SYSTEM AND METHOD FOR SECURE REPROVISIONING - Patent application

Abstract

The authentication system and method includes a first device associated with a first account and including a memory including one or more applets, a counter value, and transmission data, a communication interface, and one or more processors in communication with the memory and the communication interface. The first device generates a ciphertext based on the counter value. The ciphertext includes the counter value and the transmission data. The first device may transmit the ciphertext after entering a communication field of the communication interface and update the counter value after transmitting the ciphertext. The first device may receive one or more encryption keys and one or more parameters via the communication interface. The first device may decrypt the one or more encryption keys and switch the association from the first account to the second account after decrypting the one or more encryption keys.

Description

[Technical field]

[0001] This application claims priority to U.S. Patent Application No. 17 / 161,285, filed January 28, 2021, the entire disclosure of which is incorporated herein by reference.

[0002] SUMMARY The present disclosure relates to systems and methods for secure reprovisioning, including secure reprovisioning of contact and contactless cards. [Background technology]

[0003] Card-based transactions are becoming increasingly common. These transactions often involve the use of cards, such as contacted or contactless cards, that communicate with a POS device, server, or other device. Such communications must be protected from interception and unauthorized access. However, the transmission of data is susceptible to phishing and replay attacks, resulting in increased security risks and misuse of accounts and cards.

[0004] Contact cards increase the security risk of card skimming, which can lead to further security breaches. The use of contactless cards that communicate wirelessly with other devices can also increase security risks. Contactless cards that transmit data using Near Field Communication (NFC), Wi-Fi, or Bluetooth, etc., face the risk that data transmissions can be intercepted or monitored by unauthorized or malicious readers.

[0005] Cards may need to be reissued in the event of security risks, misuse, unauthorized access, or other issues. Reissuing a card not only raises further security concerns since a malicious attacker may recognize the original card, but may also disrupt the user's ability to participate in activities on the associated account. For example, a card that is mailed may be intercepted and misused on its way to the user. Also, a fraudster may change the address so that the card is reissued to an address of their choice. Additionally, a mailed card may be read contactlessly through the envelope and the card number skimmed.

[0006] These and other deficiencies exist. Therefore, what is needed is a system and method for authenticating secure card reprovisioning that overcomes these deficiencies and provides for the transition from a first account to a second account in a secure and reliable manner by protecting communications from interception and unauthorized access. Summary of the Invention

[0007] An embodiment of the present disclosure provides a secure reprovisioning system. The secure reprovisioning system may include a first device. The first device is associated with a first account. The first device may include a memory including one or more applets, a counter value, and transmission data. The first device may include a communication interface. The first device may include one or more processors in communication with the memory and the communication interface. The first device may generate a ciphertext based on the counter value, the ciphertext including the counter value and the transmission data. The first device may transmit the ciphertext after the communication interface enters a communication field. The first device may update the counter value after transmitting the ciphertext. The first device may receive one or more encryption keys and one or more parameters via the communication interface. The first device may decrypt the one or more encryption keys. The first device may switch the association from the first account to the second account after decrypting the one or more encryption keys.

[0008] An embodiment of the present disclosure provides a method of secure re-provisioning. The method may generate a ciphertext based on a counter value, the ciphertext including the counter value and transmission data. The method may transmit the ciphertext via the communication interface. The method may update the counter value. The method may receive a first set of one or more encryption keys and a first set of one or more parameters via the communication interface. The method may decrypt the first set of one or more encryption keys. The method may change an association from a first account to a second account.

[0009] An embodiment of the present disclosure provides a computer-readable non-transitory medium comprising computer-executable instructions executed on a processor and comprising the following steps: generating a ciphertext based on the counter value, the ciphertext comprising the counter value and transmission data; transmitting the ciphertext via the communication interface; updating the counter value; receiving via the communication interface a command application protocol data unit comprising one or more encryption keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class; decrypting the one or more encryption keys according to the one or more instructions; switching the association from a first account to a second account; and transmitting a response application protocol data unit indicating an execution status associated with the one or more instructions.

[0010] These and other objects, features and advantages of the exemplary embodiments of the present disclosure will become apparent from a reading of the following detailed description of the exemplary embodiments of the present disclosure, taken in conjunction with the appended claims.

