Systems and methods for cryptographic authentication of contactless cards

• US 10,581,611 B1
• Filed: 11/29/2018
• Issued: 03/03/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Osborn, Kevin, Rule, Jeffrey, Moreton, Paul, Duane, William, Hart, Colin, Newman, Kaitlin, Mossler, Lara, Herrington, Daniel, Chigurupati, Srinivasa, Prince, Ian, Lutz, Wayne
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/205,119
• Time in Patent Office: 460 Days
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06K 19/07309 Means for preventing undesired reading or writing from or onto record carriers
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/36 : using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/3674 : involving authentication
• CPC Class Codes: G06Q 20/382 : insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 : combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 : Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 : involving key management
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/409 : Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 : using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 : using encryption therefor
• CPC Class Codes: G07F 7/0893 : the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/122 : Online card verification
• CPC Class Codes: G07F 9/001 : Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: H04B 5/24 : Inductive coupling
• CPC Class Codes: H04B 5/43 : Antennas
• CPC Class Codes: H04B 5/77 : for interrogation
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/068 : using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 : using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/1441 : Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 9/002 : Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/0625 : with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0631 : Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0637 : Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0643 : Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0822 : using key encryption key
• CPC Class Codes: H04L 9/0825 : using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0863 : involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0866 : involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0897 : involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3228 : One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 : involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 : involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/041 : Key generation or derivation
• CPC Class Codes: H04W 12/108 : Source integrity
• CPC Class Codes: H04W 12/47 : using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

Claims

1. A data transmission system comprising:

a transmitting device having a processor and memory, the memory of the transmitting device containing a diversified master key, transmission data and a counter value;

an authentication server having a processor and memory, the memory of the authentication server containing a master key;

wherein the transmitting device is configured to;

generate a diversified key using the diversified master key, one or more cryptographic algorithms, and the counter value, and store the diversified key in the memory of the transmitting device,

generate a cryptographic result including the counter value using one or more cryptographic algorithms and the diversified key,

encrypt the transmission data using the one or more cryptographic algorithms and the diversified key to yield encrypted transmission data, and

transmit the cryptographic result and encrypted transmission data to the authentication server via one or more intermediary devices; and

wherein the authentication server is configured to;

generate an authentication diversified key based on the master key and a unique identifier, and store the authentication diversified key in the memory of the authentication server,

generate a session key based on the authentication diversified key and the cryptographic result, and

decrypt the encrypted transmission data and validate the cryptographic result using the one or more cryptographic algorithms and the session key,

wherein the counter value is independently updated by the transmitting device and the authentication server for each transmission between the transmitting device and the authentication server.

2. The data transmission system of claim 1, wherein the one or more cryptographic algorithms comprises at least one selected from the group of a symmetric encryption algorithm, an HMAC algorithm, and a CMAC algorithm.

3. The data transmission system of claim 1, wherein the counter value comprises a one-time passcode.

4. The data transmission system of claim 1, wherein the one or more cryptographic algorithms used to generate the cryptographic result include a cryptographic MAC function.

5. The data transmission system of claim 1, wherein a unique diversified session key is generated for each transmission between the transmitting device and the authentication server.

6. The data transmission system of claim 5, wherein the unique diversified session key is generated using a portion of the counter value.

7. The data transmission system of claim 5, wherein the unique diversified session key is generated utilizing a different counter value.

8. The data transmission system of claim 1, wherein the master key is limited to a predetermined number of uses.

9. The data transmission system of claim 1, wherein the master key is limited to use during a predetermined time period.

10. The data transmission system of claim 1, wherein the transmitting device comprises a payment card and the transmission data comprises activation data for the payment card.

11. A method for transmitting data by a contactless card having a processor and a memory, the memory containing a master key, an identification number, and a counter, the method comprising:

generating a card key using the master key and the identification number;

generating a first session key using the card key and a first portion of the counter and a second session key using the card key and a second portion of the counter, wherein the first portion of the counter is different than the second portion of the counter;

generating a cryptographic result including the counter using one or more cryptographic algorithms and the card key;

generating a cryptogram using the first session key, the cryptogram including the cryptographic result and the identification number;

encrypting the cryptogram using the second session key; and

transmitting the encrypted cryptogram and the cryptographic result.

12. The method for transmitting data of claim 11, wherein the contactless card comprises a payment card and the cryptogram includes activation data for the payment card.

13. The method for transmitting data of claim 11, wherein a version number is stored in the memory and the version number is associated with a set of rules for interpreting the cryptogram.

14. The method for transmitting data of claim 11, wherein the cryptogram includes a shared secret comprising a random number.

15. The method for transmitting data of claim 11, wherein the counter is updated each time the first and second session keys are generated.

16. The method for transmitting data of claim 13, further comprising transmitting the version number, the identification number, and the counter to an authentication server for validation of the cryptogram.

17. The method for transmitting data of claim 16, wherein the contactless card includes a communication chip and transmits at least one of the version number, the identification number, and the counter via near field communication.

18. The method for transmitting data of claim 11, wherein the master key is generated using a network profile record identifier and a derivation key index.

19. A contactless card comprising:

a substrate;

a memory containing one or more applets, a counter value, and at least one key;

a communication interface; and

one or more processors in communication with the memory and communication interface,

wherein;

the contactless card is configured to update the counter value after a first near-field communication (NFC) read of a NFC data exchange format (NDEF) tag via the communication interface,

upon updating the counter value, the contactless card is configured to create a first key using the at least one key and a first portion of the updated counter value, and create a second key using the at least one key and a second portion of the updated counter value, wherein the first portion of the updated counter value is different than the second portion of the updated counter value,

the contactless card is configured to create a cryptogram using the first key, concatenate the cryptogram with a random number, and encrypt the cryptogram and random number concatenated thereto using the second key, and

the encrypted cryptogram and the updated counter value are transmitted from the contactless card, via a second NFC read of the NDEF tag via the communication interface.

20. The contactless card of claim 19, wherein the contactless card comprises a payment card and the cryptogram includes activation data for the payment card.