Capital One Services, LLC

Jeffrey Rule

Kevin Grant Osborn

Rajko Ilincic

Colin Hart

Wayne David Lutz

Kaitlin J Newman

Srinivasa Chigurupati

Daniel Herrington

Paul Y Moreton

James M Ashfield

Lara Mossler

Melissa Yoemans Heng

Charles Nathan Crank

Michael Bakr Mossoba

Jason Ji

Sophie Bermudez

Sarah Jane Cunningham

Latika Gulati

Kimberly Haynes

Andrew Cogswell

Lawrence H Douglas

Lukiih Cuan

Gaurang J Bhatt

Rocky Guo

Abdelkader M'Hamed Benkreira

Jackson Macomber

Lea Cody

James Zarakas

Saleem Ahmed Sangi

William Carroll

Kevin Widener

William Duane

Kevan Emmott

Ian Prince

David Kelly Wurmfeld

Timur Sherif

Abdelkader Benkreira

Steve Blanchet

Michelle S Olenoski

Walter Avery Miller

Stephane Lunati

Marisa Thomas

Amy Apponyi

Bryant Alan Yee

Cruz Vargas

Kaylyn S Gibilterra

Ryan Cuppernull

Jinlian Wang

Samuel Rapowitz

Thomas S Poole

George Bergeron

Clayton Johnson

Bob Uni Koshy

Shelton Smith

Kaush Kumar

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.

Secure password generation and management using NFC and contactless smart cards

Example embodiments of systems and methods for data transmission in a contactless card and client application are provided. The contactless card comprises a visual display, processor, and a memory which includes a first applet, unique identifier, and value. A client application comprises instructions for execution on a client device, and is in data communication with the contactless card via one or more communication fields. The contactless card may display the value, the unique identifier, and a first status on the visual display. The first applet may transmit data to the client application in response to one or more gestures by the contactless card within at least one of the fields. The client application may authenticate the received data. The contactless card may update the display via the one or more fields based on the authenticated data, and change the first status to a second status based on the updated display.

Systems and methods for cryptographic authentication of contactless cards

Example embodiments of systems and methods for data transmission between a contactless card and a server are provided. The card may include an applet, a counter, and a plurality of encryption keys. The applet may rotate the plurality of keys based on a predetermined key rotation, select one or more keys for a cryptographic operation, perform the operation using the selected keys and the counter to generate a cryptographic result, and transmit the result and the counter to the server. Upon receipt of the result, a server, in communication with the card and containing the plurality of encryption keys, may rotate the plurality of keys based on the predetermined key rotation, select one or more keys for decryption, wherein the keys selected by the server matches the keys selected by the applet, and perform the decryption on the result.

Systems and methods of key selection for cryptographic authentication of contactless cards

Techniques generally directed to performing verification techniques with one or more wireless interfaces based on a provided pattern.

Systems and techniques to perform verification operations with wireless communication

A secure smart card is described. The smart card can include a processor, a memory and a transceiver. The smart card can communicate with various terminals and store a digital signature and other information on the card. Another terminal can validate the information stored on the smart card using the digital signature. In certain embodiments, the terminal can also validate the information by using a blockchain. The advanced design of the smart card obviates the need for a network connection.

System and apparatus for encrypted data collection using RFID cards

A contactless card with power harvesting unit is described. The power harvesting unit is configured to harvest power from near field communication radio wave fields and supply power to a memory, processor, and communication circuit of the contactless card. In some embodiments, the contactless card may also include a capacitor for smoothing out power deliver or a rechargeable battery. The contactless card is configured to establish two-way communication with a secondary device and to store and execute applets. In some embodiments, the contactless card is a payment card which contains information associated with a primary profile and a secondary profile. The secondary profile may be activated using two-way communication if the primary profile is deactivated due to fraudulent activity.

Using the NFC field from a phone to power card to phone bluetooth communications

In a method for changing a user's bank account information in merchant account databases a server receives a login request including a user identification and first user authentication information. The server further receives a request to change bank account information from a first bank account to a second bank account for merchant accounts of the user and network login information for the first bank account. The server accesses an account information database for the first bank account and downloads transaction information for merchant transactions involving the first bank account. The server identifies a set of merchant user accounts involved in the merchant transactions and receives account login information for a data site associated with a selected account. The server accesses the data site and changes a bank account identification stored therein from the first bank account to the second bank account.

