Systems and methods for email-based card activation

• US 10,771,254 B2
• Filed: 08/21/2019
• Issued: 09/08/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey, Heng, Melissa, Lutz, Wayne, Ashfield, James, Hart, Colin, Ilincic, Rajko
• Primary Examiner(s): Zee, Edward
• Application Number:
  US16/546,792
• Publication Number:
  US 20200106614A1
• Time in Patent Office: 384 Days
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

Example embodiments of systems and methods for data transmission between a contactless card, a client device, and one or more servers are provided. The contactless card may include one or more processors and memory, which may include one or more applets. The client device may include one or more processors and memory. The client device may be in data communication with the contactless card. One or more servers may be in data communication with the client device. A first set of information may be transmitted from the contactless card to the client device. The first set of information may include one or more links to activate the contactless card via a designated email program. Upon validation of the first set of information by the one or more servers, the contactless card may be activated.

Claims

1. A card activation system comprising:

a contactless card including one or more processors and memory, wherein the memory contains one or more applets;

a client application comprising instructions for execution on a client device including one or more processors and memory; and

one or more servers,

wherein the one or more applets of the contactless card are configured to transmit a first set of information to the client application after entry of the contactless card into a communication field, the first set of information comprising one or more links configured to activate the contactless card via an email program,

wherein the client application is configured to receive the first set of information from the one or more applets of the contactless card and transmit to the one or more servers for validation, wherein, upon the validation of the first set of information by the one or more servers, the contactless card is activated,.

wherein the first set of information comprises a first link including one or more information elements to activate the contactless card,

wherein a first information element comprises an email address, a second information element comprises an email field, and a third information element comprises an encrypted payload, and

wherein the email address is retrieved from a pre-configured list for authentication of the contactless card.

2. The card activation system of claim 1, wherein the email address is dynamically generated.

3. The card activation system of claim 1, wherein the first set of information comprises a uniform resource locator that is dynamically generated to activate the contactless card.

4. The card activation system of claim 1, wherein the third information element is decrypted with one or more keys via the one or more servers.

5. The card activation system of claim 1, wherein the first set of information comprises a card verification value to activate the contactless card.

6. The card activation system of claim 2, wherein the contactless card is configured to retrieve a list including a plurality of email addresses.

7. The card activation system of claim 6, wherein an email address is selected from the list based on a purpose of authentication.

8. The card activation system of claim 1, wherein the contactless card is configured to stop dynamic generation of the first set of information after the client application receives notification from the one or more servers that the contactless card is activated.

9. A method of activating a contactless card, the method comprising the steps of:

entering, by the contactless card, into a communication field;

transmitting, by one or more applets contained in a memory of the contactless card, a first set of information to a client application via the communication field, the first set of information comprising one or more links configured to activate the contactless card via a designated email program;

transmitting, by the client application, the first set of information to one or more servers;

performing, by the one or more servers, one or more cryptographic operations to validate the first set of information; and

activating, by the one or more servers, the contactless card upon validation of the first set of information,

wherein the first set of information comprises a first link including one or more information elements to activate the contactless card,

wherein a first information element comprises an email address, a second information element comprises an email field, and a third information element comprises an encrypted payload, and

wherein the email address is retrieved from a pre-configured list for authentication of the contactless card.

10. The method of claim 9, wherein the first set of information comprises a uniform resource locator that is dynamically generated to activate the contactless card.

11. The method of claim 9, wherein the third information element is decrypted with one or more keys via the one or more servers.

12. The method of claim 9, wherein the first set of information comprises a card verification value to activate the contactless card.

13. The method of claim 9, wherein the contactless card is configured to retrieve the pre-configured list including a plurality of email addresses and an email address is selected from the pre-configured list based on a purpose of authentication.

14. The method of claim 9, wherein the contactless card is configured to stop dynamic generation of the first set of information after the client application receives notification from the one or more servers that the contactless card is activated.

15. A contactless card comprising:

a processor;

a memory, wherein the memory contains one or more applets and a first set of information, wherein, after entry of the contactless card into a communication field, the one or more applets are configured to transmit the first set of information,

wherein the first set of information comprises one or more links configured to activate the contactless card via an email program, the one or more links including a first information element a second information element, and a third information element,

wherein the first information element comprises an email address, the second information element comprises an email field encrypted payload, and the third information element comprises an encrypted payload, and

wherein the email address is retrieved from a pre-configured list for authentication of the contactless card.