Systems and methods for secure read-only authentication

• US 10,546,444 B2
• Filed: 06/21/2018
• Issued: 01/28/2020
• Est. Priority Date: 06/21/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Osborn, Kevin, Kelly, Kevin
• Primary Examiner(s): St Cyr, Daniel
• Application Number:
  US16/014,542
• Publication Number:
  US 20190392666A1
• Time in Patent Office: 586 Days
• Field of Search: 235385, 235380, 23546246, 23547202
• CPC Class Codes: G06F 1/04 Generating or distributing clock signals or signals derived directly therefrom
• CPC Class Codes: G06K 19/0702 the arrangement including a battery
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A system for authenticating a user with a mobile device comprising a memory storing instructions, and a processor in communication with a network. The processor may be configured to execute the stored instructions to receive, from a mobile device, an authentication request; obtain, from a database, a permanent identifier associated with a transaction card; generate a temporary identifier associated with the transaction card; generate an expected value by encrypting the permanent identifier and the temporary identifier; verify the expected value against an encrypted value received from the mobile device; and transmit an authorization command to the mobile device.

Claims

1. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:

a radio frequency transmitter;

a clock generator coupled to the radio frequency transmitter, the clock generator being configured to increment a counter value responsive to a wireless read signal received from an external radio frequency reader device; and

a near field communication tag coupled to the radio frequency transmitter and storing a permanent identifier and the counter value;

wherein the near field communication tag is configured, in response to the received read signal, to;

generate an encrypted value based on the permanent identifier and the counter value; and

provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

2. The transaction card of claim 1, wherein the permanent identifier comprises a private key.

3. The transaction card of claim 1, wherein the radio frequency transmitter is configured to generate a digital signal when the clock generator cycles on.

4. The transaction card of claim 1, wherein the clock generator is configured to increment the counter value by a preconfigured amount when the clock generator cycles on.

5. The transaction card of claim 4, wherein the clock generator is configured to update a temporary identifier, a numerical value, and the incremented counter value when the clock cycle generator cycles on.

6. The transaction card of claim 5, wherein the numerical value is unique to the transaction card.

7. The transaction card of claim 6, wherein the near field communication tag is configured to generate the encrypted value based on the permanent identifier, the counter value, and the numerical value.

8. The transaction card of claim 5, wherein the near field communication tag is configured to store the numerical value after transmissions by the radio frequency transmitter.

9. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:

a radio frequency transmitter;

a near field communication tag coupled to the radio frequency transmitter; and

a clock coupled to the near field communication tag and powered by a power source, wherein;

the clock is configured to send a time value to the near field communication tag responsive to a wireless read signal received by the near field communication tag from an external radio frequency reader device;

the near field communication tag is configured to store a permanent identifier and the time value; and

the near field communication tag is configured, in response to the received read signal, to;

generate an encrypted value based on the permanent identifier and the time value; and

provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

10. The transaction card of claim 9, wherein the power source comprises a battery.

11. The transaction card of claim 9, wherein the time value comprises a timestamp of the clock.

12. The transaction card of claim 11, wherein the time value comprises the timestamp and a numerical value unique to the transaction card.

13. The transaction card of claim 9, wherein the time value is valid only during a preconfigured time period.

14. The transaction card of claim 9, wherein the power source supplies power to at least one of the radio frequency transmitter or the near field communication tag.

15. A transaction card associated with a financial account and for generating an encrypted value as part of an authentication request, the card comprising:

a radio frequency transmitter;

a near field communication tag coupled to the radio frequency transmitter and

a microprocessor coupled to the near field communication tag and powered by a power source, wherein;

the microprocessor is configured to calculate an update value responsive to a wireless read signal received from an external radio frequency reader device;

the near field communication tag is configured to;

store a permanent identifier and the update value, and

in response to the received read signal;

generate an encrypted value based on the permanent identifier and the update value, and

provide the encrypted value to the radio frequency transmitter for transmission to the external radio frequency reader device.

16. The transaction card of claim 15, wherein the near field communication tag is configured to generate a temporary identifier based on the update value while the radio frequency transmitter is transmitting.

17. The transaction card of claim 15, wherein the microprocessor is further configured to vary the update value between subsequent transmissions.

18. The transaction card of claim 15, wherein the update value is calculated based on an algorithm.

19. The transaction card of claim 18, wherein the algorithm is unique to the transaction card.

20. The transaction card of claim 15 further comprising a memory component coupled to the microprocessor.