Systems and methods for secure read-only authentication
AssigneeCapital One Services, LLC
InventorsKevin OSBORN, Kevin KELLY
Life of this patent
Estimating the term…
Abstract
A system for authenticating a user with a mobile device comprising a memory storing instructions, and a processor in communication with a network. The processor may be configured to execute the stored instructions to receive, from a mobile device, an authentication request; obtain, from a database, a permanent identifier associated with a transaction card; generate a temporary identifier associated with the transaction card; generate an expected value by encrypting the permanent identifier and the temporary identifier; verify the expected value against an encrypted value received from the mobile device; and transmit an authorization command to the mobile device.
Claims41
A transaction card comprising:
- a radio frequency transmitter;
- a clock generator coupled to the radiofrequency transmitter and having a dynamic frequency configured to cycle on while the transmitter is transmitting and to cycle off while the transmitter is not transmitting;
- and
- a near field communication tag coupled to the clock generator and storing a permanent identifier and a temporary identifier, the temporary identifier comprising a numerical value and a counter value.
A transaction card comprising:
- a radiofrequency transmitter;
- a near field communication tag coupled to the radiofrequency transmitter;
- and
- a real time clock coupled to the near field communication tag and powered by a power source, wherein:
- the near field communication tag is configured to store a permanent identifier and a temporary identifier;
- and
- the near field communication tag is configured to increment the temporary identifier by a value of the real time clock when the radiofrequency transmitter is transmitting.
A transaction card comprising:
- a radiofrequency transmitter;
- a near field communication tag coupled to the radiofrequency transmitter and configured to store a permanent identifier and a temporary identifier;
- and
- a microprocessor coupled to the near field communication tag and powered by a power source, the microprocessor being configured to calculate update values upon transmissions by the transmitter.
21-40. (canceled)
A non-transitory computer readable medium including instructions, which, when executed by a processor, cause the processor to perform a method for authenticating a user with a card, the method comprising:
- receiving a request for authentication;
- generating a counter value;
- generating a generated encrypted value by encrypting the counter value and a private key associated with the card;
- receiving a received encrypted value;
- and
- authenticating the user based on a comparison of the generated encrypted value and the received encrypted value.
A card, the card comprising:
- a microprocessor;
- a radio frequency transmitter coupled to the microprocessor, the radio frequency transmitter configured to transmit a notification signal to the microprocessor;
- and
- a near field communication tag coupled to the microprocessor and to the radio frequency transmitter, the near field communication tag storing a private key and a counter value;
- wherein, upon receipt of the notification signal, the microprocessor is configured to:
- increment the counter value;
- and
- transmit the incremented counter value to the near field communication tag;
- and
- wherein the near field communication tag is configured to:
- receive, from the microprocessor, the incremented counter value;
- generate an encrypted value based on the private key and the incremented counter value;
- and
- provide the encrypted value to the radio frequency transmitter for transmission.
A computer-implemented method for authenticating a user with a card, the method comprising:
- receiving a request for authentication;
- generating a counter value;
- generating a generated encrypted value by encrypting the counter value and a private key associated with the card;
- receiving a received encrypted value;
- and
- authenticating the user based on a comparison of the generated encrypted value and the received encrypted value.
Dependencies are inferred from the claim text.