Techniques for personal identification number management for contactless cards
AssigneeCapital One Services, LLC
InventorsSrinivasa Chigurupati, Kevin Osborn
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein provide techniques for secure PIN management for contactless cards using an application on a computing device such as a mobile computing device. In some embodiments, the computing device may have an application installed enabling the computing device to act as a secure endpoint that enables communication between the contactless card and a backend server to facilitate PIN management. For example, the application may enable a mobile device to be utilized to view and/or change the PIN associated with a contactless card that is brought in proximity of the mobile device.
Claims20
An apparatus, comprising:
- a processor;
- and
- memory comprising instructions that when executed by the processor, cause the processor to:
- authenticate a user based on credentials received via a user interface;
- detect a cryptogram received from a contactless card in proximity to the processor;
- determine the contactless card is associated with the user based on authentication of the cryptogram;
- present, via the user interface, a current personal identification number (PIN) associated with the contactless card based on authentication of the user and authentication of the cryptogram;
- determine to change the current PIN associated with the contactless card to an updated PIN;
- identify the updated PIN based on input received via the user interface;
- encrypt and then communicate the updated PIN to a server to associate the updated PIN with the contactless card;
- identify a PIN script received from the server in response to communication of the updated PIN to the server, wherein the PIN script is executable and configured in a binary format;
- receive a message authentication code (MAC) from the server;
- authenticate the PIN script based on the MAC received from the server;
- and
- communicate the PIN script to the contactless card to change a PIN stored on the contactless card from the current PIN to the updated PIN.
At least one non-transitory computer-readable medium comprising a set of instructions that, in response to being executed by a processor circuit, cause the processor circuit to:
- authenticate a user based on credentials received via a user interface;
- detect a cryptogram received from a contactless card in proximity to the processor;
- determine the contactless card is associated with the user based on authentication of the cryptogram;
- present, via the user interface, a current personal identification number (PIN) associated with the contactless card based on authentication of the user and authentication of the cryptogram;
- determine to change the current PIN associated with the contactless card to an updated PIN;
- identify the updated PIN based on input received via the user interface;
- encrypt and then communicate the updated PIN to a server to associate the updated PIN with the contactless card;
- identify a PIN script received from the server in response to communication of the updated PIN to the server, wherein the PIN script is executable and configured in a binary format;
- receive a message authentication code (MAC) from the server;
- authenticate the PIN script based on the MAC received from the server;
- and
- communicate the PIN script to the contactless card to change a PIN stored on the contactless card from the current PIN to the updated PIN.
A computer-implemented method, comprising:
- authenticating a user based on credentials received via a user interface;
- detecting a cryptogram received from a contactless card;
- determining the contactless card is associated with the user based on authentication of the cryptogram;
- presenting, via the user interface, a current personal identification number (PIN) associated with the contactless card based on authentication of the user and authentication of the cryptogram;
- determining to change the current PIN associated with the contactless card to an updated PIN;
- identifying the updated PIN based on input received via the user interface;
- encrypting and then communicating the updated PIN to a server to associate the updated PIN with the contactless card;
- identifying a PIN script received from the server in response to communication of the updated PIN to the server, wherein the PIN script is executable and configured in a binary format;
- receiving a message authentication code (MAC) from the server;
- authenticating the PIN script based on the MAC received from the server;
- and
- communicating the PIN script to the contactless card to change a PIN stored on the contactless card from the current PIN to the updated PIN.
Dependencies are inferred from the claim text.