Client device authentication using contactless legacy magnetic stripe data
AssigneeCapital One Services, LLC
InventorsEvan Lerner, Lara Mossler
Life of this patent
Estimating the term…
Abstract
A technique for generating a diversified encryption key for a contactless legacy magnetic stripe card is disclosed. The diversified key can be generated using a master key, a key diversification value and an encryption algorithm. In one example embodiment, the key diversification value can be provided by the user as a fingerprint, numeric code or photo. The user can provide the key diversification value to the card or a cellphone. The card can generate the diversified key using the user provided key diversification value. The card or the cellphone can transmit the user provided diversification value to the server and the server can regenerate the diversified key using the user provided diversification value.
Claims20
A contactless card comprising:
- a memory, a processor and a transmitter, wherein:
- the memory stores a master key, transmission data and a counter value;
- using the transmitter, the contactless card is configured to be in data communication with a client device;
- and
- the contactless card is an MSD compliant contactless card;
- wherein the contactless card is configured to:
- receive a key diversification value from the client device, wherein the key diversification value includes a biometric input;
- generate a diversified key using the master key, the counter value, the key diversification value and a cryptographic algorithm;
- encrypt the transmission data using the cryptographic algorithm and the diversified key to yield the encrypted transmission data;
- and
- transmit the encrypted transmission data to the client device.
A contactless card comprising:
- a memory, a processor and a transmitter, wherein:
- the memory stores a master key, transmission data and a counter value;
- using the transmitter, the contactless card is configured to be in data communication with a client device;
- and
- the contactless card is an MSD compliant contactless card;
- wherein the contactless card is configured to:
- receive a key diversification value and an algorithm selection value from the client device, wherein the key diversification value includes a biometric input;
- select a cryptographic algorithm using the algorithm selection value;
- generate a diversified key using the master key, the counter value, the key diversification value and the cryptographic algorithm;
- encrypt the transmission data using the cryptographic algorithm and the diversified key to yield the encrypted transmission data;
- and
- transmit the encrypted transmission data to the client device.
A computer readable non-transitory medium comprising computer-executable instructions that are executed on a client device comprising a processor, a memory, and a transmitter, the instructions comprising the steps of:
- receiving a first input and, based on the first input, derive a key diversification value;
- receiving a second input and, based on the second input, derive an algorithm selection value;
- transmitting the key diversification value and the algorithm selection value to a contactless card;
- receiving encrypted transmission data from the contactless card, wherein the encrypted transmission data represents transmission data encrypted by a cryptographic algorithm and a diversified key which is generated using a master key, a counter value, the key diversification value and the cryptographic algorithm associated with the algorithm selection value;
- and
- transmitting the encrypted transmission data, the key diversification value and the algorithm selection value to a server.
A computer readable non-transitory medium comprising computer-executable instructions that are executed on a client device comprising a processor, a memory, and a transmitter, the instructions comprising the steps of:
- receiving a first input and, based on the first input, derive a key diversification value;
- receiving a second input and, based on the second input, derive an algorithm selection value;
- transmitting the key diversification value and the algorithm selection value to a contactless card;
- receiving encrypted transmission data from the contactless card, wherein the encrypted transmission data represents transmission data encrypted by a cryptographic algorithm and a diversified key which is generated using a master key, a counter value, the key diversification value and the cryptographic algorithm associated with the algorithm selection value;
- and
- transmitting the encrypted transmission data, the key diversification value and the algorithm selection value to a server;
- wherein the memory respectively stores a plurality of algorithm selection values in association with a plurality of fingerprint values.
Dependencies are inferred from the claim text.