Systems and methods for cryptographic authentication of contactless cards

• US 10,771,253 B2
• Filed: 03/12/2019
• Issued: 09/08/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Newman, Kaitlin, Hart, Colin, Gulati, Latika, Benkreira, Abdelkader, Cunningham, Sarah Jane, Bermudez, Sophie, Mossoba, Michael, Lutz, Wayne
• Primary Examiner(s): Tsang, Henry
• Application Number:
  US16/351,424
• Publication Number:
  US 20200106613A1
• Time in Patent Office: 546 Days
• Field of Search: None
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 50/34 Betting or bookmaking, e.g. Internet betting
• CPC Class Codes: G07F 17/3225 Data transfer within a gaming system, e.g. data sent between gaming machines and users
• CPC Class Codes: G07F 17/3241 Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance computer security G06F21/00
• CPC Class Codes: G07F 17/3244 Payment aspects of a gaming system, e.g. payment schemes, setting payout ratio, bonus or consolation prizes
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

Claims

1. A data transmission system comprising:

a contactless card including a processor and memory;

an application comprising instructions for executing on a receiving device having a processor and memory, wherein the application is in data communication with the contactless card;

wherein the contactless card is configured to transmit, after one or more entries into a communication field, one or more user credentials for authentication;

wherein the application is configured to, after authentication of the one or more user credentials, perform one or more processes, wherein at least one of the one or more processes is selected from the group of playing an audible message and playing a visual message for a predetermined time period, wherein the selection is dependent after the one or more entries into the communication field, wherein the at least one selected from the group of the audible message and the visual message are selected based on the one or more entries into the communication field and based on one or more gestures from the contactless card such that each of the one or more gestures is indicative of a different message, the one or more gestures including at least one selected from the group of tap, wave, gesture, and swipe, and wherein the at least one selected from the group of the audible message and the visual message are played by the application.

2. The data transmission system of claim 1, wherein a second process comprises a scavenger hunt to receive at least one selected from the group of points and offers.

3. The data transmission system of claim 2, wherein the scavenger hunt comprises visiting at least one selected from the group of sites, monuments, destinations, and famous places during the scavenger hunt.

4. The data transmission system of claim 2, wherein the at least one selected from the group of points and offers are linked to one or more user accounts.

5. The data transmission system of claim 2, wherein the offers are predictively suggested based on comparison with one or more parameters.

6. The data transmission system of claim 2, wherein the points and offers are apportioned via one or more user preferences.

7. The data transmission system of claim 1, wherein the at least one process comprises repeating at least one selected from the group of the audible message and the visual message at a predetermined interval.

8. The data transmission system of claim 1, wherein the audible message comprises a funny message.

9. The data transmission system of claim 1, wherein a third process of the one or more processes comprises receiving one or more tickets for redemption, the one or more tickets including at least one selected from the group of concert tickets, sports tickets, conference tickets, lottery tickets, event tickets, and restaurant tickets.

10. The data transmission system of claim 1, wherein the contactless card is configured to update records stored therein upon performance of the one or more processes.

11. A method of transmitting data using a contactless card and an application including instructions for execution on a receiving device having a processor and memory, the contactless card including a processor and memory, wherein the application is in data communication with the contactless card, the method comprising the steps of:

transmitting, after one or more entries into a communication field, one or more user credentials for authentication;

performing, by the application and after authentication of the one or more user credentials, one or more processes, wherein at least one process is selected from the group of an audible message and a visual message for a randomly chosen time period, wherein the selection is dependent after the one or more entries into the communication field, wherein the at least one selected from the group of the audible message and the visual message are selected based on the one or more entries into the communication field and based on one or more gestures from the contactless card such that each of the one or more gestures is indicative of a different message, the one or more gestures including at least one selected from the group of tap, wave, gesture, and swipe, wherein the at least one selected from the group of the audible message and the visual message are played by the application.

12. The method of claim 11, wherein a second process of the one or more processes comprises a scavenger hunt to receive at least one selected from the group of reward points and offers.

13. The method of claim 12, wherein the scavenger hunt comprises visiting at least one selected from the group of sites, monuments, destinations, and famous places during the scavenger hunt.

14. The method of claim 12, wherein the at least one selected from the group of reward points and offers are linked to one or more user accounts.

15. The method of claim 12, wherein the offers are predictively suggested based on comparison with one or more parameters.

16. The method of claim 11, wherein the at least one process comprises repeating at least one selected from the group of the audible message and the visual message at a predetermined interval.

17. The method of claim 11, wherein the at least one selected from the group of the audible message and the visual message comprises English or non-English content.

18. The method of claim 11, wherein a third process of the one or more processes comprises receiving one or more tickets, the one or more tickets including at least one selected from the group of concert tickets, sports tickets, conference tickets, lottery tickets, event tickets, and restaurant tickets.

19. The method of claim 18, wherein the one or more tickets are redeemable for a cash reward.

20. The method of claim 11, further comprising updating, by the contactless card, records stored therein upon performing the one or more processes.