Systems and methods for cryptographic authentication of contactless cards

Patent metadata

Field	Value
Publication number	US-2020260272-A1
Application number	US-201916659088-A
Country	US
Kind code	A1
Filing date	Oct 21, 2019
Priority date	Oct 2, 2018
Publication date	Aug 13, 2020
Grant date	—

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

First claim

1 - 20 . (canceled)

21 . An authentication system comprising:
a contactless card having a processor and memory, the memory of the contactless card containing a diversified master key, transmission data and a counter value; an application comprising instructions for execution on a receiving device having a processor and memory, the memory of the receiving device containing the master key; wherein the contactless card is configured to:
generate a diversified key using the diversified master key, one or more cryptographic algorithms, and the counter value,
generate a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key,
encrypt the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data, and
transmit the cryptographic result and encrypted transmission data to the application;
wherein the application is configured to:
generate an authentication diversified key based on the master key and a unique identifier,
generate a session key based on the authentication diversified key and the cryptographic result, and
decrypt the encrypted transmission data and validate the received cryptographic result using the one or more cryptographic algorithms and the session key; and
wherein the application is configured to perform one or more actions including ticket issuance.

22 . The authentication system of claim 21 , wherein ticket issuance is associated with at least one selected from the group of transportation ticketing, event ticketing, and venue ticketing.

23 . The authentication system of claim 21 , wherein ticket issuance is authenticated via one or more parameters.

24 . The authentication system of claim 23 , wherein the one or more parameters comprises at least one selected from the group of scanning an image, matching transaction data, and matching account data.

25 . The authentication system of claim 21 , wherein the receiving device comprises at least one selected from the group of a kiosk, a terminal, a point-of-sale device, and a mobile device.

26 . The authentication system of claim 21 , wherein the contactless card is configured to convert a purchase amount from a first currency to a second currency.

27 . The authentication system of claim 21 , wherein the application is configured to display directions to one or more venues, the display including at least one selected from the group of a map format and a list format.

28 . The authentication system of claim 27 , wherein the contactless card includes information based on one or more user preferences associated with display directions.

29 . The authentication system of claim 27 , wherein the display directions include directions to at least one selected from the group of a first automated teller machine (ATM) within a first distance and a second ATM without foreign fees within a second distance.

30 . The authentication system of claim 29 , wherein directions include at least one selected from the group of estimated time duration via one or more modes of transport, estimated arrival time, and hours of operation of the first ATM and the second ATM.

31 . A method of performing one or more actions using a contactless card and an application comprising instructions for execution on a receiving device, the method comprising the steps of:
generating a diversified key using a diversified master key, one or more cryptographic algorithms, and a counter value, the contactless card comprising a processor and memory, the memory of the contactless card containing the diversified master key, transmission data, and the counter value; generating a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key; encrypting the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data; transmitting the cryptographic result and encrypted transmission data to an application, the application comprising instructions for execution on a receiving device; generating an authentication diversified key based on a master key and a unique identifier; generating a session key based on the authentication diversified key and the cryptographic result; decrypting the encrypted transmission data and validating the received cryptographic result using the one or more cryptographic algorithms and the session key; and performing one or more actions including ticket issuance.

32 . The method of claim 31 , wherein the ticket issuance is associated with at least one selected from the group of transportation ticketing, event ticket, and venue ticketing.

33 . The method of claim 31 , wherein the ticket issuance is authenticated via one or more parameters.

34 . The method of claim 33 , wherein the one or more parameters comprises at least one selected from the group of scanning an image, matching transaction data, matching account data, and any combination thereof.

35 . The method of claim 31 , wherein the receiving device comprises at least one selected from the group of a kiosk, a terminal, a point-of-sale device, and a mobile device.

36 . The method of claim 31 , wherein the contactless card is configured to covert a purchase amount from a first currency to a second currency.

37 . The method of claim 31 , wherein the application is configured to display directions to one or more venues, the display including at least one selected from the group of a map format and a list format.

38 . The method of claim 37 , wherein the contactless card includes information based on one or more user preferences associated with display directions.

39 . The method of claim 31 , wherein the contactless card is configured to translate text including at least one selected from the group of a translation from English to a non-English language and a translation from a non-English language to English.

40 . A contactless card comprising:
a memory containing one or more applets, a counter value, and one or more keys; a communication interface; and one or more processors in communication with the memory and communication interface, wherein the one or more processors are configured to update the counter value when the communication interface is within a range of a communication field of an application comprising instructions for execution on a receiving device, wherein the contactless card is configured to create a cryptogram using the one or more keys and the counter value, and wherein the cryptogram is transmitting, via the communication interface, to the application for validation and performance of one or more actions including authenticated ticket issuance.

Assignees

• Capital One Services Llc

Inventors

• Newman Kaitlin
• Haynes Kimberly
• Crank Charles Nathan
• Cogswell Andrew
• Hart Colin
• Rule Jeffrey
• Mossler Lara
• Gulati Latika
• Benkreira Abdelkader
• Cunningham Sarah Jane
• Bermudez Sophie
• Mossoba Michael
• Lutz Wayne

Classifications

• H04W12/60

  Context-dependent security · CPC title

• H04W12/47

  using near field communication [NFC] or radio frequency identification [RFID] modules · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/041

  Key generation or derivation · CPC title

• H04L2463/061

  applying further key derivation, e.g. deriving traffic keys from a pair-wise master key · CPC title