Systems and methods for cryptographic authentication of contactless cards

• US 10,630,653 B1
• Filed: 10/01/2019
• Issued: 04/21/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/590,290
• Publication Number:
  US 20200106752A1
• Time in Patent Office: 203 Days
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

Example embodiments of systems and methods for replacing card information. In an embodiment, a system comprises an authentication server in data communication with a network and a database in data communication with the authentication server. The authentication server is configured to receive an authentication signal from a user device via the network, retrieve a list of merchants having transaction history with an account associated with the account card, and transmit an access token to at least one merchant server selected using the list of merchants.

Claims

1. A system for replacing stored card information comprising:

an authentication server in data communication with a network; and

a database in data communication with the authentication server;

wherein the authentication server is configured to;

receive an authentication signal from a user device via the network, the authentication signal being generated responsive to a detection of an account card and a prior authentication of a user of the user device;

retrieve a list of merchants having a transaction history with an account associated with the account card; and

transmit an access token to at least one merchant server selected using the list of merchants;

wherein the access token allows the at least one merchant server to open an encrypted communication channel with the user device suitable for transmitting account card information indicative of the account card from the user device to the merchant server, and

wherein stored card information is replaced with the account card information by the merchant server in a merchant server memory.

2. The system for replacing stored card information of claim 1, wherein the authentication signal comprises a cryptogram generated by the account card.

3. The system for replacing stored card information of claim 1, wherein the authentication server is further configured to:

determine, using the list of merchants, whether the merchants store account information for an account associated with the account card.

4. The system for replacing stored card information of claim 3, wherein the authentication server is further configured to:

transmit unique account tokens to each merchant determined to store account information for an account associated with the account card.

5. A method of replacing stored card information comprising the steps of:

detecting, by a user device application comprising instructions for execution on a user device, an account card when the account card enters a communication field of the user device;

transmitting an authentication signal via the network to an authentication server, the authentication signal being generated responsive to a detection of the account card and prior authentication of a user of the user device;

in response to receiving the authentication signal, retrieving, by the authentication server, a list of merchants having a transaction history with an account associated with the account card;

transmitting, by the authentication server, an access token to at least one merchant server selected based on the list of merchants, the access token configured to initiate an encrypted communication channel between the user device application and the merchant server;

transmitting, by the user device application via the encrypted communication channel, account card information indicative of the account card to the merchant server; and

instructing, by the user device application, the merchant server to replace stored card information with the account card information.

6. The method of replacing stored card information of claim 5, wherein the prior authentication is based on receiving login credentials to access the account using an application on the user device.

7. The method of replacing stored card information of claim 5, wherein the prior authentication includes entering a username and password on the user device.

8. The method of replacing stored card information of claim 5, further comprising the step of:

displaying, by the user device application, a prompt to select whether the account card information is transmitted to the merchant server.

9. The method of replacing stored card information of claim 5, wherein the access token defines communications permitted to be transmitted via the encrypted communication channel.

10. The method of replacing stored card information of claim 5, further comprising the steps of:

transmitting, by the authentication server, a second access token to a second merchant server selected using the list of merchants, the second access token configured to initiate a second encrypted communication channel between the user device application and the merchant server;

transmitting, by the user device application via the second encrypted communication channel, account card information indicative of the account card to the second merchant server.

11. The method of replacing stored card information of claim 10, further comprising the steps of:

instructing, by the user device application, the first merchant server and the second merchant server to replace stored card information with the account card information.

12. A system for replacing stored card information comprising:

a user device having a processor and a memory, the memory containing a user device application comprising instructions for execution on the user device;

wherein the user device application is configured to;

detect an account card when the account card enters a communication field of the user device;

transmit an authentication signal via the network to an authentication server, the authentication signal being generated responsive to a detection of the account card and a prior authentication of a user of the user device;

connect to a merchant server through an encrypted communication channel, wherein the merchant server is identified by the authentication server and the encrypted communication channel is initiated by an access token transmitted by the authentication server to the merchant server;

transmit account card information indicative of the account card to the merchant server via the encrypted communication channel; and

instruct the merchant server to replace stored card information with the account card information.

13. The system for replacing stored card information of claim 12, wherein the user device application is further configured to:

receive a cryptogram generated by the account card when the account card enters the communication field of the user device, and

wherein the authentication signal comprises the cryptogram.

14. The system for replacing stored card information of claim 12, wherein the user device application is further configured to:

connect to a second merchant server through a second encrypted communication channel, wherein the second merchant server is identified by the authentication server and the encrypted communication channel is initiated by a second access token transmitted by the authentication server to the merchant server.

15. The system for replacing stored card information of claim 14, wherein the user device application is further configured to:

transmit account card information indicative of the account card to the second merchant server via the second encrypted communication channel.

16. The system for replacing stored card information of claim 12, wherein the user device application is further configured to:

in response to detecting the account card when the account card enters a communication field of the user device, prompt a user to select whether to replace existing card information stored on a plurality of merchant servers with the account card information.

17. The system for replacing stored card information of claim 16, wherein the user device is further configured to:

in response to a selection by the user to replace the existing card information stored on the plurality of merchant servers with the account card information, transmit the authentication signal via the network to the authentication server.

18. The system for replacing stored card information of claim 16, wherein the user device application is further configured to:

in response to a selection by the user to replace the existing card information stored on the plurality of merchant servers with the account card information, instructing the plurality of merchant servers to replace the existing card information with the account card information.