Systems and methods for cryptographic authentication of contactless cards

• US 10,592,710 B1
• Filed: 08/07/2019
• Issued: 03/17/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey, Ashfield, James, Chigurupati, Srinivasa, Osborn, Kevin
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US16/534,813
• Publication Number:
  US 20200104553A1
• Time in Patent Office: 223 Days
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/356 Aspects of software for card payments
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Example embodiments of systems and methods for contactless card verification include a contactless card including a substrate, a processor, and a memory, wherein the memory contains a first applet and a second applet, and a recipient device in data communication with the contactless card, wherein the second applet is configured to retrieve one or more parameters from the first applet via an interface; and wherein the second applet is configured to transmit the one or more parameters to the recipient device for verification.

Claims

1. A contactless card communication system comprising:

a contactless card including a substrate, a processor, and a memory containing a first applet, a second applet, and one or more additional applets, wherein;

the first applet is configured to access one or more parameters,

the first applet is precluded from data communication external to the contactless card by the second applet, and

each of the one or more additional applets includes offline verification data associated with a user of the contactless card; and

a recipient application comprising instructions for execution on a recipient device, the recipient application in data communication with the contactless card via the second applet,

wherein the second applet is configured to retrieve one or more parameters from the first applet via a communication interface,

wherein the second applet is configured to transmit the one or more parameters to the recipient application, and

wherein at least a portion of the offline verification data from each of the one or more additional applets is matched for verification.

2. The contactless card communication system of claim 1, wherein

the first applet is associated with a first applet identifier and the second applet is associated with a second applet identifier;

the first applet and the second applet are behind a common firewall; and

the interface comprises a secure, shareable interface configured to communicate the one or more parameters between the first applet and the second applet using the applet identifiers.

3. The contactless card communication system of claim 2, wherein the one or more parameters include a credit limit and a transaction counter.

4. The contactless card communication system of claim 3, wherein the one or more

parameters include the counter;

and

the contactless card is configured to update the counter based on a failed read attempt of the contactless card.

5. The contactless card communication system of claim 4, wherein the second applet is configured not to transmit the one or more parameters to the recipient application if the counter exceeds a threshold.

6. The contactless card communication system of claim 3, wherein the one or more parameters include at least one of a credit limit, a primary account number sequence number, a card verification number, a signature, an expiration date, a chip verification code, and a personal identification number, and information relating to the most recent transaction involving the contactless card.

7. The contactless card communication system of claim 3, wherein the contactless card is at least one of a building access card, a credit card, a debit card, an identification card, a loyalty program card, and a transportation card.

8. The contactless card communication system of claim 1, wherein upon receipt of the one or more parameters, the recipient application is configured to match the one or more parameters with information accessible to the recipient application to determine a verification result.

9. The contactless card communication system of claim 1, wherein:

the recipient application is in data communication with a server and configured to transmit the one or more parameters to the server, and

the server is configured to match the one or more parameters with information accessible to the recipient application to determine a verification result.

10. A method of communicating with a contactless card comprising:

establishing communication via an interface between a first applet and a second applet contained in a memory of a contactless card;

precluding, by the second applet, communication external to the contactless card by the first applet;

retrieving, by the second applet, verification data from the first applet via the interface;

retrieving, by the second applet, offline verification data associated with a user of the contactless card from one or more additional applets;

establishing communication between the second applet and a recipient application;

transmitting the verification data from the second applet to the recipient application via one or more shareable objects;

authenticating the verification data by the recipient application; and

matching at least a portion of the offline verification data from each of the one or more additional applets for verification.

11. The method of communicating with a contactless card of claim 10, wherein the verification data is offline data stored by the contactless card.

12. The method of communicating with a contactless card of claim 10, wherein

the verification data includes the counter;

and

the counter is configured to update based on a failed read attempt of the contactless card.

13. The method of communicating with a contactless card of claim 12, wherein the verification data further includes a credit limit, a counter, a unique card identifier, a primary account number sequence number, a card verification number, a signature, an expiration date, a chip verification code, and a personal identification number.

14. The method of communicating with a contactless card of claim 12, wherein the second applet is configured to transmit the verification data to the recipient device if the counter is below a threshold.

15. The method of communicating with a contactless card of claim 10, wherein authenticating the verification data comprises:

comparing the verification data transmitted by the second applet to the verification data accessible to the recipient application; and

verifying the contactless card if the verification data transmitted by the second applet matches the verification data accessible to the recipient application.

16. The method of communicating with a contactless card of claim 10, further comprising establishing communication between one or more additional applets contained in a memory of the contactless card, wherein each of the one or more additional applet includes offline verification data associated with a user of the contactless card.

17. A contactless card comprising:

a substrate;

a memory containing a first applet, a second applet, and one or more additional applets including offline verification data, wherein the offline verification data is accessible to the first applet;

an interface; and

a processor in communication with the memory and the interface,

wherein the second applet is configured to retrieve one or more parameters from the first applet via the interface for verification,

wherein the first applet is precluded from communication external to the contactless card by the second applet, and

wherein at least a portion of the offline verification data included in the one or more additional applets is matched for verification.