , wherein the selection of the first financial institution comprises:
compute, by the on-demand application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device.

13 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to:
receive, by the web browser of the device, a confirmation for the processed transaction; and display, by the web browser of the device, the confirmation.

14 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to:
store, by the web browser of the device, a cookie on the device based on an indicatio

Assignees

• Capital One Services Llc

Inventors

• Rule Jeffrey
• Koshy Bob Uni
• Osborn Kevin

Classifications

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• G06Q20/382 Primary

  insuring higher security of transaction · CPC title

• G06Q20/352

  Contactless payments by cards · CPC title

• G06F8/60

  Software deployment · CPC title