Tap to copy data to clipboard via NFC

• US 10,783,736 B1
• Filed: 07/25/2019
• Issued: 09/22/2020
• Est. Priority Date: 03/20/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Herrington, Daniel, Rule, Jeffrey, Hart, Colin, Ji, Jason
• Primary Examiner(s): Walsh, Daniel I
• Application Number:
  US16/522,380
• Publication Number:
  US 20200302727A1
• Time in Patent Office: 425 Days
• CPC Class Codes: G06F 9/543 User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE]
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G07F 7/0813 Specific details related to card security
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Various embodiments are generally directed to copying data to a clipboard of a mobile device from a contactless card using NFC. A mobile device may issue a request to read data from the contactless card. The contactless card may generate encrypted data in response to the request. The mobile device may receive the encrypted data via NFC and transmit the encrypted data to a server for verification. The server may verify the encrypted data and transmit an indication of an account number for the contactless card to the mobile device. The mobile device may then copy the account number to a clipboard of the mobile device.

Claims

1. A system, comprising:

a mobile device comprising a processor and a memory;

contactless card comprising a processor and a memory; and

a server communicatively coupled to the mobile device;

wherein the contactless card processor encrypts data associated with an account in the memory of the contactless card, wherein the contactless card generates the encrypted data using a diversified key obtained by providing a master key and a counter value stored in the memory of the contactless card as input to a cryptographic algorithm, and wherein the contactless card sends the encrypted data to the mobile device responsive to a first tap of the contactless card to the mobile device;

wherein the server receives the counter value and encrypted data sent from the mobile device, decrypts the encrypted data using the diversified key, and sends an indication to the mobile device that the encrypted data was decrypted;

wherein the server encrypts an account number associated with the account and sends the encrypted account number to the mobile device after the decrypting;

wherein an application executing on the mobile device decrypts the encrypted account number to yield the account number;

wherein the contactless card sends an expiration date associated with the account number to the mobile device responsive to a second tap of the contactless card to the mobile device;

wherein the contactless card sends a card verification value (CVV) associated with the account number to the mobile device responsive to a third tap of the contactless card to the mobile device, wherein a tap counter counts a number of taps of the card to the mobile device, and wherein the encrypted data, expiration date, and CVV are sent by the contactless card based on the number of taps counted by the tap counter;

wherein the application copies the decrypted account number, expiration date, and CVV as information to a clipboard on an operating system (OS) executing on the mobile device; and

wherein the mobile device removes the clipboard information after the mobile device makes a purchase using the clipboard information or after a time threshold expires.

2. The system of claim 1, wherein the mobile device:

identifies a form comprising a plurality of fields including a first field, a second field, and a third field; and

determines that the first field is associated with the account number, the second field is associated with the expiration date, and the third field is associated with the CVV.

3. The system of claim 2, wherein the mobile device pastes, from the clipboard:

(i) the account number to the first field, (ii) the expiration date to the second field, and (iii) the CVV to the third field.

4. The system of claim 1, wherein the mobile device removes the clipboard information by erasing all data stored in the clipboard.

5. The system of claim 1, wherein the mobile device removes the clipboard information by copying other data to the clipboard.

6. The system of claim 1, wherein the account number comprises a virtual account number.

7. The system of claim 1, wherein the data associated with the account in the memory of the contactless card comprises at least a customer identification value.

8. A method, comprising:

encrypting, by a processor of a contactless card, data associated with an account in a memory of the contactless card, wherein the contactless card encrypts the data using a diversified key obtained by providing a master key and a counter value stored in the memory of the contactless card as input to a cryptographic algorithm, and wherein the contactless card sends the encrypted data to a mobile device comprising a processor and a memory responsive to a first tap of the contactless card to the mobile device;

receiving, by a server, the counter value and encrypted data from the mobile device;

decrypting, by the server, the encrypted data using the diversified key;

transmitting, by the server, an indication to the mobile device that the encrypted data was decrypted;

encrypting, by the server, an account number associated with the account;

sending, by the server, the encrypted account number to the mobile device after the decrypting;

decrypting, by an application executing on the mobile device, the encrypted account number to yield the account number;

