Client device authentication using contactless legacy magnetic stripe data
AssigneeCapital One Services, LLC
InventorsEvan Lerner, Lara Mossler
Life of this patent
Estimating the term…
Abstract
A technique for generating a diversified encryption key for a contactless legacy magnetic stripe card is disclosed. The diversified key can be generated using a master key, a key diversification value and an encryption algorithm. In one example embodiment, the key diversification value can be provided by the user as a fingerprint, numeric code or photo. The user can provide the key diversification value to the card or a cellphone. The card can generate the diversified key using the user provided key diversification value. The card or the cellphone can transmit the user provided diversification value to the server and the server can regenerate the diversified key using the user provided diversification value.
Claims20
A computer readable non-transitory medium comprising computer-executable instructions that are executed on a client device comprising a processor, a memory, a transmitter, and a camera, the instructions comprising the steps of:
- transmitting, to a contactless card, a key diversification value and an algorithm selection value;
- receiving, from the contactless card, encrypted transmission data, wherein the encrypted transmission data represents transmission data encrypted by a cryptographic algorithm and a diversified key, and wherein the diversified key is generated using the key diversification value and a cryptographic algorithm associated with the algorithm selection value;
- transmitting, to a server, the encrypted transmission data, the key diversification value and the algorithm selection value, wherein the memory respectively stores a plurality of algorithm selection values in association with a plurality of fingerprint values;
- taking a photo of a user using the camera;
- and
- transmitting, to the server, the photo for performance of a facial recognition to determine whether the photo belongs to a user associated with the contactless card,
- wherein the facial recognition determines a facial expression of the user, and
- wherein the facial expression is associated with a key diversification value.
A method, comprising:
- transmitting, by an application comprising instructions for execution on a client device comprising a processor, a memory, a transmitter, and a camera to a contactless card, a key diversification value and an algorithm selection value;
- receiving, by the application from the contactless card, encrypted transmission data, wherein the encrypted transmission data represents transmission data encrypted by a cryptographic algorithm and a diversified key, and wherein the diversified key is generated using the key diversification value and a cryptographic algorithm associated with the algorithm selection value;
- transmitting, by the application to a server, the encrypted transmission data, the key diversification value, and the algorithm selection value, wherein the memory respectively stores a plurality of algorithm selection values in association with a plurality of fingerprint values;
- taking, by the application using the camera, a photo of a user;
- transmitting, by the application to the server, the photo;
- receiving, by the server from the application, the photo;
- and
- performing, by the server, a facial recognition to determine whether the photo belongs to a user associated with the contactless card,
- wherein the facial recognition determines a facial expression of the user, and
- wherein the facial expression is associated with a key diversification value.
A system, comprising:
- a contactless card comprising a card processor and a card memory;
- a client application comprising instructions for execution on a client device comprising a client device processor, a client device memory respectively storing a plurality of algorithm selection values in association with a plurality of fingerprint values, a client device transmitter, and a client device camera;
- and
- a server comprising a server processor and a server memory,
- wherein the contactless card:
- receives, from the client application, a key diversification value and an algorithm selection value,
- generates, using the key diversification value and a cryptographic algorithm associated with the algorithm selection value, a diversified key,
- encrypts, using a cryptographic algorithm and the diversified key, transmission data to yield as encrypted transmission data,
- transmits, to the client application, the encrypted transmission data, and wherein the client application:
- receives, from the contactless card, the encrypted transmission data,
- takes, using the client device camera, a photo of a user,
- transmits, to the server, the encrypted transmission data, the key diversification value, and the photo, and
- wherein the server:
- performs a facial recognition to determine whether the photo belongs to a user associated with the contactless card,
- wherein the facial recognition determines a facial expression of the user, and
- wherein the facial expression is associated with a key diversification value.
Dependencies are inferred from the claim text.