# US 10,771,253 B2 · Systems and methods for cryptographic authentication of contactless cards

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,253 B2
- Document ID: US10771253B2
- Status: Granted
- Kind: B2
- Application number: 16/351,424
- Filed: 2019-03-12
- Published: 2020-04-02
- Granted: 2020-09-08
- Earliest claimed: 2018-10-02
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Kaitlin Newman; Colin Hart; Latika Gulati; Abdelkader Benkreira; Sarah Jane Cunningham; Sophie Bermudez; Michael Mossoba; Wayne Lutz
- Web page: https://patentgrep.com/patent/US10771253B2

## CPC

- G06Q 30/0209: {Incentive being awarded or redeemed in connection with the playing of a video game}
- H04W 12/06: Authentication
- G06F 3/017: {Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883)}
- G06Q 20/352: {Contactless payments by cards}
- G06Q 20/3829: {involving key management}
- G07F 17/3225: {Data transfer within a gaming system, e.g. data sent between gaming machines and users}
- G07F 17/3241: {Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance (computer security G06F21/00)}
- G07F 17/3244: {Payment aspects of a gaming system, e.g. payment schemes, setting payout ratio, bonus or consolation prizes}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06Q 20/045: {using payment protocols involving tickets}
- G06Q 50/34: Betting or bookmaking, e.g. Internet betting
- G06Q 2220/00: Business processing using cryptography
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.

## Claims

### Claim 1

A data transmission system comprising:
a contactless card including a processor and memory;
an application comprising instructions for executing on a receiving device having a processor and memory, wherein the application is in data communication with the contactless card;
wherein the contactless card is configured to transmit, after one or more entries into a communication field, one or more user credentials for authentication;
wherein the application is configured to, after authentication of the one or more user credentials, perform one or more processes, wherein at least one of the one or more processes is selected from the group of playing an audible message and playing a visual message for a predetermined time period, wherein the selection is dependent after the one or more entries into the communication field, wherein the at least one selected from the group of the audible message and the visual message are selected based on the one or more entries into the communication field and based on one or more gestures from the contactless card such that each of the one or more gestures is indicative of a different message, the one or more gestures including at least one selected from the group of tap, wave, gesture, and swipe, and wherein the at least one selected from the group of the audible message and the visual message are played by the application.

### Claim 2 (depends on 1)

The data transmission system of claim 1, wherein a second process comprises a scavenger hunt to receive at least one selected from the group of points and offers.

### Claim 3 (depends on 2)

The data transmission system of claim 2, wherein the scavenger hunt comprises visiting at least one selected from the group of sites, monuments, destinations, and famous places during the scavenger hunt.

### Claim 4 (depends on 2)

The data transmission system of claim 2, wherein the at least one selected from the group of points and offers are linked to one or more user accounts.

### Claim 5 (depends on 2)

The data transmission system of claim 2, wherein the offers are predictively suggested based on comparison with one or more parameters.

### Claim 6 (depends on 2)

The data transmission system of claim 2, wherein the points and offers are apportioned via one or more user preferences.

### Claim 7 (depends on 1)

The data transmission system of claim 1, wherein the at least one process comprises repeating at least one selected from the group of the audible message and the visual message at a predetermined interval.

### Claim 8 (depends on 1)

The data transmission system of claim 1, wherein the audible message comprises a funny message.

### Claim 9 (depends on 1)

The data transmission system of claim 1, wherein a third process of the one or more processes comprises receiving one or more tickets for redemption, the one or more tickets including at least one selected from the group of concert tickets, sports tickets, conference tickets, lottery tickets, event tickets, and restaurant tickets.

### Claim 10 (depends on 1)

The data transmission system of claim 1, wherein the contactless card is configured to update records stored therein upon performance of the one or more processes.

### Claim 11

A method of transmitting data using a contactless card and an application including instructions for execution on a receiving device having a processor and memory, the contactless card including a processor and memory, wherein the application is in data communication with the contactless card, the method comprising the steps of:
transmitting, after one or more entries into a communication field, one or more user credentials for authentication;
performing, by the application and after authentication of the one or more user credentials, one or more processes, wherein at least one process is selected from the group of an audible message and a visual message for a randomly chosen time period, wherein the selection is dependent after the one or more entries into the communication field, wherein the at least one selected from the group of the audible message and the visual message are selected based on the one or more entries into the communication field and based on one or more gestures from the contactless card such that each of the one or more gestures is indicative of a different message, the one or more gestures including at least one selected from the group of tap, wave, gesture, and swipe, wherein the at least one selected from the group of the audible message and the visual message are played by the application.

### Claim 12 (depends on 11)

The method of claim 11, wherein a second process of the one or more processes comprises a scavenger hunt to receive at least one selected from the group of reward points and offers.

### Claim 13 (depends on 12)

The method of claim 12, wherein the scavenger hunt comprises visiting at least one selected from the group of sites, monuments, destinations, and famous places during the scavenger hunt.

### Claim 14 (depends on 12)

The method of claim 12, wherein the at least one selected from the group of reward points and offers are linked to one or more user accounts.

### Claim 15 (depends on 12)

The method of claim 12, wherein the offers are predictively suggested based on comparison with one or more parameters.

### Claim 16 (depends on 11)

The method of claim 11, wherein the at least one process comprises repeating at least one selected from the group of the audible message and the visual message at a predetermined interval.

### Claim 17 (depends on 11)

The method of claim 11, wherein the at least one selected from the group of the audible message and the visual message comprises English or non-English content.

### Claim 18 (depends on 11)

The method of claim 11, wherein a third process of the one or more processes comprises receiving one or more tickets, the one or more tickets including at least one selected from the group of concert tickets, sports tickets, conference tickets, lottery tickets, event tickets, and restaurant tickets.

### Claim 19 (depends on 18)

The method of claim 18, wherein the one or more tickets are redeemable for a cash reward.

### Claim 20 (depends on 11)

The method of claim 11, further comprising updating, by the contactless card, records stored therein upon performing the one or more processes.