Techniques to provide secure cryptographic authentication, verification, functionality access, and payments between contactless cards and communication devices

Patent metadata

Field	Value
Publication number	US-2024289798-A1
Application number	US-202418407995-A
Country	US
Kind code	A1
Filing date	Jan 9, 2024
Priority date	Jan 9, 2023
Publication date	Aug 29, 2024
Grant date	—

Abstract

Systems and methods to provide secure cryptographic authentication, verification, functionality access, and payments between contactless cards and communication devices are provided. An exemplary communication device includes a system on a chip and generates a communication field, displays a prompt to tap a contactless card on the communication device, reads the contactless card after entry into the communication field, performs an authentication of the contactless card, and after a successful authentication of the contactless card, and performs a payment transaction.

First claim

What is claimed is:

1 . A communication device, comprising:
a system on a chip (SoC), wherein the communication device:
generates a communication field,
displays a prompt to tap a contactless card on the communication device,
reads the contactless card after entry into the communication field,
performs an authentication of the contactless card, and
after a successful authentication of the contactless card, performs a payment transaction.

2 . The communication device of claim 1 , wherein:
after the successful authentication and prior to the payment transaction, the communication device displays one or more user interfaces, the one or more user interfaces comprises at least one selected from the group of a user interface seeking additional verification, a user interface displaying data, a user interface for a point of access device, and a user interface providing access to additional functionalities.

3 . The communication device of claim 2 , wherein:
after display of the one or more user interfaces, the communication device provides access to one or more functionalities, and the one or more functionalities comprise at least one selected from the group of access to media content, a discount, a promotion, a loyalty benefit, and rewards points.

4 . The communication device of claim 3 , wherein the access to media content comprises at least one selected from the group of access to entertainment content and access to sports content.

5 . The communication device of claim 1 , wherein, in authenticating the contactless card, the communication device:
receives, from the read of the contactless card, an encrypted cryptogram, generates an authentication session key, generates an encryption session key, decrypts the encrypted cryptogram using the encryption session key, and validates the cryptogram using the authentication session key.

6 . The communication device of claim 5 , wherein:
the SoC stores an authentication diversified key, an encryption diversified key, and a counter value, the authentication session key is generated using the authentication diversified key, the counter value, and a cryptographic algorithm, and the encryption session key is generated using the encryption diversified key, the counter value, and the cryptographic algorithm.

7 . The communication device of claim 1 , wherein:
the communication device receives, from the read of the contactless card, an issuer identifier, and the issuer identifier identifiers at least one selected from the group of an issuer of the contactless card and a device associated with the issuer of the contactless card.

8 . The communication device of claim 1 , wherein, after an unsuccessful authentication, the communication device performs the payment transaction.

9 . A method performed by a communication device comprising a system on a chip (SoC), the method comprising:
generating a communication field; displaying a prompt to tap a contactless card on the communication device; reading the contactless card after entry into the communication field; performing an authentication of the contactless card; and after a successful authentication of the contactless card, performing a payment transaction.

10 . The method of claim 9 , further comprising:
after the successful authentication and prior to the payment transaction, displaying one or more user interfaces, the one or more user interfaces comprises at least one selected from the group of a user interface seeking additional verification, a user interface displaying data, a user interface for a point of access device, and a user interface providing access to additional functionalities.

11 . The method of claim 10 , wherein:
the one or more user interfaces comprises one or more user interfaces seeking additional verification, and the one or more user interfaces seeking additional verification comprise at least one selected from the group of a user interface requesting submission of login credentials, a user interface requesting age verification, a user interface requesting address information, and a user interface requesting biometric information.

12 . The method of claim 11 , wherein the biometric information comprises at least one selected from the group of a facial scan, a fingerprint scan, a retina scan, and a voice input.

13 . The method of claim 10 , further comprising:
after display of the one or more user interfaces, providing access to one or more functionalities, wherein the one or more functionalities comprise at least one selected from the group of access to one or more accounts and the ability to conduct transactions using the one or more accounts.

14 . The method of claim 13 , wherein the one or more accounts comprise at least one selected from the group of a rewards account, a merchant account, a utilities account, a financial account, a brokerage account, a travel account, and a point of access account.

15 . The method of claim 13 , wherein the one or more accounts comprise at least one selected from the group of a credit card, a debit card, and a gift card.

16 . A non-transitory computer-readable medium comprising instructions for execution by a communication device, wherein, upon execution of the instructions the communication device performs procedures comprising:
generating a communication field; displaying a prompt to tap a contactless card on the communication device; reading the contactless card after entry into the communication field; performing an authentication of the contactless card; and after a successful authentication of the contactless card, performing a payment transaction.

17 . The non-transitory computer-readable medium of claim 16 , the procedures further comprising:
after the successful authentication, displaying one or more user interfaces, the one or more user interfaces comprises at least one selected from the group of a user interface seeking additional verification, a user interface displaying data, a user interface for a point of access device, and a user interface providing access to additional functionalities.

18 . The non-transitory computer-readable medium of claim 17 , wherein the additional functionalities comprise access to a building, a room, a locker, a storage unit, and a vehicle.

19 . The non-transitory computer-readable medium of claim 17 , wherein the additional functionalities comprise access to at least one selected from the group of a loyalty program status, a reward points balance, a frequent flyer mile balance, a redemption option, and a past redemption.

20 . The non-transitory computer-readable medium of claim 17 , wherein:
the one or more user interfaces comprise one or more user interfaces for a point of access device, and the one or more user interfaces for the point of access device comprise at least one selected from the group of a user input interface, a biometric user interface, and a photographic input interface.

Assignees

• Capital One Services Llc

Inventors

• Koshy Bob Uni
• Osborn Kevin
• Moreton Paul Young
• Lutz Wayne
• Barrett Casey
• Blocksom Jonathan T

Classifications

• G06Q20/409

  Device specific authentication in transaction processing · CPC title

• G06Q20/352 Primary

  Contactless payments by cards · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/40145 Primary

  Biometric identity checks · CPC title