TAP TO COPY DATA TO CLIPBOARD VIA NFC

• US 20200302727A1
• Filed: 07/25/2019
• Published: 09/24/2020
• Est. Priority Date: 03/20/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: HERRINGTON, Daniel, RULE, Jeffrey, HART, Colin, JI, Jason
• Granted Patent: US 10,783,736 B1
• Time in Patent Office: Days
• CPC Class Codes: G06F 9/543 User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE]
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G07F 7/0813 Specific details related to card security
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Various embodiments are generally directed to copying data to a clipboard of a mobile device from a contactless card using NFC. A mobile device may issue a request to read data from the contactless card. The contactless card may generate encrypted data in response to the request. The mobile device may receive the encrypted data via NFC and transmit the encrypted data to a server for verification. The server may verify the encrypted data and transmit an indication of an account number for the contactless card to the mobile device. The mobile device may then copy the account number to a clipboard of the mobile device.

Claims

1. A system, comprising:

a memory storing instructions; and

a processor, coupled with the memory, operable to execute the instructions stored in the memory to cause the processor to;

receive encrypted data from a contactless card associated with an account, the encrypted data generated based on a diversified key, a master key, and a counter value stored in a memory of the contactless card;

receive from a server, an indication specifying the server decrypted the encrypted data based on the diversified key, the master key, and the counter value;

receive, from the server, an encrypted account number associated with the account;

decrypt, by the application, the encrypted account number to yield the account number; and

copy, by the application based on the server decrypting the encrypted data, the account number to a clipboard of an operating system (OS) executing on the processor.

2. The system of claim 1, the processor operable to execute the instructions to cause the processor to:

receive, from the server, an encrypted expiration date and an encrypted card verification value (CVV) associated with the account;

decrypt the encrypted expiration date and the encrypted CVV to yield the expiration date and CVV; and

copy at least one of the expiration date and the CVV to the clipboard of the OS.

3. The system of claim 2, the processor operable to execute the instructions to cause the processor to:

identify a form comprising a plurality of fields including a first field, a second field, and a third field;

determine that the first field is associated with the account number, the second field is associated with the expiration date, and the third field is associated with the CVV; and

paste, from the clipboard;

(i) the account number to the first field, (ii) the expiration date to the second field, and (iii) the CVV to the third field.

4. The system of claim 3, the processor operable to execute the instructions to cause the processor to:

modify the clipboard based on at least one of;

(i) completion of a purchase, and (ii) expiration of a time threshold, wherein modifying the clipboard comprises one or more of;

(i) erasing all data stored in the clipboard, and (ii) copying random data to the clipboard.

5. The system of claim 1, the encrypted data received from the contactless card based on a first tap of the contactless card to the system, the processor operable to execute the instructions to cause the processor to:

receive, from the contactless card based on a second tap of the contactless card to the system, an expiration date associated with the account;

copy the expiration date to the clipboard of the OS;

receive, from the contactless card based on a third tap of the contactless card to the system, a card verification value (CVV) associated with the account; and

copy the CVV to the clipboard of the OS.

6. The system of claim 1, the encrypted data received via a communications interface of the contactless card, the communications interface configured to support at least one of near field communication (NFC), Bluetooth, and Wi-Fi, wherein the account number is a virtual account number.

7. The system of claim 1, wherein the encrypted data received from the contactless card comprises at least a customer identification value, the server to decrypt the encrypted data based on one or more cryptographic algorithms and an instance of the diversified key stored in a memory of the server, the diversified key stored in the memory of the server generated based on an instance of the master key and an instance of the counter value stored in the memory of the server, wherein the instances of the counter values stored in the contactless card and the server are synchronized.

8. A method, comprising:

receiving, by a processor circuit of a mobile device, encrypted data from a contactless card associated with an account, the encrypted data generated based on a diversified key, a master key, and a counter value stored in a memory of the contactless card;

receiving, by the processor circuit from a server, an indication specifying the server decrypted the encrypted data based on the diversified key, the master key, and the counter value;

receiving, by the processor circuit from the server, an encrypted account number associated with the account;

decrypting, by the processor circuit, the encrypted account number to yield the account number; and

copying, by the processor circuit based on the server decrypting the encrypted data, the account number to a clipboard of an operating system (OS) executing on the processor circuit.

9. The method of claim 8, further comprising:

receiving, by the processor circuit from the server, an expiration date and a card verification value (CVV) associated with the account; and

copying, by the processor circuit, at least one of the expiration date and the CVV to the clipboard of the OS.

