Systems and methods for cryptographic authentication of contactless cards
AssigneeCapital One Services, LLC
InventorsJeffrey Rule, Rajko Ilincic
Life of this patent
Estimating the term…
Abstract
Example embodiments of systems and methods for data transmission system between transmitting and receiving devices are provided. These systems and methods may provide for the secure transmission of sensitive information, such personally-identifiable information. In some examples, the sensitive information may be requested and securely shared when cryptographically signed by the user, and the user may control the access of viewers to the personally identifiable information or end users.
Claims20
An authorization server comprising:
- a memory including a master key;
- and
- a processor in communication with the memory, the processor configured to:
- transmit a request;
- generate an authentication diversified key based on the master key and a unique identifier;
- generate a session key based on the authentication diversified key;
- validate a cryptographic result using one or more cryptographic algorithms and the session key;
- authenticate one or more login credentials;
- and
- authorize, based on the authentication, sharing of information associated with the request.
A method of authorization, the method comprising the steps of:
- transmitting, by a processor, a request;
- generating, by the processor, an authentication diversified key based on a master key and a unique identifier;
- generating, by the processor, a session key based on the authentication diversified key;
- validating, by the processor, a cryptographic result using one or more cryptographic algorithms and the session key;
- authenticating, by the processor, one or more login credentials;
- and
- authorizing, by the processor, sharing of information associated with the request.
A computer readable non-transitory medium comprising computer executable instructions that, when executed by a processor, perform procedures comprising the steps of:
- transmitting a request;
- generating an authentication diversified key based on a master key and a unique identifier;
- generating a session key based on the authentication diversified key;
- validating a cryptographic result using one or more cryptographic algorithms and the session key;
- issuing one or more challenges;
- receiving, responsive to the one or more challenges, input;
- authenticating the received input;
- and
- authorizing sharing of one or more portions of information associated with the request.
Dependencies are inferred from the claim text.