Secure authentication based on passport data stored in a contactless card

A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a processor, cause the processor to:

• receive, by an application executing on a processor of a device, a request to perform an operation associated with an account using the application;
• receive, by the application, encrypted data from a contactless card associated with the account;
• receive, by the application from an authentication server, an indication specifying that the authentication server verified the encrypted data;
• determine, by the application based on a first rule of a plurality of rules, that authentication using government-issued identification data is required to perform the operation via the application;
• receive, by the application, encrypted government-issued identification data and a digital signature for the encrypted government-issued identification data from the contactless card, the encrypted government-issued identification data for a government-issued identification associated with the account;
• decrypt, by the application, the encrypted government-issued identification data;
• validate, by the application, the digital signature based on a public key;
• and
• initiate, by the application, performance of the operation based on the received indication specifying that the authentication server verified the encrypted data, the decryption of the encrypted government-issued identification data, and the validation of the digital signature.

A computing apparatus comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the processor to:
• receive, by an application executing on a processor of a device, a request to perform an operation associated with an account using the application;
• receive, by the application, encrypted data from a contactless card associated with the account;
• receive, by the application from an authentication server, an indication specifying that the authentication server verified the encrypted data;
• determine, by the application based on a first rule of a plurality of rules, that authentication using government-issued identification data is required to perform the operation via the application;
• receive, by the application, encrypted government-issued identification data and a digital signature for the encrypted government-issued identification data from the contactless card, the encrypted government-issued identification data for a government-issued identification associated with the account;
• decrypt, by the application, the encrypted government-issued identification data;
• validate, by the application, the digital signature based on a public key;
• and
• initiate, by the application, performance of the operation based on the received indication specifying that the authentication server verified the encrypted data, the decryption of the encrypted government-issued identification data, and the validation of the digital signature.