10. The method of claim 9, further comprising:

identifying, by the processor circuit, a form comprising a plurality of fields including a first field, a second field, and a third field;

determining, by the processor circuit, that the first field is associated with the account number, the second field is associated with the expiration date, and the third field is associated with the CVV; and

pasting, by the processor circuit from the clipboard;

(i) the account number to the first field, (ii) the expiration date to the second field, and (iii) the CVV to the third field.

11. The method of claim 10, further comprising:

modifying, by the processor circuit, the clipboard based on at least one of;

(i) completion of a purchase, and (ii) expiration of a time threshold, wherein modifying the clipboard comprises one or more of;

(i) erasing all data stored in the clipboard, and (ii) copying random data to the clipboard.

12. The method of claim 8, the encrypted data received from the contactless card based on a first tap of the contactless card to a mobile device comprising the processor circuit, method further comprising:

receiving, by the processor circuit from the contactless card based on a second tap of the contactless card to the mobile device, an expiration date associated with the account;

copying, by the processor circuit, the expiration date to the clipboard of the OS;

receiving, by the processor circuit from the contactless card based on a third tap of the contactless card to the mobile device, a card verification value (CVV) associated with the account; and

copying, by the processor circuit based on the server decrypting the encrypted data, the CVV to the clipboard of the OS.

13. The method of claim 8, wherein the encrypted data is received via a communications interface of the contactless card configured to support at least one of near field communication (NFC), Bluetooth, and Wi-Fi, wherein the account number is a virtual account number, wherein the encrypted data received from the contactless card comprises at least a customer identification value.

14. The method of claim 8, wherein the server decrypts the encrypted data based on one or more cryptographic algorithms and an instance of the diversified key stored in a memory of the server, the diversified key stored in the memory of the server generated based on an instance of the master key and an instance of the counter value stored in the memory of the server, the method further comprising:

synchronizing the instance of the counter value stored in the memory of the contactless card and the instance of the counter value stored in the memory of the server; and

generating, by the server, the diversified key based on the master key and the counter value stored in the memory of the server,

wherein the contactless card is configured to;

encrypt the counter value using one or more cryptographic algorithms and the master key to generate the diversified key;

store the generated diversified key in the memory of the contactless card;

encrypt data using one or more cryptographic algorithms and the diversified key to yield the encrypted data; and

transmit the encrypted data to the processor circuit.

15. A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by a processor to cause the processor to:

receive encrypted data from a contactless card associated with an account, the encrypted data generated based on a diversified key, a master key, and a counter value stored in a memory of the contactless card;

receive, from a server, an indication specifying the server decrypted the encrypted data based on the diversified key, the master key, and the counter value;

receive, from the server, an encrypted account number associated with the account;

decrypt the encrypted account number to yield the account number; and

copy the account number to a clipboard of an operating system (OS) executing on the processor.

16. The non-transitory computer-readable storage medium of claim 15, further comprising computer-readable program code executable by the processor to cause the processor to:

paste the account number in a form field.

17. The non-transitory computer-readable storage medium of claim 15, further comprising computer-readable program code executable by the processor to cause the processor to:

receive, from the server, an encrypted expiration date and an encrypted card verification value (CVV) associated with the account;

decrypt the encrypted expiration date and the encrypted CVV to yield the expiration date and CVV; and

copy at least one of the expiration date and the CVV to the clipboard of the OS.

18. The non-transitory computer-readable storage medium of claim 15, further comprising computer-readable program code executable by the processor to cause the processor to:

modify the clipboard based on at least one of;

(i) completion of a purchase, and (ii) expiration of a time threshold, wherein modifying the clipboard comprises one or more of;

(i) erasing all data stored in the clipboard, and (ii) copying random data to the clipboard.

19. The non-transitory computer-readable storage medium of claim 15, the encrypted data received from the contactless card based on a first tap of the contactless card to a mobile device, further comprising computer-readable program code executable by the processor to cause the processor to:

receive, from the contactless card based on a second tap of the contactless card to the mobile device, an expiration date associated with the account;

copy the expiration date to the clipboard of the OS;

receive, from the contactless card based on a third tap of the contactless card to the mobile device, a card verification value (CVV) associated with the account; and

copy the CVV to the clipboard of the OS.

20. The non-transitory computer-readable storage medium of claim 15, the encrypted data received via a communications interface of the contactless card, the communications interface configured to support at least one of near field communication (NFC), Bluetooth, and Wi-Fi, wherein the account number is a virtual account number, wherein the encrypted data received from the contactless card comprises at least a customer identification value, the server to decrypt the encrypted data based on one or more cryptographic algorithms and an instance of the diversified key stored in a memory of the server, the diversified key stored in the memory of the server generated based on an instance of the master key and an instance of the counter value stored in the memory of the server, wherein the instances of the counter values stored in the contactless card and the server are synchronized.