Tap card to securely generate card data to copy to clipboard

• US 11,120,453 B2
• Filed: 02/01/2019
• Issued: 09/14/2021
• Est. Priority Date: 02/01/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Rule, Jeffrey, Moreton, Paul, Lutz, Wayne, Ji, Jason
• Primary Examiner(s): Ravetti, Dante
• Application Number:
  US16/265,937
• Publication Number:
  US 20200250672A1
• Time in Patent Office: 956 Days
• Field of Search: 705 16, 705 21, 705 59, 705 71, 380 44, 380262, 380278, 380279
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: G06F 9/543 User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0833 Card having specific functional components
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A web browser may output a form comprising a payment field. A URL may be received from a communications interface of a contactless card, the URL comprising encrypted data generated by the contactless card based on a private key stored in a memory of the contactless card. An application may transmit the encrypted data to an authentication server, which may decrypt the encrypted data based on the private key. The application may receive, from a virtual account number server, a virtual account number. The application may receive an expiration date and a CVV. The application may copy the virtual account number to a clipboard of an OS. The OS may paste the virtual account number from the clipboard to the payment field of the form in the web browser. The OS may output a notification comprising the expiration date and the CVV associated with the virtual account number.

Claims

1. A method, comprising:

receiving, by an application executing on a processor circuit of a computing device from a communications interface of a contactless card, a uniform resource locator (URL) for an authentication server, the URL comprising a cryptogram;

accessing, by the application executing on the processor circuit, the URL for the authentication server by a first browser tab of a web browser;

receiving, by the application executing on the processor circuit from a virtual account number server, a virtual account number, an expiration date, and a card verification value (CVV);

copying, by the application executing on the processor circuit, the virtual account number to a clipboard executing on the processor circuit; and

pasting, by an operating system (OS) executing on the processor circuit, the virtual account number from the clipboard to a payment field of a form in a second browser tab of the web browser.

2. The method of claim 1, further comprising:

receiving the virtual account number, the expiration date, the CVV, and a billing address from the virtual account number server via one or more of;

(i) the first browser tab, (ii) a push notification, and (iii) a text message.

3. The method of claim 2, further comprising:

receiving, by the application executing on the processor circuit, input specifying to copy the expiration date to the clipboard;

copying, by the application executing on the processor circuit, the expiration date to the clipboard; and

pasting, by the OS executing on the processor circuit, the expiration date to an expiration date field of the form in the second browser tab of the web browser.

4. The method of claim 2, further comprising:

receiving, by the application executing on the processor circuit, input specifying to copy the CVV to the clipboard;

copying, by the application executing on the processor circuit, the CVV to the clipboard responsive to the received input;

pasting, by the OS executing on the processor circuit, the CVV to a CVV field of the form in the second browser tab of the web browser;

receiving, by the application executing on the processor circuit, input selecting a first link in the notification, the first link specifying to copy the billing address to the clipboard;

copying, by the application executing on the processor circuit, the billing address to the clipboard responsive to the input selecting the first link; and

pasting, by the OS executing on the processor circuit, the billing address to a billing address field of the form in the web browser.

5. The method of claim 1, further comprising:

outputting, by the application executing on the processor circuit, a notification

comprising the expiration date, the CVV, and a billing address.

6. The method of claim 1,

further comprising:

outputting, by the application executing on the processor circuit, a notification specifying to close the first browser tab.

7. A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by processor circuit to cause the processor circuit to perform the steps of:

outputting, by a web browser executing on the processor circuit, a form comprising a payment field;

receiving, by an application executing on the processor circuit from a contactless card, a uniform resource locator (URL) comprising an identifier of the contactless card;

authenticating, by the application, an account associated with the contactless card;

transmitting, by the application, the identifier of the account to an authentication server;

receiving, by the application executing on the processor circuit from a virtual account number server, a virtual account number, an expiration date, and a card verification value (CVV);

copying, by the application executing on the processor circuit, the virtual account number to a clipboard executing on the processor circuit;

pasting, by an operating systems (OS) executing on the processor circuit, the virtual account number from the clipboard to the payment field of the form in the web browser; and

outputting, by the application executing on the processor circuit, a notification comprising the expiration date and the CVV.

8. The non-transitory computer-readable storage medium of claim 7, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

opening, by the processor circuit, the application responsive to receiving the URL, wherein the URL comprises a universal link URL;

receiving, by the application executing on the processor circuit, an account billing address;

receiving, by the application executing on the processor circuit, input specifying to return to the web browser; and

outputting, by the processor circuit based on the received input, the web browser on a display of a device comprising the processor circuit.

