Systems and methods for contactless smart card authentication
US-11138593-B1 · Oct 5, 2021 · US
US2024296455A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2024296455-A1 |
| Application number | US-202418602220-A |
| Country | US |
| Kind code | A1 |
| Filing date | Mar 12, 2024 |
| Priority date | Apr 20, 2021 |
| Publication date | Sep 5, 2024 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Systems, methods, articles of manufacture, and computer-readable media. A web browser of a device may receive selection of a uniform resource locator (URL). An operating system may download an application from an application server based on the URL. The application may identify a plurality of applications installed on the device and select a first institution corresponding to a first application. The application may receive a cryptogram from a contactless card associated with the first institution and transmit the cryptogram to an authentication server. The application may receive an authentication result specifying the authentication server decrypted the cryptogram. The web browser may receive, based on the decryption of the cryptogram, an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number. The web browser may provide the account number, expiration date, and CVV to a server associated with the application.
Opening claim text (preview).
What is claimed is: 1 . A computer-implemented method, comprising: downloading, by a processor of a device based on selection of a link in a merchant web page in a web browser, an application from an application server; selecting, by the application, a first financial institution based on a plurality of financial institution applications installed on the device; receiving, by the application, encrypted data from a contactless card associated with an account of the first financial institution; transmitting, by the application, the encrypted data to an authentication server of the first financial institution; receiving, by the application, an authentication result specifying the authentication server decrypted the encrypted data; receiving, by the web browser based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and providing, by the web browser, the payment information to a server associated with the application to process a transaction. 2 . The method of claim 1 , wherein the selection of the first financial institution comprises: computing, by the application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device. 3 . The method of claim 2 , wherein the scores are computed based on: (i) an amount of time that has elapsed since the respective financial institution application was used on the device, and (ii) a number of times the respective financial institution application has been used on the device. 4 . The method of claim 1 , further comprising: storing, by the web browser, a cookie on the device based on an indication received from the server associated with the application, the indication specifying payment for the transaction has been processed using the payment information. 5 . The method of claim 1 , further comprising prior to providing the payment information to the server associated with the application: receiving, by the device at a phone number of the device, a one-time passcode from the authentication server; receiving, by the application, an input value; comparing, by the application, the input value to the one-time passcode; and determining, by the application based on the comparison, that the input value matches the one-time passcode, wherein the application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode. 6 . The method of claim 1 , wherein the link comprises a first identifier of a first merchant associated with the merchant web page and a transaction identifier associated with the transaction, wherein the first merchant is one of a plurality of merchants, wherein the merchant web page is one of a plurality of merchant web pages on a web server. 7 . The method of claim 6 , wherein the web server hosts the plurality of merchant web pages, wherein each merchant web page is associated with a respective one of the plurality of merchants, wherein each merchant is associated with a respective identifier of a plurality of identifiers, the plurality of identifiers including the first identifier, wherein the server associated with the application comprises one of a payment processing server or the web server. 8 . The method of claim 1 , wherein the application is a non-persistent on-demand application, wherein the link is a deep link uniform resource locator (URL) or a universal link URL. 9 . The method of claim 1 , wherein a page identifier parameter of the link identifies a page of the application, the method further comprising: identifying, by the application, the page identifier parameter; and opening, by the application, the page of the application based on the page identifier parameter. 10 . The method of claim 1 , wherein the payment information comprises an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number, the method further comprising, prior to downloading the application: receiving, by the web browser, selection of the link. 11 . A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor of a device, cause the processor to: download, based on selection of a link in a merchant web page in a web browser, an application from an application server; select, by the application, a first financial institution based on a plurality of financial institution applications installed on the device; receive, by the application, encrypted data from a contactless card associated with an account of the first financial institution; transmit, by the application, the encrypted data to an authentication server of the first financial institution; receive, by the application, an authentication result specifying the authentication server decrypted the encrypted data; receive, by the web browser based on the decryption of the encrypted data by the authentication server, payment information associated with the account; and provide, by the web browser, the payment information to a server associated with the application to process a transaction. 12 . The computer-readable storage medium of claim 11 , wherein the selection of the first financial institution comprises: compute, by the application, a respective score for each of the plurality of financial institution applications, wherein the first financial institution is associated with a first financial institution application of the plurality of financial institution applications installed on the device. 13 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to: receive, by the web browser, a confirmation for the processed transaction; and display, by the web browser, the confirmation. 14 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to: store, by the web browser, a cookie on the device based on an indication received from the server associated with the application, the indication specifying payment for the transaction has been processed using the payment information. 15 . The computer-readable storage medium of claim 11 , wherein the instructions further cause the processor to, prior to providing the payment information to the server associated with the application: receive, by the device at a phone number of the device, a one-time passcode from the authentication server; receive, by the application, an input value; compare, by the application, the input value to the one-time passcode; and determine, by the application based on the comparison, that the input value matches the one-time passcode, wherein the application transmits the encrypted data to the authentication server based at least in part on the determination that the input value matches the one-time passcode. 16 . A computing apparatus comprising: a processor; and a memory storing instructions that, when executed by the processor, cause the processor to: download, based on selection of a link in a merchant web page in a web browser, an application from an application server; select, by the application, a first financial institution based on a plurality of financial institution applications installed on the apparatus; receive, by the application, en
based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title
One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title
insuring higher security of transaction · CPC title
Contactless payments by cards · CPC title
Software deployment · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.