# US 12,603,163 B2 · Secure verification of medical status using a contactless card

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,603,163 B2
- Document ID: US12603163B2
- Status: Granted
- Kind: B2
- Application number: 18/733,999
- Filed: 2024-06-05
- Published: 2024-09-26
- Granted: 2026-04-14
- Earliest claimed: 2020-10-30
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Kevin Osborn; Jeffrey Rule
- Web page: https://patentgrep.com/patent/US12603163B2

## CPC

- G16H 10/65: stored on portable record carriers, e.g. on smartcards, RFID tags or CD
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- G16H 50/30: for calculating health indices; for individual health risk assessment
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/126: {the source of the received data}
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 12/108: Source integrity
- H04W 12/47: using near field communication [NFC] or radio frequency identification [RFID] modules
- H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems, methods, articles of manufacture, and computer-readable media for verification of medical status using a contactless card. An application may receive a request specifying a subject and a medical condition. The application may receive a cryptogram from a contactless card. The application may receive a decryption result from a server and determine that the server decrypted the cryptogram. The application may receive, from the contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature. The application may decrypt the digital signature based on the public key of the digital signature and verify the medical attestation based on the decrypted digital signature. The application may determine, based on the verification of the medical attestation, that the subject is immune to the medical condition. The application may output a result that the subject is immune to the medical condition.

## Claims

### Claim 1

A method, comprising:
receiving, by an application from a contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature;
extracting, from the medical attestation, an encrypted identification (ID) and a counter value associated with the encrypted ID based on a rule to validate the encrypted ID of the medical attestation;
transmitting the encrypted ID and the counter value to a server to validate the encrypted ID;
determining, by the application based on a decryption result received from the server, that the server decrypted the encrypted ID;
determining, by the application, that a public key certificate chain for the digital signature does not include a digital signature of a first predefined entity of a plurality of predefined entities approved to sign the medical attestation, wherein the first predefined entity is specified by a first rule of a plurality of rules;
determining, by the application based on a second rule of the plurality of rules and the determination that the public key certificate chain does not include the digital signature of the first predefined entity, a second predefined entity of the plurality of predefined entities approved to sign the medical attestation; and
determining, by the application, that the public key certificate chain includes a first digital signature of the second predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the second predefined entity;
determining, based on determination that the digital signature includes the digital signature of the second predefined entity, a medical status of a person; and
transmitting, by the application to a recipient device based on the determination of the medical status of the person, an attestation result specifying the medical status of the person.

### Claim 2 (depends on 1)

The method of claim 1, wherein verifying the medical attestation further comprises:
decrypting, by the application, the digital signature based on the public key of the digital signature; and
verifying, by the application, the medical attestation based on the decrypted digital signature.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
determining, by the application based on a first rule of a plurality of rules, that the predefined entity of a plurality of predefined entities is approved to sign the medical attestation; and
determining, by the application, that a public key certificate chain for the digital signature includes a digital signature of the predefined entity, wherein the verification of the medical attestation is based on the determination that the public key certificate chain for the digital signature includes the digital signature of the predefined entity.

### Claim 4 (depends on 1)

The method of claim 1, further comprising: decoding, by the application, the medical attestation from a first data type to a second data type, the first data type different than the second data type.

### Claim 5 (depends on 1)

The method of claim 1, wherein the medical attestation comprises: (i) a unique customer identifier assigned to the person, (ii) a date of the medical attestation, (iii) the medical attestation of the person, and (iv) a second encrypted data generated by the contactless card, wherein the attestation result further specifies the date of the medical attestation.

### Claim 6 (depends on 5)

The method of claim 5, further comprising:
transmitting, by the application, the second encrypted data to the server; receiving, by the application from the server, a decryption result of the second encrypted data; and
determining, by the application based on the decryption result of the second encrypted data, that the server decrypted the second encrypted data, wherein the application further determines that the person is not immune to the medical condition based on the determination that the server decrypted the second encrypted data.

### Claim 7

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:
receive, from a contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature;
extract, from the medical attestation, an encrypted identification (ID) and a counter value associated with the encrypted ID based on a rule to validate the encrypted ID of the medical attestation;
transmit the encrypted ID and the counter value to a server to validate the encrypted ID;
determine, based on a decryption result received from the server, that the server decrypted the encrypted ID;
determine, by an application, that a public key certificate chain for the digital signature does not include a digital signature of a first predefined entity of a plurality of predefined entities approved to sign the medical attestation, wherein the first predefined entity is specified by a first rule of a plurality of rules;
determine, by the application based on a second rule of the plurality of rules and the determination that the public key certificate chain does not include the digital signature of the first predefined entity, a second predefined entity of the plurality of predefined entities approved to sign the medical attestation; and
determine, by an application, that the public key certificate chain includes a first digital signature of the second predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the second predefined entity;
determine, based on the determination that the digital signature includes the digital signature of the second predefined entity, a medical status of a person; and
transmit, to a recipient device based on the determination of the medical status of the person, an attestation result specifying the medical status of the person.

