Mobile web browser authentication and checkout using a contactless card

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor of a mobile device, cause the processor to:

• receive, by a merchant web page in a web browser, selection of a first financial institution of a plurality of financial institutions, wherein the merchant web page includes a plurality of form fields associated with a transaction;
• generate, by the merchant web page, a uniform resource identifier (URI) directed to an application, wherein the URI comprises a session identifier (ID) parameter associated with the transaction and a user ID parameter, wherein at least a portion of the URI is registered with the application and the first financial institution in a mobile operating system (OS) executing on the mobile device;
• responsive to receiving selection of the URI, launch the application by the mobile OS;
• authenticate, by the application, login credentials for an account associated with the first financial institution;
• associate, by the application, the user ID parameter and the session ID parameter with the account;
• receive, by the application, a cryptogram from a contactless card associated with the account;
• receive, by the application from a server, an indication specifying the server verified the cryptogram;
• launch, by the mobile OS based on the indication, the web browser;
• refresh, by the web browser, the merchant web page, wherein the refreshed merchant web page includes a virtual card number (VCN) in a first form field of the plurality of form fields;
• and
• process, by the merchant web page, the transaction based at least in part on the VCN in the first form field.

A computing apparatus comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the processor to:
• receive, by a merchant web page in a web browser, selection of a first financial institution of a plurality of financial institutions, wherein the merchant web page includes a plurality of form fields associated with a transaction;
• generate, by the merchant web page, a uniform resource identifier (URI) directed to an application, wherein the URI comprises a session identifier (ID) parameter associated with the transaction and a user ID parameter, wherein at least a portion of the URI is registered with the application and the first financial institution in a mobile operating system (OS) executing on the processor;
• responsive to receiving selection of the URI, launch the application by the mobile OS;
• authenticate, by the application, login credentials for an account associated with the first financial institution;
• associate, by the application, the user ID parameter and the session ID parameter with the account;
• receive, by the application, a cryptogram from a contactless card associated with the account;
• receive, by the application from a server, an indication specifying the server verified the cryptogram;
• launch, by the mobile OS based on the indication, the web browser;
• refresh, by the web browser, the merchant web page, wherein the refreshed merchant web page includes a virtual card number (VCN) in a first form field of the plurality of form fields;
• and
• process, by the merchant web page, the transaction based at least in part on the VCN in the first form field.