[0011] The various embodiments of the present disclosure, together with further objects and advantages, may best be understood by reference to the following description taken in conjunction with the accompanying drawings, in which: [Brief description of the drawings]

[0012] [Figure 1] FIG. 1 illustrates a secure re-provisioning system according to an example embodiment. [Figure 2A] FIG. 2A illustrates a first device according to an example embodiment. [Figure 2B] FIG. 2B illustrates contact pads of a first device according to an example embodiment. [Diagram 3] FIG. 3 illustrates a method for secure re-provisioning according to an example embodiment. [Figure 4] FIG. 4 illustrates a sequence diagram of a secure re-provisioning process according to an example embodiment. [Diagram 5]FIG. 5 illustrates a method for secure re-provisioning according to an example embodiment. [Figure 6] FIG. 6 illustrates a secure method according to an example embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] The following description of the embodiments provides non-limiting representative examples with reference to reference numbers to particularly describe the features and teachings of various aspects of the present invention. It will be recognized from the description of the embodiments that the described embodiments can be implemented separately or in combination with other embodiments. Those skilled in the art who review the description of the embodiments will learn and understand the various aspects of the present invention described. The description of the embodiments will be understood to be consistent with the application of the present invention to the extent that other implementations that are not specifically covered but are within the knowledge of those skilled in the art who read the description of the embodiments are understood to be consistent with the application of the present invention.

[0014] Advantages of the systems and methods disclosed herein include improved security of authenticating secure card reprovisioning, which results in a transition from a first account to a second account in a secure and reliable manner by protecting against interception and unauthorized access to communications. The systems and methods disclosed herein allow for the avoidance of phishing attacks and the prevention of replay attacks, thereby improving security. Security can also be enhanced by mitigating the risk of other common attacks. For example, the systems and methods disclosed herein reduce the risk of card skimming attacks for contact cards and the risk of unauthorized monitoring or interception of data transmissions for contactless cards through the use of encrypted data communications. As another example, the systems and methods disclosed herein provide for secure reprovisioning of cards via multi-factor authentication.

[0015] Thus, the keys for cards can be securely generated, encrypted, and reissued without collecting cards and programming each card for reissue, thereby reducing security risks, reducing costs, and improving transaction efficiency. These benefits are achieved without inconveniencing users or degrading the user experience with the reissue process. This avoids disruptions, reduces the time and cost of the card reissue process, and allows users to continue their activities with the associated account. Processing card reissue at the automated teller machine (ATM) provides more secure authentication and access control to the ATM. Other benefits include reducing or eliminating the need to ship cards through the mail, improving security and reducing the risk of cards being intercepted in the mail, the risk of shipping addresses being tampered with to change cards to wrong or fraudulent addresses, and the risk of card numbers being skimmed while the card is in the mail.

[0016] Thus, the systems and methods disclosed herein reduce the risk of fraudulent activity, such as misuse of a card or an account associated with the card, in a safe and unobtrusive manner that does not inconvenience the user.

[0017] Figure 1 illustrates a secure re-provisioning system 100. System 100 may include a first device 105, a second device 110, a network 115, a server 120, and a database 125. Although Figure 1 illustrates a single example of a component of system 100, system 100 may include any number of components.

[0018] The system 100 may include a first device 105. The first device 105 may include a contactless card, a contact card, a network-enabled computer, or other devices described herein. As further described below in Figures 2A-2B, the first device 105 may include one or more processors 102 and a memory 104. The memory 104 may include one or more applets 106 and one or more counters 108. Each counter 108 may include a counter value. The memory 104 may include a counter value, transmission data, and one or more keys.

[0019] The first device 105 may include a communication interface 107. The communication interface 107 may include communication capabilities comprising a physical interface and a contactless interface. For example, the communication interface 107 may communicate with the physical interface by swiping through a card swipe interface or by inserting into a card chip reader on an automated teller machine (ATM) or other device that communicates through the physical interface. In other examples, the communication interface 107 may establish contactless communication with a card reader through near-field wireless communication methods such as NFC, Bluetooth, Wi-Fi, RFID, and other forms of contactless communication. As shown in FIG. 1, the communication interface 107 may directly communicate with the second device 110, the server 120, and / or the database 125 through the network 115.

[0020] The first device 105 may be in data communication with any number of components of the system 100. For example, the first device 105 may transmit data to the second device 110 and / or the server 120 over the network 115. The first device may transmit to the database 125 over the network 115. In some examples, the first device 105 may transmit data over the network 115 after entering one or more communication fields of any device. Without limitation, each entry may be associated with a tap, a swipe, a wave, and / or any combination thereof.

[0021] The system 100 may include a second device 110. The second device 110 may include one or more processors 112 and a memory 114. The memory 114 may include one or more first applications 116, but is not limited to the first applications. The second device 110 may be in data communication with any number of components of the system 100. For example, the second device 110 may transmit data to a server 120 via a network 115. The second device 110 may transmit data to a database 125 via the network 115. Without limitation, the device 110 may be a network-enabled computer. As referred to herein, a network-enabled computer includes a computing or communication device, including, but not limited to, a server, a network appliance, a personal computer, a workstation, a telephone, a handheld PC, a personal digital assistant, a contactless card, a thin client, a fat client, an Internet browser, a kiosk, a tablet, a terminal, an ATM, or other device. The second device 110 may be a mobile device. For example, the mobile device may include an Apple® iPhone®, iPod®, iPad®, or other mobile device running Apple's iOS operating system, any device running Microsoft®'s Windows® Mobile operating system, any device running Google®'s Android® operating system, and / or other smartphones, tablets, and other wearable mobile devices.

