# US 12,597,012 B2 · Server-side contactless card activation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,597,012 B2
- Document ID: US12597012B2
- Status: Granted
- Kind: B2
- Application number: 18/524,866
- Filed: 2023-11-30
- Published: 2024-03-21
- Granted: 2026-04-07
- Earliest claimed: 2020-11-03
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Jeffrey Rule; Wayne Lutz
- Web page: https://patentgrep.com/patent/US12597012B2

## CPC

- G06Q 20/354: {Card activation or deactivation}
- G06Q 20/352: {Contactless payments by cards}
- G06Q 20/355: {Personalisation of cards for use}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/3829: {involving key management}
- G06Q 2220/00: Business processing using cryptography
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Systems, apparatuses, computer-readable media, and methods are provided for activating a contactless card. A server may transmit, to a web browser on a client device, a web page. The server may receive, from the web browser, a request to activate a contactless card, the request including a cryptogram. The server may decrypt the cryptogram based on a key associated with the contactless card. The server may transition, based on the decryption of the cryptogram, the contactless card from an inactive payment state to an active payment state. The server may transmit, to the web page and based on the transition of the contactless card from the inactivated payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

## Claims

### Claim 1

A method, comprising:
transmitting, by a server to a web browser on a client device, a web page;
receiving, by the server from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;
encrypting, by the server, an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;
decrypting, by the server based on the diversified key, the encrypted data;
transitioning, by the server based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database that the contactless card is in the active payment state; and
transmitting, by the server to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

### Claim 2 (depends on 1)

The method of claim 1 wherein the unencrypted data includes an unencrypted customer identifier.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
prior to transitioning the contactless card:
receiving, by the server, a first request to process a payment using the contactless card; and
rejecting, by the server, the first request based on the contactless card being in the inactive payment state; and
subsequent to transitioning the contactless card:
receiving, by the server, a second request to process a payment with the contactless card; and
processing, by the server, the second request based on the contactless card being in the active payment state.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
identifying, in the activation request, an indication specifying that the encrypted data and the unencrypted data were read from the contactless card.

### Claim 5 (depends on 1)

The method of claim 1, wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the server transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
identifying, by the server based on the unencrypted data, a copy of the card master key for the contactless card, wherein the copy of the card master key is stored on the server.

### Claim 7

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:
transmit, to a web browser on a client device, a web page;
receive, from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;
encrypt an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;
decrypt, based on the diversified key, the encrypted data;
transition, based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database that the contactless card is in the active payment state; and
transmit, to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

### Claim 8 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions further cause the processor to, prior to transitioning the contactless card:
receive a first request to process a payment using the contactless card; and
reject the first request based on the contactless card being in the inactive payment state.

### Claim 9 (depends on 8)

The computer-readable storage medium of claim 8, wherein the instructions further cause the processor to, subsequent to transitioning the contactless card:
receive a second request to process a payment with the contactless card; and
process the second request based on the contactless card being in the active payment state.

### Claim 10 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions further cause the processor to:
identify, in the activation request, an indication specifying the encrypted data and the unencrypted data were read from the contactless card.

### Claim 11 (depends on 7)

The computer-readable storage medium of claim 7, wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the processor transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

### Claim 12 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions further cause the processor to:
identify, based on the unencrypted data, a copy of the card master key for the contactless card.

### Claim 13

A computing apparatus comprising:
a processor; and
a memory storing instructions that, when executed by the processor, cause the processor to:
transmit, to a web browser on a client device, a web page;
receive, from the web browser, an activation request to activate a contactless card, the activation request comprising both encrypted data and unencrypted data associated with the contactless card;
encrypt an incremented counter value and a card master key associated with the unencrypted data to generate a diversified key;
decrypt, based on the diversified key, the encrypted data;
transition, based on decrypting the encrypted data, the contactless card from an inactive payment state to an active payment state by storing an indication in a database in the memory that the contactless card is in the active payment state; and
transmit, to the web page and based on transitioning the contactless card from the inactive payment state to the activated payment state, an indication to activate a payment applet of the contactless card.

### Claim 14 (depends on 13)

The computing apparatus of claim 13, wherein the instructions further cause the processor to, prior to transitioning the contactless card:
receive a first request to process a payment using the contactless card; and
reject the first request based on the contactless card being in the inactive payment state.

### Claim 15 (depends on 14)

The computing apparatus of claim 14, wherein the instructions further cause the processor to, subsequent to transitioning the contactless card:
receive a second request to process a payment with the contactless card; and
process the second request based on the contactless card being in the active payment state.

### Claim 16 (depends on 13)

The computing apparatus of claim 13, wherein the instructions further cause the processor to:
identify, in the activation request, an indication specifying that the encrypted data and the unencrypted data were read from the contactless card.

### Claim 17 (depends on 13)

The computing apparatus of claim 13, wherein the indication to activate the payment applet of the contactless card includes a response for processing by the web page to determine whether the processor transitioned the contactless card from the inactive payment state to the active payment state and, based thereon, to generate an instruction to activate the payment applet of the contactless card.

### Claim 18 (depends on 13)

The computing apparatus of claim 13, wherein the instructions further cause the processor to:
identify, based on the unencrypted data, a copy of the card master key for the contactless card.