# US 12,223,498 B2 · Utilizing a transaction card to provide secondary authentication for accessing a secure application with a user device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,223,498 B2 - Document ID: US12223498B2 - Status: Granted - Kind: B2 - Application number: 18/537,905 - Filed: 2023-12-13 - Published: 2024-04-04 - Granted: 2025-02-11 - Earliest claimed: 2018-01-10 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: James Zarakas; Molly Johnson; Robert Perry; Adam Koeppel; Tyler Locke - Web page: https://patentgrep.com/patent/US12223498B2 ## CPC - G06Q 20/3674: {involving authentication} - G06F 3/017: {Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883)} - G06F 21/35: communicating wirelessly - G06Q 20/105: {involving programming of a portable memory device, e.g. IC cards, "electronic purses"} - G06Q 20/3226: {Use of secure elements separate from M-devices} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/353: {Payments by cards read by M-devices} - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/409: {Device specific authentication in transaction processing} - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - G07F 7/0833: {Card having specific functional components} - H04L 9/0877: {using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 2200/1636: Sensing arrangement for detection of a tap gesture on the housing - G06F 2200/1637: Sensing arrangement for detection of housing movement or orientation, e.g. for controlling scrolling or cursor movement on the display of an handheld computer - H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor - H04L 2463/082: applying multi-factor authentication - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 84/12: WLAN [Wireless Local Area Networks] - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00}) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A transaction card includes a near-field communication (NFC) component, a security component, a wireless component, one or more memories, and one or more processors communicatively coupled to the one or more memories. The device receives a signal from a user device attempting to access a secure application, and energizes the NFC component based on the signal received from the user device. The device causes the security component to generate an encrypted code based on the NFC component being energized, and provides, via the security component, the encrypted code to the wireless component. The device provides, via the wireless component, the encrypted code to the user device to permit the user device to utilize the encrypted code as authentication for accessing the secure application. ## Claims ### Claim 1 A user device, comprising: one or more memories; and one or more processors communicatively coupled to the one or more memories, configured to cause the user device to: generate a signal associated with a request to access an application; receive, in response to the generated signal and based on a transaction card being within a threshold proximity to the user device, an encrypted code from the transaction card; provide the encrypted code to another device; and receive, from the other device, access to the application. ### Claim 2 (depends on 1) The user device of claim 1, wherein the one or more processors are further configured to cause the user device to: provide the request to the other device. ### Claim 3 (depends on 1) The user device of claim 1, wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard. ### Claim 4 (depends on 1) The user device of claim 1, wherein the one or more processors are further configured to cause the user device to: decrypt the encrypted code to generate a code; and provide, for display, the code. ### Claim 5 (depends on 4) The user device of claim 4, wherein the one or more processors are further configured to cause the user device to: provide the code to the other device. ### Claim 6 (depends on 1) The user device of claim 1, wherein the encrypted code represents one authentication factor for two factor authentication. ### Claim 7 (depends on 1) The user device of claim 1, wherein the one or more processors are further configured to cause the user device to: provide, for display, information associated with the application based on access to the application being received. ### Claim 8 A method, comprising: generating, by a user device, a signal associated with a request to access an application; receiving, by the user device and in response to the generated signal, an encrypted code from a transaction card based on the transaction card being within a threshold proximity to the user device; providing, by the user device, the encrypted code to another device; and receiving, from the other device, access to the application. ### Claim 9 (depends on 8) The method of claim 8, further comprising: providing the request to the other device. ### Claim 10 (depends on 9) The method of claim 9, wherein the request includes authentication information associated with a user. ### Claim 11 (depends on 9) The method of claim 9, wherein the generated signal is generated based on providing the request to the other device. ### Claim 12 (depends on 9) The method of claim 9, wherein authentication information in the request represents a first authentication factor of a two factor authentication; and wherein the encrypted code represents a second authentication factor of the two factor authentication. ### Claim 13 (depends on 8) The method of claim 8, further comprising: providing, for display, information associated with the application based on receiving access to the application. ### Claim 14 (depends on 8) The method of claim 8, wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard. ### Claim 15 A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising: one or more instructions that, when executed by one or more processors of a user device, cause the user device to: generate a signal associated with a request to access an application; receive, in response to the generated signal and based on a transaction card being within a threshold proximity to the user device, an encrypted code from the transaction card; provide the encrypted code to another device; and receive, from the other device, access to the application. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the user device to: provide the request to the other device. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the generated signal includes an electromagnetic signal based on a short-range wireless technology standard. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the user device to: decrypt the encrypted code to generate a code; and provide, for display, the code. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the encrypted code represents one authentication factor for two factor authentication, and wherein authentication information in the request represents another authentication factor for the two factor authentication. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the user device to: provide, for display, information associated with the application based on access to the application being received.