[0022] The second device 110 may include processing circuitry and may include additional components, including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, as necessary, to perform the functions described herein. The second device 110 may further include a display and input devices. The display may be any type of device that presents visual information, such as a computer monitor, a flat panel display, a liquid crystal display, a light emitting diode display, a mobile device screen including a plasma panel, a cathode ray tube display, etc. The input devices may include any device that inputs information into the user's device and is available and supported by the user's device, such as a touch screen, a keyboard, a mouse, a cursor control device, a touch screen, a microphone, a digital camera, a video recorder, or a video camera. These devices may be used to input information and interact with the software and other devices described herein.

[0023] The system 100 may include a network 115. In some examples, the network 115 may be one or more of a wireless network, a wired network, or any combination of wireless and wired networks and may be connected to any one of these components of the system 100. For example, the first device 105 may be connected to the server 120 via the network 115. In some examples, the network 115 may include one or more of a fiber optic network, a passive optical network, a cable network, an Internet network, a satellite network, a wireless local area network (LAN), a global system for mobile communications, a personal communication service, a personal area network, a wireless application protocol, a multimedia messaging service, an enhanced messaging service, a short message service, a time division multiplexing system, a code division multiple access system, a D-AMPS, Wi-Fi, fixed wireless data, IEEE 802.11b, 802.15.1, 802.11n and 802.11g, Bluetooth, NFC, radio frequency identification (RFID), Wi-Fi, and the like.

[0024] Network 115 may also include a global network, such as, but not limited to, telephone lines, fiber optics, IEEE Ethernet 902.3, wide area networks, wireless personal area networks, LANs, or the Internet. Additionally, network 115 may support an Internet network, a wireless communication network, a cellular network, or the like, or any combination thereof. Network 115 may further include one network, or any number of the exemplary types of networks described above, operating as a standalone network or in conjunction with one another. Network 115 may utilize one or more protocols of one or more network elements to which they are communicatively coupled. Network 115 may translate to and from one or more protocols of network devices. Although network 115 is shown as a single network, according to one or more examples, network 115 may include multiple interconnected networks, such as the Internet, a service provider's network, a cable television network, an enterprise network such as a credit card company network, and a home network.

[0025] The system 100 can include one or more servers 120. In some examples, the server 120 can include one or more processors 122 coupled to a memory 124. The server 120 can be a central system, server, or platform that controls and calls various data to execute multiple workflow actions at different times. The server 120 can be connected to the first device 105. The server 120 can be in data communication with the applet 106 and / or the application 116. For example, the server 120 can be in data communication with the applet 106 via one or more networks 115. The first device 105 can be in communication with the one or more servers 120 via one or more networks 115 and can operate as a respective front-end to back-end pair with the server 120. The first device 105 can send, for example, from the running applet 106. One or more requests can be associated with retrieving data from the server 120. The server 120 can receive one or more requests from the first device 105. Based on one or more requests from applet 106, server 120 may obtain the requested data. Server 120 may transmit received data to applet 106, where the received data is responsive to the one or more requests.

[0026] In some examples, server 120 may be a dedicated server computer, such as a blade server, or may be a personal computer, laptop computer, notebook computer, palmtop computer, network computer, mobile device, wearable device, or any processor-controlled device capable of supporting system 100. While FIG. 1 shows a single server 120, it will be understood that in other embodiments, multiple servers or multiple computer systems may be used as needed or desired to support users, and backup or redundant servers may also be used to prevent network downtime in the event of failure of a particular server.

[0027] The server 120 may include applications including instructions to execute on the server 120. For example, the applications may include instructions to execute on the server 120. The applications may communicate with any component of the system 100. For example, the server 120 may execute one or more applications that enable network and / or data communication with, for example, one or more components of the system 100, to transmit and / or receive data. Without limitation, the server 120 may be a network-enabled computer. As referred to herein, a network-enabled computer includes a computing or communication device including, but is not limited to, a server, a network appliance, a personal computer, a workstation, a telephone, a handheld PC, a personal digital assistant, a contactless card, a thin client, a fat client, an Internet browser, or other device, etc. The server 120 may be a mobile device. For example, the mobile device may include an Apple iPhone, an iPod, an iPad, or other mobile device running Apple's iOS operating system, any device running Microsoft's Windows mobile operating system, any device running Google's Android operating system, and / or other smartphones, tablets, or similar wearable mobile devices.

