US 2026/0254635 A1Published application

Systems and methods for verifying and managing multiple card versions

AssigneeCapital One Services, LLC

InventorsKevin Osborn, Ian Prince, Tomasz Ondrusz, Sophie Bermudez

Life of this patent

Estimating the term…

Loading patent…

Abstract

The disclosed systems and methods are directed to secure retrieval of proprietary data associated with converted applet file stored on a contactless card. The data is stored in a hidden file not referenced in the capability container file. The file may then be directly read by a NFC command specifying the name of the file, for example, as a command parameter. One aspect of the disclosed systems and methods involves an access control bit associated with a specific file. The access setting can be statically set at personalization time. Another aspect involves resetting the flag bit following every read operation directed at the proprietary file. The access state can then be reset to an active state by an explicit write instruction generated as an NDEF encapsulated write command. Another aspect may include a command sequence for setting the access flag and returning the version number during a single read operation.

Claims20

Dependent claims

A system for enabling applet version identification during active life cycle of a contactless card, the system comprising:

a contactless card comprising
a processor;
a memory storing a plurality of cryptographic key comprising a first key, a second key, a third key, a first data file and one or more data parameters comprising an access flag for the first data file, wherein the first data file stores an applet version number for a first applet;
an NFC tag for wireless communication with an intermediary device running a first application;
and
a server communicatively coupled with the contactless card via the intermediary device;
the server comprising:
a processor;
a memory storing a second application in communication with the first application running on the intermediary device, and one or more cryptographic keys comprising the first key, wherein the processor of the server is configured to:
generate a write command for setting a value of the access flag associated with the first file;
generate a message authentication code (MAC) for the write command using the first key;
transmit a data packet comprising the write command and the generated MAC, via the first application, to the first applet executing on the contactless card, wherein the data packet is validated by the first applet using the first key, and wherein upon successful validation of the data packet, the access flag is set to the value specified in the write command.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 19/064,146Filed 26 Feb 2025
Published: 27 Aug 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 9/0897
Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage: involving additional devices, e.g. trusted…
H04L 9/0643
The encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions;…
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…
H04L 9/3242
Using cryptographic hash functions: involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC