US 12,707,270 B2Granted

Techniques for call authentication

AssigneeCapital One Services, LLC

InventorsJeffrey Rule, Gaurang Bhatt, Rocky Guo, Lukiih Cuan

Life of this patent

Estimating the term…

Loading patent…

Abstract

Various embodiments described herein are directed towards authenticating calls by using one or more keys associated with a specific user. In examples, the user is the sender of a call. In various embodiments, when a call is made, an identifying payload is encrypted using a private key associated with the user. The encrypted identifying payload is appended to the call data stream. The identifying payload may be decrypted with a public key. In embodiments, the identifying payload may be verified. In various embodiments, further authentication methods may be performed by using an object such as a contactless card to provide one or more components of the identifying payload and/or keys. In embodiments, a connection may be made between the sender and the intended recipient of a call based on the verification of the identifying payload.

Claims20

Dependent claims

A computing device, comprising:

a memory configured to store instructions;
and
processing circuitry coupled with the memory, the processing circuitry configured to execute the instructions, and when executed, the instructions to cause processing circuitry to:
receive encrypted data from a contactless card, wherein the encrypted data is encrypted using a dynamic key generated using a counter of the contactless card;
generate a call data stream comprising the encrypted data and a call number;
send the call data stream to a service provider system or a second computing device to establish a communication connection with the second computing device, wherein the service provider system or the second computing device is configured to decrypt the encrypted data by generating another dynamic key using a counter maintained by the service provider system or the second computing device;
and
establish the communication connection with the second computing device based on a successful authentication performed by the service provider system or the second computing device utilizing the call data stream,
wherein the encrypted data is encrypted with a diversified pair of keys generated by the contactless card, wherein the diversified pair of keys includes the dynamic key, and the service provider system or second computing device is configured to decrypt the encrypted data by generating another pair of diversified keys to authenticate information in the encrypted data, wherein the another pair of diversified keys includes the another dynamic key.

6 more elements

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to:

receive encrypted data from a contactless card, wherein the encrypted data is encrypted using a dynamic key generated using a counter of the contactless card;
generate a call data stream comprising the encrypted data and a call number;
send the call data stream to a service provider system or a second computing device to establish a communication connection with the second computing device, wherein the service provider system or the second computing device is configured to decrypt the encrypted data by generating another dynamic key using a counter maintained by the service provider system or the second computing device;
and
establish the communication connection with the second computing device based on a successful authentication performed by the service provider system or the second computing device utilizing the call data stream,
wherein the encrypted data is encrypted with a diversified pair of keys generated by the contactless card, wherein the diversified pair of keys includes the dynamic key, and the service provider system or second computing device is configured to decrypt the encrypted data by generating another pair of diversified keys to authenticate information in the encrypted data, wherein the another pair of diversified keys includes the another dynamic key.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/227,435Filed 28 Jul 2023 · continuation
Priority: 19 Jul 2019
Published: US 2024/0040384 A11 Feb 2024
Granted: 11 Aug 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification27 codes

H04W 12/04
Security arrangements; Authentication; Protecting privacy or anonymity: key management, e.g. using generic bootstrapping architecture [GBA]
H04W 12/50
Security arrangements; Authentication; Protecting privacy or anonymity: secure pairing of devices
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal

Family

Application16/517,074Parent of this continuation · filed 19 Jul 2019
Application16/656,232Parent of this continuation · filed 17 Oct 2019
US 10,506,426 B1Parent of this continuation · filed 10 Dec 2019
Application16/849,429Parent of this continuation · filed 15 Apr 2020
US 10,667,128 B1Parent of this continuation · filed 26 May 2020
Application17/495,313Parent of this continuation · filed 6 Oct 2021
US 11,172,355 B2Parent of this continuation · filed 9 Nov 2021
US 2024/0040384 A1Pre-grant publication · published 1 Feb 2024
US 11,729,624 B2Parent of this continuation
US 2021/0021991 A1Published application
US 2022/0030435 A1Published application
US 12,707,270 B2This patent

From the US filing history. Foreign family members aren’t listed.