Secure authentication based on identity data stored in a contactless card

A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code, when executed by a processor of a device comprising an image capture device, causes the processor to perform the steps of:

• executing an application;
• receiving, via the application, a request to perform an operation associated with an account;
• receiving, via the application, encrypted data from a contactless card associated with the account;
• transmitting, via the application to an authentication server, the encrypted data received from the contactless card;
• receiving, via the application from the authentication server, a decryption result,
• determining, via the application based on the decryption result, that the authentication server decrypted the encrypted data;
• determining, via the application, a type of authentication data required to authorize the operation;
• receiving, via the application based on the determined type of authentication data, an encrypted first data element from the contactless card, the first data element comprising a passport image or a driver license image;
• transmitting, via the application, the encrypted first data element to the authentication server;
• receiving, via the application, the first data element from the authentication server;
• determining, via the application, that the received first data element satisfies at least one rule for authorizing the operation;
• authorizing, via the application, performance of the operation based on the received decryption result that the authentication server decrypted the encrypted data and the determination that the received first data element satisfies the at least one rule for authorizing the operation;
• and
• performing the operation via the application, wherein the operation comprises one or more of:
• (i) viewing attributes of the account, (ii) modifying the attributes of the account, (iii) accessing a page of the application, or (iv) processing a transaction using the contactless card.

A method performed by a device comprising a processor, an application and an image capture device, the method comprising:

• executing, by the processor, the application;
• receiving, by the application, a request to perform an operation associated with an account;
• receiving, by the application, encrypted data from a contactless card associated with the account;
• transmitting, by the application to an authentication server, the encrypted data received from the contactless card;
• receiving, by the application from the authentication server, a decryption result;
• determining, by the application based on the decryption result, that the authentication server decrypted the encrypted data;
• determining, by the application, a type of authentication data required to authorize the operation;
• receiving, by the application based on the determined type of authentication data, an encrypted first data element from the contactless card, the first data element comprising a passport image or a driver license image;
• transmitting, by the application, the encrypted first data element to the authentication server;
• receiving, by the application, the first data element from the authentication server;
• determining, by the application, that the received first data element satisfies at least one rule for authorizing the operation;
• authorizing performance of the operation by the application based on the received decryption result and the determination that the received first data element satisfies the at least one rule for authorizing the operation;
• and
• performing the operation by the application, wherein the operation comprises one or more of:
• (i) viewing attributes of the account, (ii) modifying the attributes of the account, (iii) accessing a page of the application, or (iv) processing a transaction using the contactless card.