Systems and methods for cryptographic authentication of contactless cards
AssigneeCapital One Services, LLC
InventorsKevin Osborn, James Ashfield, Srinivasa Chigurupati, Jeffrey Rule
Life of this patent
Estimating the term…
Abstract
Example embodiments of systems and methods for data transmission between a contactless card and a client device in support of a FIDO authentication are provided. In an embodiment, upon receipt of a challenge issued by a server in connection with a pending transaction, the contactless card may authorize the client device to utilize a FIDO private key to respond to the challenge. If the response to the challenge is successful, the FIDO authentication may proceed and the transaction may be completed.
Claims21
1-48. (canceled)
A method, comprising:
- receiving, by a client application comprising instructions for execution on a client device, a verification from a contactless card, wherein:
- the verification permits the use of a Fast Identity Online (FIDO) private key, and
- the client device comprises a processor, a memory, and a communication interface;
- generating, by the client application using a master key and a diversified key, a FIDO key pair including the FIDO private key and a FIDO public key;
- and
- signing, by the client application, a challenge using the FIDO private key.
A system, comprising:
- a processor in data communication with a memory,
- wherein the processor is configured to:
- receive a verification permitting the use of a Fast Identity Online (FIDO) private key;
- generate, using a master key and a diversified key, a FIDO key pair including the FIDO private key and a FIDO public key;
- and
- sign a challenge using the FIDO private key.
A non-transitory memory storing a client application, a master key, and a diversified key, wherein:
- the client application comprises instructions for execution on a client device comprising a processor, a memory, and a communication interface, and
- the client application is configured to:
- receive a verification permitting the use of a Fast Identity Online (FIDO) private key;
- generate, using a master key and a diversified key, a FIDO key pair including the FIDO private key and a FIDO public key;
- and
- sign a challenge using the FIDO private key.
Dependencies are inferred from the claim text.