Capital One Services, LLC

Jeffrey Carlyle Wieker

Clayton Johnson

Luis De La Rosa

Daniel Tesser

Daniel Alan Jarvis

Lawrence Hutchison Douglas, Jr

Patrick Zearfoss

Esther Scott

Zainab Zaki

Paul Y Moreton

Kevan Emmott

Pavel Fort

Eric Medin

Kaushal Wadhwani

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain, create, and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data.

Systems and methods for data access control of secure memory using a short-range transceiver

Disclosed embodiments pertain to systems and methods related to user authentication with a virtual payment card. A virtual card number can be requested as a login credential for a user. A virtual card number can be transmitted through a credit card payment network to a financial institution that issued the virtual card for payment authorization. The user can subsequently be authenticated in response to a granted payment authorization by the financial institution. The financial institution can execute a machine learning model trained to infer fraud based on a usage pattern associated with a virtual card number. Granting or denying payment authorization can depend on a confidence score returned by the model regarding the likelihood of fraud. A virtual card number associated with authentication can include one or more distinguishing characteristics in one instance. Further, virtual card numbers can include use restrictions in time and location.

Virtual card number as a login credential

Programmable cards, computer-readable media, and systems are disclosed for token payment. For example, a programmable card for token payment, according to some embodiments, may include an antenna and a contact interface. The card may be configured to store, in the rewritable memory, a token transmitted from a user device via a first near field communication (NFC) signal received by the antenna, and provide the stored token to a point of sales terminal via a second NFC signal transmitted by the antenna or via the contact interface.

Programmable card for token payment and systems and methods for using programmable card

In some implementations, a mobile device may receive, from a first sensor of the mobile device, measurements indicating a location of the mobile device. The mobile device may further receive, from a second sensor of the mobile device, measurements associated with a grip of the user on the mobile device. Accordingly, the mobile device may input indicators of the location and the grip to a model that outputs an indication associated with suspicious activity. The mobile device may present, while the user is viewing a screen associated with an application using the model, one or more prompts. The mobile device may therefore determine whether to allow the user to continue viewing the screen based on one or more responses to the one or more prompts.

Dynamic user authentication

In certain aspects, the disclosed implementations include methods and systems for dynamically generating and providing transaction affinity recommendation data. In certain implementations, the transaction affinity recommendation data may include information that identifies a target merchant and associated merchant promotion data that may be generated based on a dynamic analysis of transaction data corresponding to an account record. The disclosed implementations may determine temporal relationships between pairs of sequential transactions corresponding to the account record, and based on such relationships, may identify pairs of transactions involving separate merchants. The disclosed implementations may determine affinity relationships associated with one or more pairs of the temporally related transactions and a target merchant, and based on such relationships, generate and provide the transaction affinity recommendation data.

Systems and methods for providing transaction affinity information

In some embodiments, an entity-restricted access token may be bound to an entity set. In some embodiments, use of an entity-restricted access token may be detected for an action related to a first entity. Based on the detected use of the token, a plurality of entity sets associated with the first entity may be determined, and a notification (e.g., requesting selection from among the entity sets) may be presented to a mobile device of a user. Based on the user selection obtained via the notification, the token may be bound to the user-selected entity set such that subsequent use of the entity-restricted access token is restricted to actions related to entities of the user-selected entity set (e.g., the first entity and one or more additional entities related to the first entity).

Methods and systems for binding entity-restricted access tokens

Aspects described herein may provide detection of a physical characteristic of a credential, thereby allowing for authentication of the credential. According to some aspects, these and other benefits may be achieved by detecting the physical characteristic with the credential. An image of a credential may be received. An optical characteristic of a secure feature of the credential may be determined. An expected optical characteristic of the secure feature may be determined based on known properties of the secure feature. A determination as to whether the credential is authentic may be based on a comparison of the determined optical characteristic of the secure feature to the expected optical characteristic of the secure feature.

Authentication of a physical credential

In some implementations, a credential device may receive a request to generate a virtual credential from a user device associated with a first unique identifier, wherein the request includes a second unique identifier associated with a terminal to receive the virtual credential. The credential device may generate the virtual credential based on the request and a primary credential associated with the first unique identifier, wherein the virtual credential is associated with the primary credential and valid only for an entity associated with the terminal. The credential device may transmit information associated with the virtual credential to the terminal associated with the second unique identifier.

Secure contactless credential exchange

In certain aspects, the disclosed implementations include methods and systems for dynamically generating and determining transaction affinity relationship information associated with a set of merchants involved in a set of transactions. In certain implementations, the transaction affinity relationship information may reflect affinity relationships between merchant chains in a merchant affinity network. The disclosed implementations may receive an adjustment to an affinity relationship associated with a merchant chain, and based on the adjustment, predicts one or more changes to affinity relationships associated with other merchant chains in the merchant affinity network.

Systems and methods for providing predictive affinity relationship information

Methods and systems are disclosed for payment authentication. For example, a method may include: the method comprising: storing a first device fingerprint in association with a token representing a primary account number, the first device fingerprint being derived from a device attribute of a user device and behavioral biometric data derived from a behavioral pattern of a user in using the user device; receiving an authentication request indicative of the token and a second device fingerprint generated by a customer device associated with a customer of a merchant, the authentication request being associated with a transaction between the merchant and a customer using the token; identifying the stored first device fingerprint based on the token indicated by the authentication request; and determining whether the second device fingerprint matches the stored first device fingerprint.

Systems and methods for payment authentication

A computer-implemented method to enable short-range wireless communication via a webpage on a computing device includes receiving, via a web-browser executing on the computing device, from the webpage, a first request to execute a computer-executable instruction, the computer-executable instruction requests data from an enterprise server. The method also includes triggering, in response to a second request from the enterprise server to authenticate the first request, the web-browser to execute a predetermined computer program. The method also includes scanning, by the predetermined computer program a cryptogram from a contactless card to authenticate the cryptogram and cause the enterprise server to send the data. The method also includes executing, via the web-browser, the computer-executable instruction from the first request in response to receiving the data sent by the enterprise server.

Contactless card-based authentication via web-browser

An identity verification system may include a contactless card comprising a processor and a memory, and one or more applications comprising instructions for execution on one or more devices. The contactless card may be associated with a first user. A first application may be configured to transmit, after entry of the contactless card into a communication field, identity data. A second application may be configured to receive a notification based on an identity verification process. The notification may comprise an option indicative of requested access to specified information about the first user, the option further including a choice to accept or decline access to the specified information about the first user. The first application may be configured to receive the requested access to specified information about the first user based on selection of the option.

Growing community of inventors

McLean, VA, United States of America

Jeffrey Carlyle Wieker