Capital One Services, LLC

Patrick Zearfoss

Daniel Alan Jarvis

Jon Whitmore

Clayton Johnson

Jeffrey Carlyle Wieker

Dan Givol

Anand Kumar

Salman Haq

Lesley Newton

Casey Barrett

Katherine H McHugh

Deborah Nally

Michelle S Olenoski

Joshua McGarity

Anatoly Ivasyuk

Katherine Mchugh

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain, create, and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data.

Systems and methods for data access control of secure memory using a short-range transceiver

Systems and methods for enhanced OTP messaging, comprising: receiving a request from an application executing on a computing device of a user; generating the supplemental information based on the request; segmenting the supplemental information into a first part of the supplemental information and a second part of the supplemental information; transmitting the first part of the supplemental information to the computing device of the user via a first communication channel to another app executing on the computing device of the user; instructing the another app to allow the user to utilize one or more graphical user interface (GUI) elements of a GUI of the another app to transfer the first part of the supplemental information to the app; and transmitting the second part of the supplemental information to the computing device of the user via a second communication channel so as to provide the supplemental information to the app.

Computer-based systems involving enhanced one-time passcode (OTP) messaging and methods of use thereof

Embodiments disclosed are directed to a system that performs steps to perform enhanced device fingerprinting. The system at least at receives from an application, a plurality of device attributes identifying a client device on which the application is being used. The plurality of device attributes includes a push token provided by a push token service to the client device. The push token is uniquely paired to the client device. The system further transmits, to a device database, the plurality of device attributes for storage in a device profile. The system also transmits, to the application, a push notification based on the push token. The system receives, from the application, a deliverable status indicating whether the push notification was successfully transmitted to the client device, and transmits, to a notification database, the deliverable status for storage in a notification delivery profile. The system can use the information to authenticate a device.

Using tokens from push notification providers to enhance device fingerprinting

Aspects disclosed are directed to a system and methods that device authentication. The system at least transmits a silent push notification to an application installed on a client device. The silent push notification includes a push token provided by a push service and an embedded secret. A response to the silent push notification can be received with a further embedded secret. The embedded secret and the further embedded secret can be compared to determine if they match. If the embedded secret and the further embedded secret match, the client device can be authenticated.

Using tokens from silent push notifications during application sessions to develop device confidence

Various embodiments are directed to securely verifying an identity of a user who is requesting to add or link a financial instrument to a third-party digital wallet using one-tap contactless card authentication. The financial instrument may be added or linked to the third-party wallet in at least two scenarios: pull provisioning and push provisioning. In either provisioning scenarios, the user may be required to authenticate the financial instrument being added or linked by successfully verifying the identity of the user via the one-tap contactless card authentication at a banking application associated with the financial instrument.

Authentication for third party digital wallet provisioning

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain create and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data. An exemplary system and method may include receiving from a client device of the user a user token and a request for a data storage key, the request generated in response to a tap action between a contactless card and the client device, the contactless card associated with the user, verifying that the user is authorized to create a secure memory data block on the client device, and transmitting to the client device the data storage key, such that the client device may create a secure memory data block in memory of the client device and encrypt the secure memory data block using the data storage key.

Systems, methods, and computer-readable storage media for scanning a mobile computing device for applications produced by partnered entities and providing benefits when those applications are found. An exemplary system does this by accessing a list of applications and associating each application with a respective entity which has a rewards program linked to a specific entity. The system issues a request for application information of the applications which are installed on the mobile computing device, identifies applications that match the list of applications in the data record, and generates at least one notification based on the identified applications and the rewards program. The system then displays the at least one notification.

System and method for scanning a mobile computing device for installed applications

A method and a system of capturing an image of a card having a magnetic stripe is provided. The method includes obtaining a first image by an imaging device of the card, obtaining a plurality of images of the card via color delta analysis, and obtaining a third image of the card by comparing the first and the plurality of images.

Growing community of inventors

Leesburg, VA, United States of America

Patrick Zearfoss