9. The non-transitory computer-readable storage medium of claim 7, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

starting a timer by the application executing on the processor circuit based on the receipt of the virtual account number;

determining, by the application executing on the processor circuit, that the timer exceeds a threshold; and

based on the determination, by the application executing on the processor circuit, that the timer exceeds a threshold, generating and outputting the notification by the application executing on the processor circuit.

10. The non-transitory computer-readable storage medium of claim 7, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the step of:

extracting, by the application executing on the processor circuit, the identifier of the contactless card from the URL, the identifier of the contactless card comprising a portion of an accountnumber of the account.

11. The non-transitory computer-readable storage medium of claim 7, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

receiving, by the application executing on the processor circuit, input selecting a first link in the notification, the first link specifying to copy the expiration date to the clipboard;

copying, by the application executing on the processor circuit, the expiration date to the clipboard responsive to the input selecting the first link in the notification; and

pasting, by the OS executing on the processor circuit, the expiration date to an expiration date field of the form in the web browser.

12. The non-transitory computer-readable storage medium of claim 7, further comprising computer-readable program code executable by the processor circuit to cause the processor circuit to perform the steps of:

receiving, by the application executing on the processor circuit, input selecting a first link in the notification, the first link specifying to copy the CVV to the clipboard;

copying, by the application executing on the processor circuit, the CVV to the clipboard responsive to the input selecting the first link; and

pasting, by the OS executing on the processor circuit, the CVV to a CVV field of the form in the web browser.

13. A system, comprising:

a processor; and

a non-transitory memory storing instructions which when executed by the processor cause the processor to perform the steps of;

outputting, by a web browser executing on the processor, a form comprising a payment field;

receiving, by an application executing on the processor and from a contactless card, a uniform resource locator (URL) comprising a cryptogram;

transmitting, by the application executing on the processor, the cryptogram to a server;

receiving, by the application executing on the processor from the server, a virtual account number,

an expiration date, and a card verification value (CVV);

copying, by the application executing on the processor, the virtual account number to a clipboard executing on the processor;

pasting, by an operating system (OS) executing on the processor, the virtual account number from the clipboard to the payment field of the form in the web browser; and

outputting, by the application executing on the processor, a notification comprising the expiration date and the CVV.

14. The system of claim 13, the memory storing instructions which when executed by the processor cause the processor to perform the steps of:

opening, by the processor, the application executing on the processor responsive to receiving the URL, wherein the URL comprises a universal link URL;

receiving, by the application executing on the processor, an account billing address from the server;

receiving, by the application executing on the processor, input specifying to return to the web browser; and

outputting, based on the received input, the web browser on a display of a device comprising the processor.

15. The system of claim 13, the memory storing instructions which when executed by the processor cause the processor to perform the steps of:

receiving, by the application executing on the processor, input selecting a first link in the notification, the first link specifying to copy the expiration date to the clipboard;

copying, by the application executing on the processor, the expiration date to the clipboard responsive to the input selecting the first link in the notification; and

pasting, by the OS executing on the processor, the expiration date to an expiration date field of the form in the web browser.

16. The system of claim 15, the memory storing instructions which when executed by the processor cause the processor to perform the steps of:

receiving, by the application executing on the processor, input selecting a second link in the notification, the second link specifying to copy the CVV to the clipboard;

copying, by the application executing on the processor, the CVV to the clipboard responsive to the input selecting the second link in the notification;

pasting, by the OS executing on the processor, the CVV to a CVV field of the form in the web browser;

receiving, by the application executing on the processor, input selecting a third link in the notification, the third link specifying to copy a billing address to the clipboard;

copying, by the application executing on the processor, the billing address to the clipboard responsive to the input selecting the third link in the notification; and

pasting, by the OS executing on the processor, the billing address to a billing address field of the form in the web browser.

17. The system of claim 16, the memory storing instructions which when executed by the processor cause the processor to perform the steps of:

starting a timer by the application executing on the processor based on the receipt of the virtual account number;

determining, by the application executing on the processor, that the timer exceeds a threshold; and

based on the determination, by the application executing on the processor, that the timer exceeds a threshold, generating and outputting the notification by the application executing on the processor.

18. The system of claim 13, the memory storing instructions which when executed by the processor cause the processor to perform the steps of:

extracting, by the application executing on the processor, the cryptogram from the URL.

19. The system of claim 13, the memory storing instructions which when executed by the processor cause the processor to perform the step of:

authenticating, by the application executing on the processor, access to an account on one or more of;

(i) a username and password, or (ii) biometric credentials.