Back to results
US 11,456,873 B2Granted
Systems and methods for cryptographic authentication of contactless cards
AssigneeCapital One Services, LLC
InventorsKevin Osborn, Jeffrey Rule, Srinivasa Chigurupati
Life of this patent
Estimating the term…
Abstract
Example embodiments of systems and methods for data transmission between transmitting and receiving devices are provided. In an embodiment, each of the transmitting and receiving devices can contain a master key. The transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device. The receiving device can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key.
Claims20
A data transmission system, comprising:
- a transmitting device having a transmitting device processor and a transmitting device memory, the transmitting device memory containing a first master key, transmission data, and a counter value;
- a receiving device having a receiving device processor and a receiving device memory, the receiving device memory containing a second master key;
- wherein the transmitting device is configured to:
- generate a first diversified key using the first master key and at least one first cryptographic algorithm and store the first diversified key in the transmitting device memory, wherein the first master key is a first secret key,
- generate a second master key based on the first master key, wherein the second master key is a first public key,
- encrypt the second master key using at least one second cryptographic algorithm,
- protect the counter value using at least one third cryptographic algorithm and the first diversified key to yield a cryptographic result including the counter value,
- encrypt the transmission data using at least one fourth cryptographic algorithm and the first diversified key to yield encrypted transmission data, and
- transmit the protected counter value and the encrypted transmission data to the receiving device;
- and
- wherein the receiving device is configured to:
- decrypt the second master key using one of a second public key or a second secret key,
- generate a second diversified key based on the second master key and the counter value, and store the second diversified key in the receiving device memory, and
- decrypt the encrypted transmission data and validate the protected counter value using at least one fifth cryptographic algorithm and the second diversified key.
11 more elements
A method for transmitting encrypted data by a contactless card having a processor and a memory containing two master keys, an identification number, a sequence number, and a counter, the method comprising:
- generating a first diversified key using a first secret encryption key and at least one first cryptographic algorithm;
- generating a first public encryption key based on the first secret encryption key;
- encrypting the first public encryption key using at least one second cryptographic algorithm;
- encrypting a counter value using at least one third cryptographic algorithm and the first secret encryption key;
- encrypting transmission data using at least one fourth cryptographic algorithm and the first diversified key;
- transmitting the encrypted counter value and the encrypted transmission data to a receiving device;
- decrypting the first public encryption key using one of a second public encryption key or a second secret encryption key;
- generating a second diversified key based on the first public encryption key and the counter value;
- and
- decrypting the encrypted transmission data and validating the encrypted counter value using at least one fifth cryptographic algorithm and the first public encryption key.
7 more elements
A data transmission system comprising:
- a transmitting device having a transmitting device processor and a transmitting device memory, the transmitting device memory containing a first private key and a first public key, transmission data and a counter value;
- a receiving device having a receiving device processor and a receiving device memory, the receiving device memory containing a second private key;
- wherein the transmitting device is configured to:
- protect the counter value using at least one first cryptographic algorithm and the first private key to yield a cryptographic result including the counter value,
- encrypt the transmission data and the protected counter value using at least one second cryptographic algorithm and the first public key to yield encrypted transmission data,
- generate a second public key based on at least one of the first private key or the first public key, and
- transmit the encrypted transmission data and the second public key to the receiving device;
- and
- wherein the receiving device is configured to:
- decrypt the encrypted transmission data using a second private key, and
- decrypt and validate the protected counter value using the second public key.
8 more elements
Dependencies are inferred from the claim text.