sending, by the contactless card, an expiration date associated with the account number to the mobile device responsive to a second tap of the contactless card to the mobile device;

sending, by the contactless card, a card verification value ((NV) associated with the account number to the mobile device responsive to a third tap of the contactless card to the mobile device, wherein a tap counter counts a number of taps of the card to the mobile device, and wherein the encrypted data, expiration date, and CVV are sent by the contactless card based on the number of taps counted by the tap counter;

copying, by the application, the decrypted account number, expiration date, and CVV as information to a clipboard on an operating system (OS) executing on the mobile device; and

removing, by the mobile device, the clipboard information after the mobile device makes a purchase using the clipboard information or after a time threshold expires.

9. The method of claim 8, further comprising:

identifying, by the mobile device, a form comprising a plurality of fields including a first field, a second field, and a third field; and

determining, by the mobile device, that the first field is associated with the account number, the second field is associated with the expiration date, and the third field is associated with the CVV.

10. The method of claim 9, further comprising:

pasting, by the mobile device from the clipboard;

(i) the account number to the first field, (ii) the expiration date to the second field, and (iii) the CVV to the third field.

11. The method of claim 8, wherein the mobile device removes the clipboard information by erasing all data stored in the clipboard.

12. The method of claim 8, wherein the mobile device removes the clipboard information by copying other data to the clipboard.

13. The method of claim 8, wherein the account number comprises a virtual account number.

14. The method of claim 8, wherein the data associated with the account in the memory of the contactless card comprises at least a customer identification value.

15. A non-transitory computer-readable storage medium storing computer-readable instructions executable by a system to cause the system to perform the steps of:

encrypting, by a processor of a contactless card of the system, data associated with an account in a memory of the contactless card, wherein the contactless card encrypts the data using a diversified key obtained by providing a master key and a counter value stored in the memory of the contactless card as input to a cryptographic algorithm, and wherein the contactless card sends the encrypted data to a mobile device of the system responsive to a first tap of the contactless card to the mobile device, the mobile device comprising a processor and a memory;

receiving, by a server of the system, the counter value and encrypted data from the mobile device;

decrypting, by the server, the encrypted data using the diversified key;

transmitting, by the server, an indication to the mobile device that the encrypted data was decrypted;

encrypting, by the server, an account number associated with the account;

sending, by the server, the encrypted account number to the mobile device after the decrypting;

decrypting, by an application executing on the mobile device, the encrypted account number to yield the account number;

sending, by the contactless card, an expiration date associated with the account number to the mobile device responsive to a second tap of the contactless card to the mobile device;

sending, by the contactless card, a card verification value (CVV) associated with the account number to the mobile device responsive to a third tap of the contactless card to the mobile device, wherein a tap counter counts a number of taps of the card to the mobile device, and wherein the encrypted data, expiration date, and CVV are sent by the contactless card based on the number of taps counted by the tap counter;

copying, by the application, the decrypted account number, expiration date, and CVV as information to a clipboard on an operating system (OS) executing on the mobile device; and

removing, by the mobile device, the clipboard information after the mobile device makes a purchase using the clipboard information or after a time threshold expires.

16. The computer-readable storage medium of claim 15, storing computer-readable instructions executable by the system to cause the system to perform the steps of:

identifying, by the mobile device, a form comprising a plurality of fields including a first field, a second field, and a third field; and

determining, by the mobile device, that the first field is associated with the account number, the second field is associated with the expiration date, and the third field is associated with the CVV.

17. The computer-readable storage medium of claim 16, storing computer-readable instructions executable by the system to cause the system to perform the step of:

pasting, by the mobile device from the clipboard;

(i) the account number to the first field, (ii) the expiration date to the second field, and (iii) the CVV to the third field.

18. The computer-readable storage medium of claim 15, Wherein the mobile device removes the clipboard information by erasing all data stored in the clipboard.

19. The computer-readable storage medium of claim 15, wherein the mobile device removes the clipboard information by copying other data to the clipboard.

20. The computer-readable storage medium of claim 15, wherein the account number comprises a virtual account number, wherein the data associated with the account in the memory of the contactless card comprises at least a customer identification value.