US 11,989,724 B2
Systems and methods for cryptographic authentication of contactless cards using risk factors
Kevin Osborn, Newton Highlands, MA (US); Jeffrey Rule, Chevy Chase, MD (US); James Ashfield, Midlothian, VA (US); and Srinivasa Chigurupati, Long Grove, IL (US)
Assigned to Capital One Services LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Aug. 27, 2021, as Appl. No. 17/459,121.
Application 17/459,121 is a continuation of application No. 16/653,420, filed on Oct. 15, 2019, granted, now 11,144,915.
Application 16/653,420 is a continuation of application No. 16/351,365, filed on Mar. 12, 2019, granted, now 10,489,781, issued on Nov. 26, 2019.
Application 16/351,365 is a continuation in part of application No. 16/205,119, filed on Nov. 29, 2018, granted, now 10,581,611, issued on Mar. 3, 2020.
Claims priority of provisional application 62/740,352, filed on Oct. 2, 2018.
Prior Publication US 2021/0390536 A1, Dec. 16, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06Q 20/38 (2012.01); G06Q 20/34 (2012.01); H04L 9/08 (2006.01)
CPC G06Q 20/38215 (2013.01) [G06Q 20/352 (2013.01); G06Q 20/3829 (2013.01); H04L 9/0822 (2013.01); H04L 2209/56 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An authentication system, comprising:
a server comprising one or more processors coupled to a memory,
wherein the server is configured to:
identify a transaction between an account and a merchant,
compare the transaction with a historical transaction pattern for the account, wherein the transaction is conducted at a time that is inconsistent with the historical transaction pattern,
identify the transaction as high risk based on the comparison,
transmit an authentication request,
receive, responsive to the authentication request, a cryptogram,
generate an authentication diversified key based on a master key and a unique identifier,
generate a session key based on the authentication diversified key,
verify the cryptogram based on the session key using a cryptographic algorithm, and
authorize the transaction based on the verified cryptogram.