One-tap payment using a contactless card

A non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by a processor to cause the processor to:

• receive, by an authentication application executing on the processor from a merchant application executing on a client device:
• (i) a merchant identifier of a merchant associated with the merchant application, (ii) a transaction identifier of a transaction, (iii) encrypted data, and (iv) a location of the client device;
• verify, by the authentication application, the encrypted data by decrypting the encrypted data based at least in part on a private key for a contactless card;
• determine, by the authentication application, that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with the contactless card;
• generate, by a virtual account number generator executing on the processor, a virtual account number based on the verification of the encrypted data, the determination that the contactless card has previously been used to make a purchase with the merchant, and the determination that the client device is within the threshold distance of the known location;
• and
• transmit, by the virtual account number generator, the merchant identifier, the transaction identifier, the virtual account number, an expiration date associated with the virtual account number, and a card verification value (CVV) associated with the virtual account number to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.

A method, comprising:

• receiving, by an authentication application executing on a processor from a merchant application executing on a client device:
• (i) a merchant identifier of a merchant associated with the merchant application, (ii) a transaction identifier of a transaction, (iii) encrypted data, and (iv) a location of the client device;
• verifying, by the authentication application, the encrypted data by decrypting the encrypted data based at least in part on a private key for a contactless card;
• determining, by the authentication application, that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with the contactless card;
• generating, by a virtual account number generator executing on the processor, a virtual account number based on the verification of the encrypted data, the determination that the contactless card has previously been used to make a purchase with the merchant, and the determination that the client device is within the threshold distance of the known location;
• and
• transmitting, by the virtual account number generator, the merchant identifier, the transaction identifier, the virtual account number, an expiration date associated with the virtual account number, and a card verification value (CVV) associated with the virtual account number to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.