# US 12,112,310 B2 · Authentication for third party digital wallet provisioning > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,112,310 B2 - Document ID: US12112310B2 - Status: Granted - Kind: B2 - Application number: 18/119,518 - Filed: 2023-03-09 - Published: 2023-09-07 - Granted: 2024-10-08 - Earliest claimed: 2019-12-23 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Katherine McHugh; Lesley Newton; Casey Barrett; Patrick Zearfoss - Web page: https://patentgrep.com/patent/US12112310B2 ## CPC - G06Q 20/3221: {Access to banking information through M-devices} - G06Q 20/326: {Payment applications installed on the mobile devices} - G06Q 20/3263: {characterised by activation or deactivation of payment capabilities} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/352: {Contactless payments by cards} - G06Q 20/36: using electronic wallets or electronic money safes - G06Q 20/3672: {initialising or reloading thereof} - G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights} - G06Q 20/4014: {Identity check for transactions} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Various embodiments are directed to securely verifying an identity of a user who is requesting to add or link a financial instrument to a third-party digital wallet using one-tap contactless card authentication. The financial instrument may be added or linked to the third-party wallet in at least two scenarios: pull provisioning and push provisioning. In either provisioning scenarios, the user may be required to authenticate the financial instrument being added or linked by successfully verifying the identity of the user via the one-tap contactless card authentication at a banking application associated with the financial instrument. ## Claims ### Claim 1 An apparatus, comprising: a display device; one or more processors coupled with the display device; memory coupled with the display device and the one or more processors, the memory storing instructions that, when executed by the one or more processors, causes the one or more processors to: provide access to a first-party banking application in response to authentication of user login information; present, by the first-party banking application in a first-display graphical user interface (GUI) on the display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application; receive, by the first-party banking application, a selection of the indication; present, by the first-party banking application in the first-display GUI on the display device, a one-tap authentication option for the user to tap a contactless card on or near the apparatus, and wherein the contactless card is the payment card to add or link to the third-party wallet application; establish a first wireless communication with the contactless card; receive a message comprising encrypted data and a random number via the first wireless communication from the contactless card, wherein the contactless card generates the message by encrypting the encrypted data and the random number with a session key, wherein the encrypted data comprises a unique identifier associated with the contactless card; send, by the first-party banking application, at least a portion of the message to one or more remote computing devices associated with a first-party entity; receive, by the first-party banking application, a second indication from the one or more remote computing devices of a successful authentication based on the portion of the message; and initiate, by the first-party banking application, a transition to the third-party wallet application, the transition to include sending information for the payment card to the third-party wallet application to add or link to the third-party wallet application, the transition to further include causing the third-party wallet application to display at least confirmation that the payment card has been successfully added or linked to the third-party wallet application in a second-display GUI on the display device. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the instructions further cause the one or more processors to receive, from the user, permission to share data with the third-party wallet application. ### Claim 3 (depends on 1) The apparatus of claim 1, the one or more processors to: receive user login information; and authenticate, via the first-party banking application, the user login information. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the first-party banking application is a mobile-based application, a native application, a web application, or a web browser and wherein the third-party wallet application is a mobile-based application, a native application, a web application, or a web browser. ### Claim 5 (depends on 1) The apparatus of claim 1, the one or more processors to receive the message in one or more NFC data exchange format (NDEF) messages. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the contactless card comprises memory and processing circuitry for executing instructions stored in the memory to generate the encrypted data, determine the random number, and send the message. ### Claim 7 (depends on 1) The apparatus of claim 1, wherein the one or more remote computing devices are associated with the first-party banking application and are first-party remote computing devices. ### Claim 8 A computer-implemented method, comprising: providing, by a computing device, access to a first-party banking application in response to authentication of user login information; presenting, by the first-party banking application in a first-display graphical user interface (GUI) on a display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application; receiving, by the first-party banking application, a selection of the indication; presenting, by the first-party banking application in the first-display GUI on the display device, a one-tap authentication option for the user to tap a contactless card on or near the apparatus, and wherein the contactless card is the payment card to add