### Claim 8 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions to determine that the digital signature is from the predefined entity further comprise instructions that when executed by the processor cause the processor to:
decrypt the digital signature based on the public key of the digital signature; and verify the medical attestation based on the decrypted digital signature.

### Claim 9 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions further cause the processor to:
determine, based on a first rule of a plurality of rules, a first predefined entity of a plurality of predefined entities approved to sign the medical attestation; and
determine that a public key certificate chain for the digital signature includes a digital signature of the first predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the first predefined entity.

### Claim 10 (depends on 7)

The computer-readable storage medium of claim 7, wherein the instructions further configure the computer to:
decode the medical attestation from a first data type to a second data type, the first data type different than the second data type.

### Claim 11 (depends on 7)

The computer-readable storage medium of claim 7, wherein the medical attestation comprises: (i) a unique customer identifier assigned to the person, (ii) a date of the medical attestation, (iii) the medical attestation of the person, and (iv) a second encrypted data generated by the contactless card, wherein the attestation result further specifies the date of the medical attestation.

### Claim 12 (depends on 11)

The computer-readable storage medium of claim 11, wherein the instructions further cause the processor to:
transmit the second encrypted data to the server;
receive, from the server, a decryption result of the second encrypted data; and
determine, based on the decryption result of the second encrypted data, that the server decrypted the second encrypted data, wherein the processor further determines that the person is not immune to the medical condition based on the determination that the server decrypted the second encrypted data.

### Claim 13

A computing apparatus comprising:
a processor; and
a memory storing instructions that, when executed by the processor, cause the processor to:
receive, from a contactless card, a medical attestation, a digital signature of the medical attestation, and a public key of the digital signature;
extract, from the medical attestation, an encrypted identification (ID) and a counter value associated with the encrypted ID based on a rule to validate the encrypted ID of the medical attestation;
transmit the encrypted ID and the counter value to a server to validate the encrypted ID;
determine, based on a decryption result received from the server, that the server decrypted the encrypted ID;
determine, by an application, that a public key certificate chain for the digital signature does not include a digital signature of a first predefined entity of a plurality of predefined entities approved to sign the medical attestation, wherein the first predefined entity is specified by a first rule of a plurality of rules;
determine, by the application based on a second rule of the plurality of rules and the determination that the public key certificate chain does not include the digital signature of the first predefined entity, a second predefined entity of the plurality of predefined entities approved to sign the medical attestation; and
determine, by the application, that the public key certificate chain includes a first digital signature of the second predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the second predefined entity;
determine, based on the determination that the digital signature includes the digital signature of the second predefined entity, a medical status of a person; and
transmit, to a recipient device based on the determination of the medical status of the person, an attestation result specifying the medical status of the person.

### Claim 14 (depends on 13)

The computing apparatus of claim 13, wherein the instructions to verify the medical attestation further comprise instructions that when executed by the processor cause the processor to:
decrypt the digital signature based on the public key of the digital signature; and verify the medical attestation based on the decrypted digital signature.

### Claim 15 (depends on 13)

The computing apparatus of claim 13, wherein the instructions further cause the processor to:
determine, based on a first rule of a plurality of rules, a first predefined entity of a plurality of predefined entities approved to sign the medical attestation; and
determine that a public key certificate chain for the digital signature includes a digital signature of the first predefined entity, wherein the medical attestation is verified based on the determination that the public key certificate chain for the digital signature includes the digital signature of the first predefined entity.

### Claim 16 (depends on 13)

The computing apparatus of claim 13, further comprising instructions further cause the processor to:
decode the medical attestation from a first data type to a second data type, the first data type different than the second data type.

### Claim 17 (depends on 13)

The computing apparatus of claim 13, wherein the medical attestation comprises: (i) a unique customer identifier assigned to the person, (ii) a date of the medical attestation, (iii) the medical attestation of the person, and (iv) a second encrypted data generated by the contactless card, wherein the attestation result further specifies the date of the medical attestation.

### Claim 18 (depends on 13)

The computing apparatus of claim 13, further comprising instructions further cause the processor to:
decode the medical attestation from a first data type to a second data type, the first data type different than the second data type.

### Claim 19 (depends on 11)

The computer-readable storage medium of claim 11, wherein the instructions further configure the computer to:
transmit, by the application, the second encrypted data to the server; receiving, by the application from the server, a decryption result of the second encrypted data; and
determine, by the application based on the decryption result of the second encrypted data, that the server decrypted the second encrypted data, wherein the application further determines that the person is not immune to the medical condition based on the determination that the server decrypted the second encrypted data.

### Claim 20 (depends on 1)

The method of claim 1, further comprising:
validating, by the application, each digital signature of a plurality of public key certificates associated with the medical attestation.