Tap to autofill card data

• US 11,037,136 B2
• Filed: 01/24/2019
• Issued: 06/15/2021
• Est. Priority Date: 01/24/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey, Lutz, Wayne, Moreton, Paul
• Primary Examiner(s): Nilforoush, Mohammad A.
• Assistant Examiner(s): Raza, Zehra
• Application Number:
  US16/256,983
• Publication Number:
  US 20200242588A1
• Time in Patent Office: 873 Days
• CPC Class Codes: G06F 40/174 Form filling; Merging
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3567 Software being in the reader
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/40975 using encryption therefor

Abstract

Various embodiments are generally directed to autofilling card data from a contactless card to a form of a computing device. An application may determine that a payment field of a form has received focus. The application may then receive encrypted data from a communications interface of a contactless card associated with an account. The application may then receive, from a server, verification of the encrypted data. The application may then receive, from the server, an encrypted account number associated with the account, and decrypt the encrypted account number to yield the account number. An autofill service of an operating system (OS) executing on the processor circuit, may then autofill the account number to the payment field of the form.

Claims

1. An apparatus, comprising:

a processor circuit; and

a memory storing an application and instructions which when executed by the processor circuit, cause the processor circuit to perform the steps of;

determining, via the application, that a form includes a payment field;

receiving, via the application, encrypted data from a contactless card associated with an account;

transmitting, via the application, the encrypted data to a server;

receiving, via the application from the server, a decryption result;

determining, via the application based on the decryption result, that the server decrypted the encrypted data;

receiving, via the application from the server, an encrypted account number;

decrypting, via the application based on the determination that the server decrypted the encrypted data, the encrypted account number;

providing, via the application, the decrypted account number to an application programming interface (API) of an autofill service; and

autofilling, via the autofill service, the decrypted account number to the payment field of the form.

2. The apparatus of claim 1, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to perform the steps of:

receiving, via the application from the contactless card, a second encrypted data comprising an expiration date, a billing address, and a card verification value (CVV) associated with the account;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date, the encrypted billing address, and the encrypted CVV;

autofilling, via the autofill service, the decrypted expiration date to an expiration date field of the form;

autofilling, via the autofill service, the decrypted billing address to a billing address field of the form; and

autofilling, via the autofill service, the decrypted CVV to a CVV field of the form.

3. The apparatus of claim 2, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to perform the steps of:

providing, via the application, the decrypted expiration date, the decrypted billing address, and the decrypted CVV to the API of the autofill service.

4. The apparatus of claim 3, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to perform the steps of:

installing an instance of the autofill service in an operating system (OS).

5. The apparatus of claim 1, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to perform the steps of:

receiving, via the application from the contactless card, a second encrypted data comprising an encrypted expiration date;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date;

providing, via the application, the decrypted expiration date to the autofill service;

storing, via the autofill service, the decrypted expiration date;

determining, via the application, that an amount of time since a time the decrypted expiration date was stored by the autofill service exceeds a threshold amount of time; and

deleting, via the application, the decrypted expiration date from the autofill service based on the determination that the amount of time exceeds the threshold amount of time.

6. The apparatus of claim 1, wherein the encrypted data is received via at least one of near field communication (NFC), Bluetooth, and Wi-Fi, the memory storing instructions which when executed by the processor circuit, cause the processor circuit to perform the step of:

determining, via the application, that the payment field of the form has received focus.

7. A method, comprising:

determining, by an application executing on a processor circuit, that a payment field of a form has received focus;

receiving, by the application, encrypted data from a communications interface of a contactless card associated with an account

transmitting, via the application, the encrypted data to a server;

receiving, via the application from the server, a decryption result;

determining, via the application based on the decryption result, that the server decrypted the encrypted data;

receiving, via the application from the contactless card, an encrypted account number;

decrypting, via the application based on the determination that the server decrypted the encrypted data, the encrypted account number;

providing the decrypted account number to an application programming interface (API) of an autofill service executing on the processor circuit; and

autofilling, by the autofill service, the decrypted account number to the payment field of the form.

8. The method of claim 7, wherein the communications interface of the contactless card is configured to support at least one of near field communication (NFC), Bluetooth, and Wi-Fi, the method further comprising:

receiving, via the application from the contactless card, a second encrypted data comprising an expiration date, a billing address, and a card verification value (CVV) associated with the account;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date, the encrypted billing address, and the encrypted CVV;

autofilling, via the autofill service, the decrypted expiration date to an expiration date field of the form;

autofilling, via the autofill service, the decrypted billing address to a billing address field of the form; and

autofilling, via the autofill service, the decrypted CVV to a CVV field of the form.

9. The method of claim 8, the method further comprising:

providing, via the application, the decrypted expiration date, the decrypted billing address, and the decrypted CVV to the API of the autofill service.

10. The method of claim 7, further comprising:

receiving, via the application from the contactless card, a second encrypted data comprising an encrypted expiration date;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date;

providing, via the application, the decrypted expiration date to the autofill service;

storing, via the autofill service, the decrypted expiration date;

determining, via the application, that an amount of time since a time the decrypted expiration date was stored by the autofill service exceeds a threshold amount of time; and

deleting, via the application, the decrypted expiration date from the autofill service based on the determination that the amount of time exceeds the threshold amount of time.

11. A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code when executed by a processor circuit causes the processor circuit to perform the steps of:

determining, via an application, that a payment field of a form has received focus;

receiving, via the application, encrypted data from a contactless card associated with an account;

transmitting, via the application, the encrypted data to a server;

receiving, via the application from the server, a decryption result;

determining, via the application based on the decryption result, that the server decrypted the encrypted data;

receiving, via the application from the server, an encrypted account number;

decrypting, via the application based on the determination that the server decrypted the encrypted data, the encrypted account number;

providing the decrypted account number to an application programming interface (API) of an autofill service; and

autofilling, via the autofill service, the decrypted account number to the payment field of the form.

12. The non-transitory computer-readable storage medium of claim 11, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

receiving, via the application from the contactless card, a second encrypted data comprising an expiration date, a billing address, and a card verification value (CVV) associated with the account;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date, the encrypted billing address, and the encrypted CVV;

autofilling, via the autofill service, the decrypted expiration date to an expiration date field of the form;

autofilling, via the autofill service, the decrypted billing address to a billing address field of the form; and

autofilling, via the autofill service, the decrypted CVV to a CVV field of the form.

13. The non-transitory computer-readable storage medium of claim 12, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the step of:

providing, via the application, the decrypted expiration date, the decrypted billing address, and the decrypted CVV to the API of the autofill service.

14. The non-transitory computer-readable storage medium of claim 13, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

installing an instance of the autofill service in an operating system (OS).

15. The non-transitory computer-readable storage medium of claim 11, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

receiving, via the application from the contactless card, a second encrypted data comprising an encrypted expiration date;

transmitting, via the application, the second encrypted data to the server;

receiving, via the application from the server, a second decryption result;

determining, via the application based on the decryption result, that the server decrypted the second encrypted data;

decrypting, via the application based on the determination that the server decrypted the second encrypted data, the encrypted expiration date;

providing, via the application, the decrypted expiration date to the autofill service; and

determining, via the application, that a purchase has been made using the account number; and

deleting, via the application, the account number and the expiration date from the autofill service based on the determination that the purchase has been made using the account number.

16. The non-transitory computer-readable storage medium of claim 11, wherein the encrypted data is received via at least one of near field communication (NFC), Bluetooth, and Wi-Fi.