System and method for facilitating bank account information changes

Systems and methods for digital media-based user authentication are disclosed herein. In some aspects, the system may receive an authentication request. The system may transmit a user verification request based on the authentication request. The system may receive media recordings in response to the user verification request. The system may detect one or more features in the media recordings. The system may generate a plurality of risk metrics for the user based on generating risk metrics for the one or more features. The system may determine an authentication probability based on the plurality of risk metrics.

Systems and methods for digital media-based user authentication

Various embodiments are directed to overlaying relevant product information in augmented reality via the use of near-field communication (NFC) and a product selection system. A user may authenticate into an application or user profile. Information about the user in the user profile may be used to determine which products are relevant to the user. Information related to the relevant products may then be displayed to the user in augmented reality, which improves at least the overall shopping and in-store experience.

NFC enhanced augmented reality information overlays

An exemplary system, method, and computer-accessible medium can include, for example, storing on a first device a digital tag, the tag configured to be associated with at least one application on a second device, such that receipt of the tag on the second device launches the application on the second device; and emitting from the first device to a second device the digital tag; wherein the application on the second device is configured to launch in a special state when the second device is in at least one state from a pre-determined list of states.

Systems, methods, and computer-accessible mediums for repressing or turning off the read of a digital tag

Methods and systems for preventing unauthorized resource access. In some aspects, the system obtains, in real time, a first data stream between a user requesting access to resources in a user account and an agent. The system processes, using a first machine learning model, the first data stream to generate a confidence score. If the confidence score exceeds a threshold, the system generates a sandbox context configured to simulate output indicative of successful resource access. The system obtains a second data stream for the sandbox context and processes it using a second machine learning model to determine whether the communication between the agent and the user was malicious. If the communication was not malicious, the system removes the user account from the sandbox context and effects grant of resource access. Otherwise, the system reports the agent and the user account for further processing for attempts to obtain unauthorized user access.

Systems and methods for preventing unauthorized resource access

A method and related system may analyze metadata associated with a first set of transactions to determine whether to perform a second set of transactions. The method and related system may include determining a data category based on first device-provided data of a first database transaction indicating a first record associated with a second record, and may further include obtaining, based on whether the data category satisfies a first set of criteria, an identifier and an amount based on image data using a prediction model. The method may further include querying a database based on the identifier to obtain an indication that the identifier is mapped to an object category, validating the amount based on a result indicating whether the object category satisfies a second set of criteria, and causing a second transaction that changes fields of the first and second records.

Augmented data for security during record updates

In some embodiments, the present disclosure provides an exemplary method that may include steps of determining an identity of at least one user of a plurality of users based on a multi-factor authentication; utilizing an identity tokenizer to generate at least one temporary identity token associated with the identity of the user; transmitting the at least one temporary identity token to an external computing device for authentication; receiving an authenticated digital token from the external computing device; automatically utilizing the authenticated digital token to retrieve a plurality of data items of an account information; utilizing a security module to link the authenticated digital token and the plurality of data items; generating a unique-universal identifier associated with the security module and the authenticated digital token; and utilizing the unique-universal identifier and the security module associated with the authenticated digital token.

Computer-based systems configured to dynamically generate authentication steps to perform at least one action and methods of use thereof

Logic may provide enforce a rate limit for product offers and generate a product token associated for product authentication. Logic may determine a rate limit associated with the product based on an identity of the consumer in a cryptogram for a transaction. Logic may compare the rate limit with a quantity of purchases of the product with a payment instrument provided for payment for the transaction, the rate limit to limit purchases of the product via the payment instrument or by the consumer associated with the payment instrument. Logic may approve the transaction based on comparison of the rate limit in response to the rate limit being greater than purchases of the product. Logic may create a product token via the cryptogram, the product token encoded via the cryptogram, the product token to uniquely identify the product and logic may cause transmission of the product token to the consumer.

Methods and arrangements for proof of purchase

A merchant page in a browser may receive selection of a first financial institution. The merchant page may generate a uniform resource identifier (URI) directed to an application. At least a portion of the URI may be registered with the application and the first financial institution in a mobile operating system. Responsive to receiving selection of the URI, the mobile OS may launch the application, which may authenticate credentials for an account. The application may associate the user ID parameter and the session ID parameter with the account and receive a cryptogram from a contactless card. The application may receive, from a server, an indication specifying the server verified the cryptogram. The OS may launch the browser, which may refresh the page. The refreshed page may include a virtual card number (VCN) in a first form field. A transaction may be processed based on the VCN.

Mobile web browser authentication and checkout using a contactless card

Growing community of inventors

Chevy Chase, MD, United States of America

Jeffrey Rule