Systems and methods for cryptographic authentication of contactless cards

Patent metadata

Field	Value
Publication number	US-2020106620-A1
Application number	US-201916659327-A
Country	US
Kind code	A1
Filing date	Oct 21, 2019
Priority date	Oct 2, 2018
Publication date	Apr 2, 2020
Grant date	—

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

First claim

1 - 20 . (canceled)

21 . A data transmission system comprising:
a transmitting device having a processor and memory, the memory of the transmitting device containing a diversified master key, transmission data and a counter value; an application comprising instructions for execution on a receiving device having a processor and memory, the memory of the receiving device containing the master key; wherein the transmitting device is configured to:
generate a diversified key using the diversified master key, one or more cryptographic algorithms, and the counter value,
generate a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key,
encrypt the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data, and
transmit the cryptographic result and encrypted transmission data to the application; and
wherein the application is configured to:
generate an authentication diversified key based on the master key and a unique identifier;
generate a session key based on the authentication diversified key and the cryptographic result; and
decrypt the encrypted transmission data and validate the received cryptographic result using the one or more cryptographic algorithms and the session key; and
wherein the application is configured to provide access to information.

22 . The data transmission system of claim 21 , wherein the information comprises at least one selected from the group of media content and trivia.

23 . The data transmission system of claim 22 , wherein the media content is associated with at least one selected from the group of at least a portion of a movie, filming of the at least a portion of the movie, and a television series.

24 . The data transmission system of claim 22 , wherein the application is configured to display the at least one selected from the group of media content and trivia on a screen associated with at least one selected from the group of a terminal and a kiosk.

25 . The data transmission system of claim 21 , wherein the information comprises one or more benefits based on criteria.

26 . The data transmission system of claim 25 , wherein the criteria is associated with membership to at least one selected from the group of a club, a group, a loyalty program, an institution, and a qualifying list.

27 . The data transmission system of claim 26 , wherein the qualifying list is based on at least one selected from the group of purchase of an item, purchase from a merchant, and amount in excess of a threshold in a predetermined time period.

28 . The data transmission system of claim 21 , wherein the access to information is provided without waiting for one or more restrictions on the information.

29 . The data transmission system of claim 28 , wherein the one or more restrictions comprises at least one selected from the group of an advertisement, a survey, payment, and limited views.

30 . The data transmission system of claim 21 , wherein:
the receiving device comprises a server; and the cryptographic result and encrypted transmission data are transmitted by the transmitting device to the application via one or more intermediary devices.

31 . A method of providing access to information using a transmitting device and an application comprising instructions for execution on a receiving device, the method comprising the steps of:
generating a diversified key using a diversified master key, one or more cryptographic algorithms, and a counter value, the transmitting device comprising a processor and memory, the memory of the transmitting device containing the diversified master key, transmission data, and the counter value; generating a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key; encrypting the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data; transmitting the cryptographic result and encrypted transmission data to an application, the application comprising instructions for execution on a receiving device; generating an authentication diversified key based on the master key and a unique identifier; generating a session key based on the authentication diversified key and the cryptographic result; decrypting the encrypted transmission data and validating the received cryptographic result using the one or more cryptographic algorithms and the session key; and providing, by the application, access to information.

32 . The method of claim 31 , wherein the information comprises at least one selected from the group of media content and trivia.

33 . The method of claim 32 , wherein the media content is associated with at least one selected from the group of at least a portion of a movie, filming of the at least a portion of the movie, and a television series.

34 . The method of claim 32 , further comprising displaying the at least one selected from the group of media content and trivia on a screen associated with at least one selected from the group of a terminal and a kiosk.

35 . The method of claim 31 , wherein the information comprises one or more benefits based on one or more criteria.

36 . The method of claim 35 , wherein the one or more criteria is associated with membership to at least one selected from the group of a club, a group, a loyalty program, an institution, and a qualifying list.

37 . The method of claim 36 , wherein the qualifying list is based on at least one selected from the group of purchase of an item, purchase from a merchant, and amount in excess of a threshold in a predetermined time period.

38 . The method of claim 31 , wherein the access to information is provided without waiting for one or more restrictions on the information.

39 . The method of claim 31 , wherein:
the receiving device comprises a server; and the cryptographic result and encrypted transmission data are transmitted by the transmitting device to the application via one or more intermediary devices.

40 . A contactless card comprising:
a memory containing one or more applets, a counter value, and one or more keys; a communication interface; and one or more processors in communication with the memory and communication interface, wherein the one or more processors are configured to update the counter value when the communication interface is within a range of a communication field of an application comprising instructions for execution on a receiving device, wherein the contactless card is configured to create a cryptogram using the plurality of keys and the counter value, and wherein the cryptogram is transmitted, via the communication interface, to the application for validation and access to information.

41 . The contactless card of claim 40 , wherein the information comprises at least one selected from the group of media content and trivia.

42 . The contactless card of claim 41 , wherein the media content is associated with at least one selected from the group of at least a portion of a movie, filming of the at least a portion of the movie, and a television series.

43 . The contactless card of claim 40 , wherein the information comprises one or more benefits based on criteria.

44 . The contactless card of claim 43 , wherein the criteria is associated with membership to at l

Assignees

• Capital One Services Llc

Inventors

• Newman Kaitlin
• Haynes Kimberly
• Crank Charles Nathan
• Cogswell Andrew
• Hart Colin
• Rule Jeffrey
• Mossler Lara
• Gulati Latika
• Benkreira Abdelkader
• Cunningham Sarah Jane
• Bermudez Sophie
• Mossoba Michael
• Lutz Wayne

Classifications

• G06Q20/354

  Card activation or deactivation · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• H04L9/0897

  involving additional devices, e.g. trusted platform module [TPM], smartcard or USB · CPC title

• G06Q30/0277

  Online advertisement · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title