# US 12,003,490 B2 · Systems and methods for card information management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,490 B2
- Document ID: US12003490B2
- Status: Granted
- Kind: B2
- Application number: 17/874,053
- Filed: 2022-07-26
- Published: 2022-11-17
- Granted: 2024-06-04
- Earliest claimed: 2018-10-02
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Jeffrey Rule
- Web page: https://patentgrep.com/patent/US12003490B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/3823: {combining multiple encryption tools for a transaction}
- G06Q 20/3829: {involving key management}
- G06Q 20/401: {Transaction verification}
- G06Q 20/409: {Device specific authentication in transaction processing}
- G06Q 20/4097: {using mutual authentication between devices and transaction partners}
- G06Q 20/40975: {using encryption therefor}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 2463/102: applying security measure for e-commerce
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Example embodiments of systems and methods for replacing card information. In an embodiment, a system comprises an authentication server in data communication with a network and a database in data communication with the authentication server. The authentication server is configured to receive an authentication signal from a user device via the network, retrieve a list of merchants having transaction history with an account associated with the account card, and transmit an access token to at least one merchant server selected using the list of merchants.

## Claims

### Claim 1

A method of replacing stored card information comprising the steps of:
transmitting, by a user device application comprising instructions for execution on a user device, an authentication signal via a network to an authentication server;
transmitting, by the authentication server, an access token to a merchant server, the access token configured to request the initiation of a communication channel between the user device application and the merchant server;
transmitting, by the user device application via the communication channel, account card information indicative of an account card to the merchant server; and
instructing, by the user device application, the merchant server to replace stored card information with the account card information.

### Claim 2 (depends on 1)

The method of claim 1, wherein the authentication signal is generated based on a detection of the account card and an authentication of the user.

### Claim 3 (depends on 2)

The method of claim 2, wherein the authentication of the user comprises a biometric authentication of the user.

### Claim 4 (depends on 2)

The method of claim 2, wherein, in response to the detection of the account card, the method further comprises the step of prompting, by the user device application, a user to select whether to replace existing card information stored on a plurality of merchant servers with the account card information.

### Claim 5 (depends on 1)

The method of claim 1, wherein the access token defines communications permitted to be transmitted via the communication channel.

### Claim 6 (depends on 1)

The method of claim 1, wherein the communication channel is encrypted.

### Claim 7 (depends on 1)

The method of claim 1, further comprising the steps of:
transmitting, by the authentication server, a second access token to a second merchant server, the second access token configured to initiate a second communication channel between the user device application and the merchant server; and
transmitting, by the user device application via the second communication channel, account card information indicative of the account card to the second merchant server.

### Claim 8 (depends on 7)

The method of claim 7, further comprising the step of instructing, by the user device application, the second merchant server to replace stored card information with the account card information.

### Claim 9 (depends on 7)

The method of claim 7, wherein:
the access token transmitted to the merchant server is a unique access token, and
the second access token transmitted to the second merchant server is a second unique access token.

### Claim 10 (depends on 1)

The method of claim 1, wherein the user device application is configured to instruction the second merchant server to replace stored card information with the account card information after an activation of account card.

### Claim 11

A system, comprising:
an authentication server comprising a processor and a memory; and
a user device application comprising instructions for execution on a user device,
wherein the user device application is configured to transmit an authentication signal via a network to an authentication server,
wherein the authentication server is configured to an access token to a merchant server, the access token configured to request the initiation of a communication channel between the user device application and the merchant server, and
wherein the user device application is further configured to:
transmit, via the communication channel, account card information indicative of an account card to the merchant server, and
instruct the merchant server to replace stored card information with the account card information.

### Claim 12 (depends on 11)

The system of claim 11, wherein the user device application is further configured to:
receive a list of merchants from the authentication server, display the list of merchants, and
receive a user selection identifying a selected merchant from the list of merchants.

### Claim 13 (depends on 12)

The system of claim 12, wherein the list of merchants is selected by the authentication server based on a transaction history with an account associated with the account card.

### Claim 14 (depends on 12)

The system of claim 12, wherein the authentication server is further configured to select the list of merchants based on a transaction history with an account associated with the account card.

### Claim 15 (depends on 14)

The system of claim 14, wherein the transaction history comprises at least one selected from the group of a purchased item, a monetary value associated with a purchased item, a purchased service, and a monetary value associated with a purchased service.

### Claim 16 (depends on 11)

The system of claim 11, wherein:
the authentication server is further configured to transmit a second access token to a second merchant server to initiate a second communication channel, and
the user device application is further configured to connect to the second merchant server through the second communication channel.

### Claim 17 (depends on 11)

The system of claim 11, wherein the account card information comprises at least one selected from the group of a card number, a CVV number, and an expiration date.

### Claim 18

An authentication server, comprising:
a processor; and
a memory, wherein the processor is configured to:
receive an authentication signal from a user device application comprising instructions for execution on a user device, and
transmit an access token to a merchant server storing stored card information, and
wherein the access token is configured to request the initiation of a communication channel between the user device application and the merchant server.

### Claim 19 (depends on 18)

The authentication server of claim 18, wherein the authentication signal comprises a cryptogram generated by an account card in response to a detection of an account card and an authentication of a user.

### Claim 20 (depends on 18)

The authentication server of claim 18, wherein:
the memory stores a transaction history with an account associated with the account card, and
the processor is further configured to:
select a list of merchants based on the transaction history, and
transmit the list of merchants to the user device application.
