# US 12,003,644 B2 · Techniques to control applets for contactless cards

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,644 B2
- Document ID: US12003644B2
- Status: Granted
- Kind: B2
- Application number: 17/317,324
- Filed: 2021-05-11
- Published: 2021-08-26
- Granted: 2024-06-04
- Earliest claimed: 2019-12-30
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Lara Mossler; Madhavan Chandran
- Web page: https://patentgrep.com/patent/US12003644B2

## CPC

- G06Q 20/3263: {characterised by activation or deactivation of payment capabilities}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G06Q 20/343: {Cards including a counter}
- G06Q 20/352: {Contactless payments by cards}
- G06Q 20/354: {Card activation or deactivation}
- G06Q 20/356: {Aspects of software for card payments}
- G06Q 20/3563: {Software being resident on card}
- G06Q 20/3574: {Multiple applications on card}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Various embodiments are generally directed to techniques provide and control applets for transaction cards. More specifically, embodiments discussed here include permitting or denying applets of transaction cards based on whether they are enabled or disabled. Embodiments may also include enabling and disable applets for transaction cards.

## Claims

### Claim 1

A system, comprising:
a network interface;
a memory to store instructions; and
processing circuitry, coupled with the memory and the network interface, operable to execute the instructions, that when executed, cause the processing circuitry to:
receive, via the network interface, from a computing device, a communication to disable an applet stored on a contactless card, the communication comprising a counter value that is stored on the contactless card, an encrypted cryptogram comprising an encrypted combination of a random number and cryptogram, and an applet identifier to identify the applet, and the counter value is associated with the applet, wherein the computing device comprises one of a client device, an automatic teller machine (ATM), or a web-based application of a personal computer;
decrypt the encrypted cryptogram to determine the cryptogram;
validate the counter value based on the cryptogram;
determine a second counter value associated with the applet, the second counter value stored in a data store comprising a plurality of counter values each associated with one of a plurality of applets, wherein the data store is communicatively coupled with the system;
set the second counter value in the data store to a value to disable the applet for the contactless card; and
send a second communication to the one of the client device, the ATM, or the web-based application to indicate the applet is disabled.

### Claim 2 (depends on 1)

The system of claim 1, the processing circuitry to set the value of the second counter value in the data store to a null value to disable the applet.

### Claim 3 (depends on 1)

The system of claim 1, the processing circuitry to set the value of the second counter value in the data store to a number greater than the counter value received in the communication to disable the applet.

### Claim 4 (depends on 1)

The system of claim 1, the processing circuitry to set the value of the second counter value in the data store to a specified value to disable the applet.

### Claim 5 (depends on 1)

The system of claim 1, comprising the data store including the plurality of counter values, and the processing circuitry to receive in the communication an identifier to identify an account associated with the contactless card, and perform a lookup in the data store based on the identifier to determine the second counter value associated with the applet and retrieve the second counter value from the plurality of counter values stored in the data store.

### Claim 6 (depends on 1)

The system of claim 1, the processing circuitry to determine the applet is enabled for the contactless card prior to setting the second counter value to a null value, a number greater than the counter value, or a specified value to disable the applet.

### Claim 7 (depends on 6)

The system of claim 6, the processing circuitry to determine the counter value matches the second counter value based on a comparison to determine the applet is enabled.

### Claim 8 (depends on 6)

The system of claim 6, the processing circuitry to determine the counter value is greater than the second counter value based on a comparison to determine the applet is enabled.

### Claim 9

A system, comprising:
a network interface;
a memory to store instructions; and
processing circuitry, coupled with the memory and the network interface, operable to execute the instructions, that when executed, cause the processing circuitry to:
receive, via the network interface, from a computing device, a communication to enable an applet stored on a contactless card, the communication comprising a counter value that is stored on the contactless card, an encrypted cryptogram comprising an encrypted combination of a random number and cryptogram, and an applet identifier to identify the applet, and the counter value is associated with the applet, wherein the computing device comprises one of a client device, an automatic teller machine (ATM), or a web-based application of a personal computer;
decrypt the encrypted cryptogram to determine the cryptogram;
validate the counter value based on the cryptogram;
determine a second counter value associated with the applet, the second counter value stored in a data store comprising a plurality of counter values each associated with one of a plurality of applets, wherein the data store is communicatively coupled with the system;
set the second counter value in the data store to a value to enable the applet for the contactless card; and
send a second communication to the one of the client device, the ATM, or the web-based application to indicate the applet is enabled.

### Claim 10 (depends on 9)

The system of claim 9, the processing circuitry to set the value of the second counter value in the data store to the counter value to enable the applet.

### Claim 11 (depends on 9)

The system of claim 9, the processing circuitry to set the value of the second counter value in the data store to a number less than the counter value received in the communication to enable the applet.

### Claim 12 (depends on 9)

The system of claim 9, comprising the data store including the plurality of counter values, and the processing circuitry to receive in the communication an identifier to identify an account associated with the contactless card, and perform a lookup in the data store based on the identifier to determine the second counter value associated with the applet and retrieve the second counter value from the plurality of counter values stored in the data store.

### Claim 13 (depends on 9)

The system of claim 9, the processing circuitry to determine the applet is disabled for the contactless card prior to setting the value to the counter value, or a number less than the counter value to enable the applet.

### Claim 14 (depends on 13)

The system of claim 13, the processing circuitry to determine the second counter value is set to a null value to determine the applet is disabled.

### Claim 15 (depends on 13)

The system of claim 13, the processing circuitry to determine the counter value is less than the second counter value or greater than the second counter value to determine whether the applet is enabled.

### Claim 16

A computer-implemented method, comprising:
receiving, by a server, from a mobile device, a communication to disable an applet for use to perform transactions, the applet stored and executable on a contactless card, and the communication comprising a counter value that is stored on the contactless card, an encrypted cryptogram comprising an encrypted combination of a random number and cryptogram, and is associated with the applet, and an applet identifier to identify the applet;
decrypting the encrypted cryptogram to determine the cryptogram;
validating the counter value based on the cryptogram;
determining, by the server, a corresponding counter value associated with the applet based on information received in the communication, the corresponding counter value stored in a data store, wherein the data store is communicatively coupled with the server;
setting, by the server, the corresponding counter value in the data store to a value to disable the applet for the contactless card; and
sending a second communication to the mobile device to indicate the applet is disabled.

### Claim 17 (depends on 16)

The computer-implemented method of claim 16, comprising setting the value of the corresponding counter value in the data store to a null value to disable the applet.

### Claim 18 (depends on 16)

The computer-implemented method of claim 16, comprising setting the value of the corresponding counter value in the data store to a number greater than the counter value received in the communication to disable the applet.