Systems and methods for device authentication and authorization
AssigneeCapital One Services, LLC
InventorsJeffrey Rule, Kaitlin Newman, Rajko Ilincic
Life of this patent
Estimating the term…
Abstract
Example embodiments of systems and methods for data transmission system between transmitting and receiving devices for use in a tap and walk store are provided. In an example embodiment, the transmitting device can generate a diversified key using the master key, protect a counter value and encrypt data prior to transmitting to the receiving device, which can generate the diversified key based on the master key and can decrypt the data and validate the protected counter value using the diversified key. Disclosed systems allow a user to purchase items utilizing the disclosed transmitting device.
Claims20
An authentication system, comprising:
- an authentication server comprising a processor and a memory;
- and
- a contactless card comprising a processor and a memory, the memory of the contactless card containing a card key,
- wherein the contactless card is configured to:
- generate an identification token,
- generate a session key using the card key,
- encrypt the identification token using the session key, and
- transmit, after an entry of the contactless card into a communication field generated by a receiving device, the identification token;
- and
- wherein the authentication server is configured to:
- receive, from the receiving device, an identification message comprising the identification token,
- authenticate the identification token,
- responsive to a successful authentication of the identification token, transmit, to a retail server, an authentication message,
- receive, from the retail server, an approval message, and
- transmit, to the receiving device, an authorization token.
An authentication method, comprising:
- generating, by a contactless card comprising a processor and a memory, the memory of the contactless card containing a card key, an identification token;
- generating, by the contactless card, a session key using the card key;
- encrypting, by the contactless card, the identification token using the session key;
- transmitting, by the contactless card after an entry of the contactless card into a communication field generated by a receiving device, the identification token;
- receiving, by an authentication server comprising a processor and a memory from the receiving device, an identification message comprising the identification token;
- authenticating, by the authentication server, the identification token;
- responsive to a successful authentication the identification token, transmitting, by the authentication server to a retail server, an authentication message;
- receiving, by the authentication server from the retail server, an approval message;
- and
- transmitting, by the authentication server to the receiving device, an authorization token.
An authentication server, comprising:
- a processor;
- and
- a memory,
- wherein the authentication server is configured to:
- receive, from a receiving device, an identification message comprising an identification token,
- authenticate the identification token,
- responsive to a successful authentication of the identification token, transmit, to a retail server, an authentication message,
- receive, from the retail server, an approval message, and
- transmit, to the receiving device, an authorization token.
Dependencies are inferred from the claim text.