Methods and devices for preregistered parallel fido keys for issuer authentication

A contactless card, comprising:

• a memory to store executable instructions thereon;
• and
• a processing circuit to execute the executable instructions, which when executed by the processing circuit causes the processing circuit to:
• send an access request to an authentication server, the access request being associated with a user account associated with the contactless card;
• receive, from the authentication server, a Fast Identity Online (FIDO) challenge;
• sign a FIDO response to the FIDO challenge with encrypted data, the encrypted data being derived from a FIDO secret key stored on the memory of the contactless card;
• send the FIDO response with the encrypted data to the authentication server for processing;
• receive an indication that the authentication server has determined that the encrypted data correspond to expected data for the user account;
• and
• in response to receiving the indication, process the access request with an application server in communication with the contactless card.

An authentication server, comprising:

• a memory to store executable instructions thereon;
• a processing circuit to execute the instructions, which when executed cause the processing circuit to:
• receive an access request from a transaction server in communication with a contactless card associated with a user account, wherein the authentication server is also in communication with the contactless card;
• in response to receiving the access request, send a Fast Identity Online (FIDO) challenge to the contactless card;
• receive, from the contactless card, a FIDO response to the FIDO challenge, the FIDO response being signed by the contactless card with encrypted data derived from a FIDO secret key stored on memory of the contactless card;
• determine whether the encrypted data corresponds to expected data for the user account;
• and
• in response to the encrypted data corresponding to the expected data, grant the access request from the user account associated with the contactless card.