SYSTEMS AND METHODS FOR PERFORMING A REISSUE OF A CONTACTLESS CARD

• US 20200184462A1
• Filed: 12/31/2019
• Published: 06/11/2020
• Est. Priority Date: 10/02/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: RULE, Jeffrey, HERRINGTON, Daniel, ILINCIC, Rajko
• Granted Patent: US 10,909,527 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Example embodiments relate to reissuing or otherwise altering a contactless card. These embodiments are particularly well-suited to an emergency reissue in which many cards have been compromised as the result of a data breach of a major credit card provider or department store. An exemplary contactless card includes a chip that stores encrypted authentication information, including a primary account number (PAN) that identifies the card. The chip may include a first applet responsible making payments with the card; the first applet may manage the PAN. A second applet may be capable of interacting with an outside application, and may serve as a bridge to the first applet. A rewrite of the PAN may be triggered by issuing a write command to the second applet, or by interacting with the chip in a predetermined manner (e.g., tapping the card on an interactable element a predetermined number of times).

Claims

1. A non-transitory computer-readable medium storing:

a first applet configured to authorize transactions for a contactless card and maintaining a first primary account number (PAN) for the contactless card, the first PAN identifying the contactless card in the transactions;

a second applet distinct from the first applet and configured to interact with an outside application and serve as a bridge between the outside application and the first applet;

instructions configured to cause a processing circuit to;

receive an instruction, at the second applet, to change the first PAN;

authenticate the contactless card by instructing the contactless card to generate a cryptogram, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server;

in response to authenticating the contactless card, instruct the first applet, on a secure communication channel from the second applet, to change the first PAN; and

change the first PAN to a second PAN at the first applet, wherein changing the first PAN causes the first applet to use the second PAN in place of the first PAN in future transactions.

2. The medium of claim 1, wherein the first applet is preloaded with a plurality of PANs at the time that the contactless card is issued, and changing the first PAN to the second PAN comprises advancing to the next preloaded PAN.

3. The medium of claim 1, wherein the instruction to change the first PAN received at the second applet is received via near field communication (NFC).

4. The medium of claim 1, wherein the instruction to change the first PAN received at the second applet involves tapping the contactless card against an interactable element in a predetermined pattern.

5. The medium of claim 1, wherein the instruction to change the first PAN received at the second applet is received from an automatic teller machine (ATM) or point of sale (POS) terminal.

6. The medium of claim 1, wherein the contactless card includes an electronic ink (e-ink) display configured to display an identifying number of the card derived from the PAN currently assigned to the contactless card, and wherein changing the first PAN to the second PAN comprises updating the e-ink display.

7. The medium of claim 1, wherein instructing the first applet to change the first PAN comprises coordinating the change in the first PAN with a backend server associated with the second applet.

8. A method comprising:

storing an original number for a credit account in digital payment logic on a chip of a contactless card;

receiving an instruction at communication logic, stored on the chip and distinct from the digital payment logic, to update the original number for the credit account;

authenticating the contactless card by instructing the contactless card to generate a cryptogram, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server;

in response to authenticating the contactless card, establishing a secure data transmission from the communication logic to the digital payment logic;

issue a command from the communication logic to the digital payment logic to update the original number using the secure data transmission;

update the original number to an updated number using the digital payment logic in response to receiving the command.

9. The method of claim 8, wherein the digital payment logic derives the updated number from the original number.

10. The method of claim 8, wherein the instruction to update the original number received at the communication logic is received via near field communication (NFC).

11. The method of claim 8, wherein the instruction to update the original number received at the communication logic comprises tapping the contactless card against an interactable element in a predetermined pattern.

12. The method of claim 8, wherein the instruction to update the original number received at the communication logic is received from an automatic teller machine (ATM) or point of sale (POS) terminal.

13. The method of claim 8, wherein the contactless card includes an electronic ink (e-ink) display configured to display an identifying number of the card based on the updated number.

14. The method of claim 8, wherein issuing the command comprises coordinating the update to the number with a backend server associated with the communication logic.

15. An apparatus having a contact pad comprising:

an antenna configured to receive a short range communication from a device;

a microprocessor circuit powered by the antenna using energy from the short range communication;

a memory storing;

transaction logic configured to reference an identifier for the apparatus in connection with a transaction; and

encryption and authentication logic configured to communicate with the device via the antenna, wherein

the encryption and authentication logic is further configured to recognize a directive from the device and received by the antenna, the directive indicating that the identifier is to be rewritten, authenticate the contactless card by instructing the contactless card to generate a cryptogram, transmitting the cryptogram generated by the contactless card to an authentication server, and receiving an authentication approval from the authentication server, and, in response to authenticating the contactless card, communicate the directive to the transaction logic, and

the transaction logic is further configured to rewrite the identifier based on the directive.

16. The apparatus of claim 15, wherein the first applet is preloaded with a plurality of PANs at the time that the contactless card is issued, and changing the first PAN to the second PAN comprises advancing to the next preloaded PAN.

17. The apparatus of claim 15, wherein the instruction to rewrite the identifier is received via the antenna using near field communication (NFC).

18. The apparatus of claim 15, wherein the instruction to rewrite the identifier registered by the encryption and authentication logic as a tapping of the apparatus against an interactable element in a predetermined pattern.

19. The apparatus of claim 15, wherein the device is an automatic teller machine (ATM) or point of sale (POS) terminal.

20. The apparatus of claim 15, further comprising a rewritable display configured to display the identifier, and wherein rewriting the identifier comprises updating the rewritable display.