Automated device pairing

Patent metadata

Field	Value
Publication number	US-12579532-B2
Application number	US-202217695771-A
Country	US
Kind code	B2
Filing date	Mar 15, 2022
Priority date	Apr 14, 2015
Publication date	Mar 17, 2026
Grant date	Mar 17, 2026

Abstract

This disclosure relates to creating a connection between two devices without using a UUID and/or MAC address. For example, a first device can store a private key for creating a secure connection. A second device may request that a user log into an account associated with the first device (e.g., a customer account, a financial account, an employee account, and/or the like) in order to initiate the wireless connection. The second device user can enter login credentials via the second device, which may then be transmitted to a backend system. The backend system can receive and validate the login credentials and, in response, transmit a public key to the second device. The second device can use the public key to perform a public/private key handshake in order to validate the first device.

First claim

What is claimed is:

1 . A system comprising:
one or more servers comprising:
one or more server processors; and
non-transitory server memory in communication with the one or more server processors and storing instructions that, when executed, cause the one or more servers to:
generate, via the one or more server processors, a public/private key pair associated with a financial account;
store, in data storage associated with the one or more servers, a public key of the public/private key pair;
receive, at the one or more server processors from a mobile device, login credentials for the financial account and a request for a challenge associated with the public/private key pair corresponding to the financial account;
validate, via the one or more server processors, the login credentials for the financial account; and
transmit the challenge to the mobile device, the challenge not comprising a private key of the public/private key pair;

the mobile device comprising:
one or more mobile device antennas;
one or more mobile device processors;
non-transitory mobile device memory in communication with the one or more mobile device processors and storing instructions in a mobile device application that, when executed, cause the mobile device to:
request the login credentials for the financial account associated with a transaction card;
receive the login credentials for the financial account from a user of the mobile device;
transmit the request for the challenge associated with the financial account to the one or more servers;
receive the challenge from the one or more servers;
transmit the challenge to the transaction card;
receive a response from the transaction card; and
transmit at least a portion of the response to the one or more servers; and

the transaction card comprising:
one or more card antennas;
one or more card processors; and
non-transitory card memory in communication with the one or more card processors and storing instructions in a card applet that, when executed, cause the transaction card to:
store the private key of the public/private key pair in the card memory;
receive, via the one or more card antennas, the challenge from the mobile device;
generate a signed response to the challenge using the private key stored in the card memory of the transaction card; and
transmit, via the one or more card antennas, the signed response to the mobile device.

2 . The system of claim 1 , wherein the card memory stores further instructions that are configured to cause the transaction card to transmit, via the one or more card antennas, advertising packets to the mobile device.

3 . The system of claim 2 , wherein the advertising packets are in an encrypted format.

4 . The system of claim 1 , wherein the public key of the public/private key pair is linked to the financial account associated with the transaction card.

5 . The system of claim 1 , wherein:
the challenge comprises the public key of the public/private key pair, and the mobile device receives the public key in an encrypted format.

6 . The system of claim 5 , wherein:
the challenge further comprises a static string of random length and random digits, and the transaction card generates the signed response using an encryption/decryption signature engine.

7 . The system of claim 1 , wherein:
the transaction card further comprises a Europay-Visa-Mastercard (EMV) chip and is capable of being used for EMV transactions, the instructions are further configured to cause the transaction card to receive the private key of the public/private key pair during personalization, and the instructions are further configured to cause the one or more servers to store, in the data storage associated with the one or more servers, additional data associated with the financial account comprising the private key, a device identifier of the transaction card, an account number of the financial account, the login credentials, or combinations thereof.

8 . The system of claim 1 , wherein:
the signed response comprises timestamps, and the transaction card communicates with the mobile device via near field communication (NFC).

9 . A method comprising:
generating a public/private key pair associated with a financial account; storing a private key of the public/private key pair in a card memory of a transaction card; storing, in memory associated with one or more servers, a public key of the public/private key pair; requesting, via an interface of a mobile device, login credentials for the financial account associated with the transaction card; receiving, at the interface, the login credentials for the financial account from a user of the mobile device; transmitting, via one or more mobile device antennas of the mobile device, the login credentials and a request for a challenge associated with the financial account to the one or more servers; receiving, at the one or more servers, the login credentials and the request for the challenge; validating, via the one or more servers, the login credentials for the financial account; transmitting the challenge to the mobile device, the challenge not comprising the private key; receiving, via the one or more mobile device antennas, the challenge from the one or more servers; transmitting, via the one or more mobile device antennas, the challenge to the transaction card; receiving, via one or more card antennas of the transaction card, the challenge; generating, at the transaction card, a signed response to the challenge using the private key of the public/private key pair; transmitting, via the one or more card antennas, the signed response to the mobile device; receiving, via the one or more mobile device antennas, the signed response; and transmitting, via the one or more mobile device antennas, the signed response to the one or more servers.

10 . The method of claim 9 , further comprising transmitting, via the one or more card antennas, advertising packets from the transaction card to the mobile device, wherein the advertising packets are in an encrypted format.

11 . The method of claim 9 , wherein the transaction card generates the signed response using an encryption/decryption signature engine.

12 . The method of claim 9 , wherein the challenge further comprises a static string of random length and random digits and the public key of the public/private key pair.

13 . The method of claim 9 , wherein:
the transaction card communicates with the mobile device via near field communication (NFC), the transaction card comprises a Europay-Visa-Mastercard (EMV) chip and is capable of being used for EMV transactions, and storing the private key in the card memory further comprises programming the private key to the transaction card during personalization before the transaction card is issued to an authorized user of the financial account.

14 . The method of claim 9 , wherein the signed response comprises timestamps.

15 . The method of claim 9 , wherein one or more of the challenge and the signed response comprise the public key, the method further comprising encrypting the public key before transmitting the public key to the mobile device.

16 . The method of claim 9 , further comprising:
storing preprogrammed content in the card memory at personalization, the preprogrammed content being associated with the private key.

17 . The method of claim 16 , wherein:
the card memory comprises one or more applets, the one or more applets comprise code that executes payments, and the private key is stor

Assignees

• Capital One Services Llc

Inventors

• ZARAKAS James
• SANGI Saleem

Classifications

• H04W84/18

  Self-organising networks, e.g. ad-hoc networks or sensor networks · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L2463/121

  Timestamp · CPC title

• H04L63/0492

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title