Systems and methods for cryptographic authentication of contactless cards

• US 10,778,437 B2
• Filed: 10/18/2019
• Issued: 09/15/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Osborn, Kevin, Rule, Jeffrey, Moreton, Paul, Duane, William, Hart, Colin, Newman, Kaitlin, Mossler, Lara, Herrington, Daniel, Chigurupati, Srinivasa, Prince, Ian, Lutz, Wayne
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/657,813
• Publication Number:
  US 20200106619A1
• Time in Patent Office: 333 Days
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06K 19/07309 Means for preventing undesired reading or writing from or onto record carriers
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/36 : using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/3674 : involving authentication
• CPC Class Codes: G06Q 20/382 : insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 : combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3825 : Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 : involving key management
• CPC Class Codes: G06Q 20/40 : Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 : Transaction verification
• CPC Class Codes: G06Q 20/4014 : Identity check for transactions
• CPC Class Codes: G06Q 20/409 : Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 : using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 : using encryption therefor
• CPC Class Codes: G07F 7/0893 : the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/122 : Online card verification
• CPC Class Codes: G07F 9/001 : Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: H04B 5/24 : Inductive coupling
• CPC Class Codes: H04B 5/43 : Antennas
• CPC Class Codes: H04B 5/77 : for interrogation
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 : Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/068 : using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 : using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/1441 : Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 9/002 : Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/0625 : with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0631 : Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0637 : Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0643 : Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0822 : using key encryption key
• CPC Class Codes: H04L 9/0825 : using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0863 : involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0866 : involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0897 : involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3228 : One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 : involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 : involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 : using challenge-response
• CPC Class Codes: H04W 12/041 : Key generation or derivation
• CPC Class Codes: H04W 12/108 : Source integrity
• CPC Class Codes: H04W 12/47 : using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

Claims

1. An authentication server comprising:

a processor and memory, the memory including a master key, wherein the processor is configured to;

receive a transmission comprising a cryptographic result and encrypted transmission data, wherein;

the cryptographic result includes a counter value,

the cryptographic result is generated using one or more cryptographic algorithms and a diversified key,

the diversified key is generated using a diversified master key, one or more cryptographic algorithms, and the counter value, and

the encrypted transmission data is encrypted using the one or more cryptographic algorithms and the diversified key;

generate an authentication diversified key based on the master key and a unique identifier;

generate a session key based on the authentication diversified key and the cryptographic result;

decrypt the encrypted transmission data and validate the cryptographic result using the one or more cryptographic algorithms and the session key; and

update the counter value for each transmission received.

2. The authentication server of claim 1, wherein the counter value comprises a one-time passcode.

3. The authentication server of claim 1, wherein the one or more cryptographic algorithms include a cryptographic MAC function.

4. The authentication server of claim 1, wherein a unique diversified session key is generated for each transmission.

5. The authentication server of claim 4, wherein the unique diversified session key is generated using a portion of the counter value.

6. The authentication server of claim 4, wherein the unique diversified session key is generated utilizing a different counter value.

7. The authentication server of claim 1, wherein the master key is limited to a predetermined number of uses.

8. The authentication server of claim 1, wherein the master key is limited to use during a predetermined time period.

9. The authentication server of claim 1, wherein the authentication server is configured to receive the transmission from a transmitting device via one or more intermediary devices.

10. The authentication server of claim 9, wherein the transmitting device comprises a contactless card and one of the one or more intermediary devices comprises a smartphone.

11. The authentication server of claim 1, wherein the encrypted transmission data comprises activation data for a payment card.

12. A method for transmitting data by a transmitting device having a processor and a memory, the memory containing a master key, an identification number, and a counter, the method comprising:

generating a device key using the master key and the identification number;

generating a first session key using the device key and a first portion of the counter and a second session key using the device key and a second portion of the counter, wherein the first portion of the counter is different than the second portion of the counter;

generating a cryptographic result including the counter using one or more cryptographic algorithms and the device key;

generating a cryptogram using the first session key, the cryptogram including the cryptographic result and the identification number;

encrypting the cryptogram using the second session key; and

transmitting the encrypted cryptogram and the cryptographic result.

13. The method of claim 12, wherein the counter value comprises a one-time passcode.

14. The method of claim 12, wherein a unique diversified session key is generated for each transmission by the transmitting device.

15. The method of claim 14, wherein the unique diversified session key is generated using a portion of the counter value.

16. The method of claim 15, wherein the unique diversified session key is generated utilizing a different counter value.

17. The method of claim 12, wherein the master key is limited to a predetermined number of uses.

18. The method of claim 12, wherein the master key is limited to use during a predetermined time period.

19. The method of claim 12, wherein the transmitting device comprises a contactless card and the cryptogram comprises activation data for the contactless card.

20. A computer readable non-transitory medium comprising instructions for execution on a processor and comprising the steps of:

receiving a transmission comprising a cryptographic result and encrypted transmission data, wherein;

the cryptographic result includes a counter value,

the cryptographic result is generated using one or more cryptographic algorithms and a diversified key,

the diversified key is generated using a diversified master key, one or more cryptographic algorithms, and the counter value, and

the encrypted transmission data is encrypted using the one or more cryptographic algorithms and the diversified key;

generating an authentication diversified key based on a master key and a unique identifier;

generating a session key based on the authentication diversified key and the cryptographic result;

decrypting the encrypted transmission data and validate the cryptographic result using the one or more cryptographic algorithms and the session key; and

updating the counter value for each transmission received.

21. The computer readable non-transitory medium of claim 20, wherein the counter value comprises a one-time passcode.

22. The computer readable non-transitory medium of claim 20, wherein the one or more cryptographic algorithms include a cryptographic MAC function.

23. The computer readable non-transitory medium of claim 20, wherein a unique diversified session key is generated for each transmission.

24. The computer readable non-transitory medium of claim 23, wherein the unique diversified session key is generated using a portion of the counter value.

25. The computer readable non-transitory medium of claim 23, wherein the unique diversified session key is generated using a different counter value.

26. The computer readable non-transitory medium of claim 20, wherein the master key is limited to a predetermined number of uses.

27. The computer readable non-transitory medium of claim 20, wherein the master key is limited to use during a predetermined time period.

28. The computer readable non-transitory medium of claim 20, wherein the transmission is received from a transmitting device via one or more intermediary devices.

29. The computer readable non-transitory medium of claim 28, wherein the transmitting device comprises a contactless card and one of the one or more intermediary devices comprises a smartphone.

30. The computer readable non-transitory medium of claim 29, wherein the cryptographic result comprises activation data for the contactless card.