Systems and methods for performing transactions with contactless cards

• US 11,129,019 B2
• Filed: 10/21/2019
• Issued: 09/21/2021
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Newman, Kaitlin, Haynes, Kimberly, Crank, Charles Nathan, Cogswell, Andrew, Hart, Colin, Rule, Jeffrey, Mossler, Lara, Gulati, Latika, Benkreira, Abdelkader, Cunningham, Sarah Jane, Bermudez, Sophie, Mossoba, Michael, Lutz, Wayne
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US16/659,088
• Publication Number:
  US 20200260272A1
• Time in Patent Office: 701 Days
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 12/60 Context-dependent security

Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

Claims

1. An authentication system, comprising:

a contactless card having a processor and a memory, the memory containing a card key and transmission data,

wherein the contactless card is configured to;

encrypt the transmission data using one or more cryptographic algorithms and the card key to yield encrypted transmission data,

transmit the encrypted transmission data for decryption,

perform, after the decryption, one or more actions including retrieval, from the memory, of user preference information for an account associated with a user, and

transmit a request for venue information based on the user preference information.

2. The authentication system of claim 1, wherein the user preference information further comprises a transaction history associated with one or more user affiliations.

3. The authentication system of claim 1, wherein the one or more actions includes converting a purchase amount from a first type of currency to a second type of currency.

4. The authentication system of claim 1, wherein the user preference information further includes information that is associated with one or more lounges.

5. The authentication system of claim 1, wherein at least one of the one or more actions includes translating a first language to a second language.

6. The authentication system of claim 5, wherein the first language includes at least one selected from the group of English, French, Italian, German, and Spanish.

7. The authentication system of claim 1, wherein the user preference information further comprises a preference for an automated teller machine (ATM) that is located in proximity to the user.

8. The authentication system of claim 1, wherein the venue information is associated with at least one venue selected from the group of an airport lounge, a restaurant, a gas station, and a shop.

9. The authentication system of claim 1, wherein the venue information comprises directions to a venue.

10. The authentication system of claim 9, wherein the venue information further comprises an estimated time of arrival at the venue.

11. The authentication system of claim 1, wherein the user preference information includes at least one selected from the group of a meal preference, a drink preference, and a loyalty preference.

12. The authentication system of claim 1, wherein:

the memory contains access credentials associated with a requested venue, and

contactless card is configured to transmit the access credentials with the request for venue information.

13. A method of performing one or more actions using a contactless card, the method comprising the steps of:

encrypting, by a processor of the contactless card, transmission data using one or more cryptographic algorithms and a card key to yield encrypted transmission data;

transmitting, by the processor, the encrypted transmission data for decryption;

performing, by the processor, one or more actions including retrieval, from a memory of the contactless card, of user preference information for an account associated with a user; and

transmitting, by the processor, a request for venue information based on the user preference information.

14. The method of claim 13, wherein the one or more actions includes at least one selected from the group of a translation from English to a non-English language and a translation from a non-English language to English.

15. The method of claim 13, wherein the user preference information further comprises a transaction history associated with one or more user affiliations.

16. The method of claim 13, wherein at least one of the one or more actions includes converting a purchase amount from a first currency to a second currency.

17. The method of claim 13, wherein the user preference information further includes information that is associated with one or more lounges.

18. The method of claim 13, wherein the user preference information further comprises a preference for an automated teller machine (ATM) that is located in proximity to the user.

19. A contactless card, comprising:

a memory containing one or more applets, a counter value, and one or more keys;

a communication interface; and

one or more processors in communication with the memory and the communication interface, wherein the one or more processors are configured to;

update the counter value when the communication interface is within a range of a communication field of an application comprising instructions for execution on a receiving device,

create a cryptographic result using the one or more keys and the counter value,

transmit the cryptographic result for validation,

perform one or more actions including one or more actions including retrieval, from the memory, of user preference information for an account associated with a user, and

transmit a request for venue information based on the user preference information.

20. The contactless card of claim 19, wherein the user preference information further comprises a preference for an automated teller machine (ATM) that is located in proximity to the user.