Systems and methods for establishing identity for order pick up

• US 10,733,645 B2
• Filed: 10/02/2019
• Issued: 08/04/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey, Newman, Kaitlin, Blanchet, Steve, Sherif, Timur
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/590,504
• Publication Number:
  US 20200104891A1
• Time in Patent Office: 307 Days
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G07C 9/00182 operated with unidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Example embodiments of systems and methods for secure online order pick up and data transmission system between transmitting and receiving devices are provided. In an example embodiment, a user may be required to confirm his or her identity prior to using an application, utilizing enhanced or restricted features of an application or device, viewing sensitive information, or taking certain actions. A transmitting device, such as a contactless card, may be employed as means for confirming a user'"'"'s identity and access these features.

Claims

1. An order pick up system comprising:

a contactless card comprising a processor, a memory, and a contactless communication interface, wherein the memory contains an applet;

a card reader comprising a processor and a contactless communication interface, wherein the contactless communication interface is configured to generate a contactless communication field;

an authorization server in data communication with the card reader;

a secure storage comprising a lock in data communication with the card reader, wherein, after entry of the contactless card into the contactless communication field, the card reader is configured to;

request a token from the applet via the contactless communication interface of the card reader;

authenticate the token by generating an identification message based on the token;

transmit the identification message to the authorization server;

receive an authentication message from the authorization server; and

upon receipt of the authentication message, transmit an access message to the lock, wherein, upon receipt of the access message, the lock allows access to the secure storage, and

a conveyor system configured to transport an item within the secure storage upon the lock allowing access to the secure storage.

2. The order pick up system of claim 1, wherein the authorization server is in data communication with a database containing information associated with an account used to purchase an item contained within the secure storage, and wherein upon receipt of the identification message, the authorization server is configured to determine if the contactless card is associated with the account used to purchase the item contained within the secure storage.

3. The order pick up system of claim 2, wherein the authorization server is configured to transmit a passcode to a mobile device associated with the account used to purchase an item contained within the secure storage if the item costs more than a predetermined amount, and wherein the card reader is configured to request the passcode from a user prior to transmitting the access message.

4. The order pick up system of claim 2, wherein the authorization server is in data communication with the secure storage and configured to transmit a pick up message to a user interface associated with the account used to purchase an item when the item is placed within the secure storage.

5. The order pick up system of claim 1, wherein the secure storage comprises a stationary locker associated with a retail store location.

6. The order pick up system of claim 1, wherein the conveyor system is configured to transport the item from the secure storage to a pick up location.

7. The order pick up system of claim 1, wherein the secure storage is configured to be accessed by a user within a vehicle.

8. The order pick up system of claim 1, further comprising a secure location containing one or more secure storages, the secure location comprising a card reader and a lock in data communication with the secure location card reader, the secure location card reader comprising a processor and a contactless communication interface configured to generate a contactless communication field wherein, after entry of the contactless card into the contactless communication field of the secure location card reader, the secure location card reader is configured to:

request an identification token from the applet via the contactless communication interface of the secure location card reader;

authenticate the identification token; and

transmit an access message to the secure location lock, wherein upon receipt of the access message, the lock allows access to the secure location.

9. The order pick up system of claim 8, wherein the authorization server is in data communication with a database containing information indicating an account used to purchase an item contained within the secure storage, and wherein the secure location card reader, upon receipt of the identification token is configured to query the authorization server to determine if an item contained in the secure storage was purchased using the account associated with the contactless card.

10. The order pick up system of claim 1, wherein the secure storage comprises an autonomous vehicle comprising a vehicle processor in data communication with the card reader and the card reader comprises a mobile device, and wherein the card reader is further configured to transmit a travel message to the vehicle processor, wherein upon receipt of the travel message, the vehicle processor directs the secure storage to travel to a location associated with the card reader.

11. The order pick up system of claim 1, wherein the contactless card is configured to encrypt the identification token using one or more cryptographic algorithms and the card reader is configured to decrypt the encrypted identification token.

12. An order pick up method comprising:

providing a card comprising a processor, a memory containing an applet, and a contactless communication interface;

after entry of the card within a communication field of a secondary device in data communication with a secure storage, requesting, by the secondary device, an identification certificate from the card via the contactless communication interface;

transmitting an identification certificate from the card to the secondary device;

generating, by the secondary device, an identification message based on the identification certificate and transmitting, by the secondary device, the identification message to an authorization server;

authenticating, by the authorization server, the identification certificate based on the identification message and transmitting, by the authorization server, an authentication message to the secondary device;

transmitting, by the secondary device, an access message to the secure storage; and

transporting, by a conveyor system, an item within the secure storage after receipt by the secure storage of the access message.

13. The order pick up method of claim 12, further comprising encrypting the identification certificate using one or more cryptographic algorithms prior to transmitting the identification certificate from the card to the secondary device.

14. The order pick up method of claim 12, further comprising transporting an item from the secure storage to a user.

15. The order pick up method of claim 12, wherein the secondary device is a mobile device, the method further comprising transporting the secure storage to a location associated with the secondary device.

16. The order pick up method of claim 12, further comprising transmitting a code to a mobile device associated with a user and the user entering the code using an input device associated with the secure storage.

17. The order pick up method of claim 12, wherein the secure storage is located within a retail store.

18. The order pick up method of claim 12, further comprising transmitting an order ready message to a user, wherein the order ready message comprises a locker identification number and a locker location.

19. The order pick up method of claim 12, further comprising requesting a user scan an identification card prior to transmitting the access message to the secure storage.

20. An item delivery system comprising:

a transmitting device comprising a processor, a memory containing an applet, and a contactless communication interface;

a receiving device comprising a processor and a contactless communication interface, wherein the contactless communication interface is configured to generate a near field communication field;

a remote authorizaton server in data communication with the receiving device;

a secure locker in data communication with the receiving device, the receiving device configured to, after entry of the transmitting device into the near field communication field;

request a user identification via the contactless communication interface of the receiving device;

transmit a user identification message to the authorizaton server, wherein the authorizaton server authenticates the user identification based on the user identification message and transmits an authentication message to the receiving device; and

transmit an access message to the secure locker, wherein upon receipt of the access message, the secure locker allows access to the interior of the secure locker; and

a conveyor system configured to transport an item within the secure locker upon the secure locker allowing access to the secure locker.