Systems and methods for cryptographic authentication of contactless cards

• US 10,511,443 B1
• Filed: 03/12/2019
• Issued: 12/17/2019
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Newman, Kaitlin, Haynes, Kimberly, Crank, Charles Nathan, Cogswell, Andrew, Hart, Colin, Rule, Jeffrey, Mossler, Lara, Gulati, Latika, Benkreira, Abdelkader, Cunningham, Sarah Jane, Bermudez, Sophie, Mossoba, Michael, Lutz, Wayne
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/351,433
• Time in Patent Office: 280 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 20/306 using TV related infrastructures external card used for payment with client device H04N21/4185
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0226 Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
• CPC Class Codes: G06Q 30/0237 at kiosk
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

Claims

1. A data transmission system comprising:

a transmitting device having a processor and memory, the memory of the transmitting device containing a diversified master key, transmission data and a counter value;

an application comprising instructions for execution on a receiving device having a processor and memory, the memory of the receiving device containing the master key;

wherein the transmitting device is configured to;

generate a diversified key using the diversified master key, one or more cryptographic algorithms, and the counter value,

generate a cryptographic result including the counter value using the one or more cryptographic algorithms and the diversified key,

encrypt the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data, and

transmit the cryptographic result and encrypted transmission data to the application; and

wherein the application is configured to;

generate an authentication diversified key based on the master key and a unique identifier;

generate a session key based on the authentication diversified key and the cryptographic result;

decrypt the encrypted transmission data and validate the received cryptographic result using the one or more cryptographic algorithms and the diversified key; and

notify the transmitting device of the successful decryption and validation;

wherein, upon receipt of the notification, the transmitting device is configured to transmit reward data to the application, and

wherein the application is configured to generate a code to reset at least one selected from the group of expiring coupons and promotions.

2. The data transmission system of claim 1, wherein the reward data comprises a loyalty program account number.

3. The data transmission system of claim 2, wherein the application generates a discount upon receipt of the loyalty program account number.

4. The data transmission system of claim 2, wherein the application awards reward points to the loyalty program account associated with the loyalty program account number.

5. The data transmission system of claim 1, wherein the application comprises instructions for execution on a kiosk.

6. The data transmission system of claim 1, wherein the application requests additional loyalty program information from a server upon receipt of the loyalty program account number.

7. The data transmission system of claim 6, wherein the additional loyalty program information requested is dependent upon the location of the application.

8. The data transmission system of claim 1, wherein:

the application is configured to monitor user activity, and

the application generates a reward based upon a user interaction with a product.

9. The data transmission system of claim 8, wherein the user interaction comprises operating the product.

10. The data transmission system of claim 8, wherein the user interaction comprises viewing an advertisement relating to the product.

11. The data transmission system of claim 8, wherein the user interaction comprises viewing a tutorial relating to the product.

12. The data transmission system of claim 8, wherein the user interaction comprises sending information relating to the product to a second user.

13. The data transmission system of claim 8, wherein the reward is generated based on the date of the user interaction.

14. The data transmission system of claim 1, wherein the application is configured to provide access to media content.

15. The data transmission system of claim 1, wherein the application is configured to display expiration time associated with at least one selected from the group of the expiring coupons and promotions.

16. The data transmission system of claim 1, wherein the application is configured to verify presence of a reward balance available for redemption.

17. The data transmission system of claim 4, wherein the application is configured to apply the rewards points within a predetermined time period after occurrence of a transaction.

18. A contactless card comprising:

a substrate, including;

a memory containing one or more applets, a counter value, and a plurality of keys;

a communication interface; and

one or more processors in communication with the memory and communication interface,

wherein the one or more processors is configured to update the counter value when the communication interface is within a range of a communication field of an application comprising instructions for execution on a receiving device,

wherein the contactless card is configured to create a cryptogram using the plurality of keys and the counter value, and

wherein the cryptogram is transmitted, via the communication interface, to the application, and

wherein loyalty program information is transmitted, via the communication interface, to the application,

wherein the application is configured to update the loyalty program information stored on the contactless card,

wherein the application is configured to update a reward value stored on the contactless card, and

wherein the application is configured to update the reward value based on a number of times the communication interface enters the communication field.

19. The contactless card of claim 18, wherein the loyalty program information comprises a loyalty program account number and the reward value.

20. The contactless card of claim 18, wherein the contactless card is configured to selectively load and unload rewards onto the memory of the contactless card following communication with the application.