or link to the third-party wallet application; establishing a first wireless communication with the contactless card; receiving a message comprising a message authentication code (MAC) cryptogram and a random number via the first wireless communication from the contactless card, wherein the contactless card generates the message by encrypting the MAC cryptogram and the random number with a session key, wherein the MAC cryptogram comprises a unique identifier associated with the contactless card; sending, by the first-party banking application, at least a portion of the message to one or more remote computing devices associated with the financial entity; receiving, by the first-party banking application, a second indication from the one or more remote computing devices of a successful authentication based on the portion of the message; and initiating, by the first-party banking application, a transition to the third-party wallet application, the transition to include sending information for the payment card to the third-party wallet application to add or link to the third-party wallet application, the transition to further include causing the third-party wallet application to display at least confirmation that the payment card has been successfully added or linked to the third-party wallet application in a second-display GUI on the display device. ### Claim 9 (depends on 8) The computer-implemented method of claim 8, comprising receiving, from the user, permission to share data with the third-party wallet application. ### Claim 10 (depends on 8) The computer-implemented method of claim 8, comprising: receiving user login information; and authenticating, via the first-party banking application, the user login information. ### Claim 11 (depends on 8) The computer-implemented method of claim 8, wherein the first-party banking application is a mobile-based application, a native application, a web application, or a web browser and wherein the third-party wallet application is a mobile-based application, a native application, a web application, or a web browser. ### Claim 12 (depends on 8) The computer-implemented method of claim 8, comprising receiving the message in one or more NFC data exchange format (NDEF) messages. ### Claim 13 (depends on 8) The computer-implemented method of claim 8, wherein the contactless card comprises memory and processing circuitry for executing instructions stored in the memory to generate the MAC cryptogram, determine the random number, and send the message. ### Claim 14 (depends on 8) The computer-implemented method of claim 8, wherein the one or more remote computing devices are associated with the first-party banking application and are first-party remote computing devices. ### Claim 15 A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to: provide access to a first-party banking application in response to authentication of user login information; present, by the first-party banking application in a first-display graphical user interface (GUI) on the display device, an indication to add or link a payment card associated with a user and the account to a third-party wallet application; receive, by the first-party banking application, a selection of the indication; present, by the first-party banking application in the first-display GUI on the display device, a one-tap authentication option for the user to tap a contactless card on or near the apparatus, and wherein the contactless card is the payment card to add or link to the third-party wallet application; establish a first wireless communication with the contactless card; receive a message comprising a message authentication code (MAC) cryptogram and a random number via the first wireless communication from the contactless card, wherein the contactless card generates the message by encrypting the MAC cryptogram and the random number with a session key, wherein the MAC cryptogram comprises a unique identifier associated with the contactless card; send, by the first-party banking application, at least a portion of the message to one or more remote computing devices associated with a first-party entity; receive, by the first-party banking application, a second indication from the one or more remote computing devices of a successful authentication based on the portion of the message; and initiate, by the first-party banking application, a transition to the third-party wallet application, the transition to include sending information for the payment card to the third-party wallet application to add or link to the third-party wallet application, the transition to further include causing the third-party wallet application to display at least confirmation that the payment card has been successfully added or linked to the third-party wallet application in a second-display GUI on the display device. ### Claim 16 (depends on 15) The computer-readable storage medium of claim 15, comprising receive, from the user, permission to share data with the third-party wallet application. ### Claim 17 (depends on 15) The computer-readable storage medium of claim 15, comprising: receive user login information; and authenticate, via the first-party banking application, the user login information. ### Claim 18 (depends on 15) The computer-readable storage medium of claim 15, wherein the first-party bank application is a mobile-based application, a native application, a web application, or a web browser and wherein the third-party wallet application is a mobile-based application, a native application, a web application, or a web browser. ### Claim 19 (depends on 15) The computer-readable storage medium of claim 15, comprising receive the message in one or more NFC data exchange format (NDEF) messages. ### Claim 20 (depends on 15) The computer-readable storage medium of claim 15, wherein the contactless card comprises memory and process circuitry for executing instructions stored in the memory to generate the MAC cryptogram, determine the random number, and send the message.