[0028] Server 120 may include processing circuitry and may include additional components, including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, as necessary, to perform the functions described herein. Server 120 may further include displays and input devices. Displays may be any type of device that presents visual information, such as computer monitors, flat panel displays, liquid crystal displays, light emitting diode displays, plasma panels, mobile device screens including cathode ray tube displays. Input devices may include any device available and supported by a user's device to input information to a user's device, such as a touch screen, keyboard, mouse, cursor control device, touch screen, microphone, digital camera, video recorder or camcorder, etc. These devices may be used to input information and interact with the software and other devices described herein.

[0029] The system 100 may include one or more databases 125. The database 125 may include a relational database, a non-relational database, or other database implementations, including multiple relational and non-relational databases, and any combination thereof. In some examples, the database 125 may include a desktop database, a mobile database, or an in-memory database. Furthermore, the database 125 may be hosted internally by any component of the system 100, such as the first device 105 or the server 120, or the database 125 may be hosted externally to any component of the system 100, such as the first device 105 or the server, by a cloud-based platform, or on any storage device in data communication with the first device 105 and the server 120. In some examples, the database 125 may be in data communication with any number of components of the system 100. For example, the server 120 may retrieve requested data sent by the applet 106 from the database 125. The server 120 may transmit received data from the database 125 to the applet 106 over the network 115 in response to the transmitted one or more requests. In other examples, the applet 106 may transmit one or more requests for requested data from the database 125 over the network 115.

[0030] In some examples, the exemplary procedures according to the present disclosure described herein may be executed by a processing device and / or computing device (e.g., computer hardware device). Such a processing / computing device may be all, part, or include a computer / processor, including, but not limited to, one or more microprocessors, and may utilize instructions stored on a computer-accessible medium (e.g., RAM, ROM, hard drive, or other storage device). For example, the computer-accessible medium may be part of the memory of the first device 105, the second device 110, the server 120, and / or the database 125, or other computer hardware device.

[0031] In some examples, a computer-accessible medium (e.g., a storage device such as a hard disk, floppy disk, memory stick, CD-ROM, RAM, ROM, or a collection thereof, as described above herein) may be provided (e.g., in communication with a processing device). The computer-accessible medium may include executable instructions. Additionally or alternatively, a storage device may be provided separate from the computer-accessible medium, and the storage device may provide instructions to the processing device, for example, to cause the processing device to perform certain example procedures, processes, and methods, as described above herein.

[0032] The one or more processors 102 may generate a ciphertext using at least one of the key and the counter value. The ciphertext may include the counter value and the transmission data. The one or more processors 102 may transmit the ciphertext via the communication interface 107. For example, the one or more processors 102 may transmit the ciphertext to one or more applications. In some examples, the one or more processors 102 may transmit the ciphertext to the application 116 including instructions to execute on the second device 110. The one or more processors 102 may update the counter value after transmitting the ciphertext.

[0033] In some examples, the application 116 including instructions executing on the second device 110 may encrypt one or more keys. The second device 110 may include, but is not limited to, an ATM, a kiosk, a POS device, or other device. The application 116 may transmit one or more encryption keys. In some examples, the application 116 may transmit one or more parameters. The one or more parameters may include, but are not limited to, at least one selected from the group of primary account number information, expiration date information, card verification code, and / or any combination thereof. In some examples, the one or more parameters may include, but are not limited to, dynamic information such as changed personalization data, including card master keys such as private keys and public / private keys, and one or more spending limits. The application 116 may transmit one or more command application protocol data units (C-APDUs) including one or more encryption keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class of header. In some examples, the application 116 may send one or more command application protocol data units to the first device 105 after the communication interface 107 enters the communication field of the second device 110 one or more times to connect the application 116 and the first device 105 via near field communication (NFC). Without limitation, the one or more command application protocol data units may be transmitted via Bluetooth, Wi-Fi, and radio frequency identification (RFID).

[0034] The first device 105 may receive one or more encryption keys and one or more parameters after input authentication. The first device 105 may receive a command application protocol data unit including one or more instructions associated with one or more encryption keys, one or more parameters, one or more applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device 110 or the server 120, which may be used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a ciphertext that encrypts the data and a counter. The first device 105 may receive the encrypted data, decrypt it, and store it. The one or more instructions may each be associated with a code and may include decrypting and / or verifying one or more decryption keys, storing and / or verifying one or more decryption keys. In some examples, the first device 105 may receive one or more command application protocol data units after input authentication. For example, without limitation, the authentication input may include at least one or more selected from the group of a personal identification number, a username and / or password, a mobile device number, an account number, a card number, and a biometric (face scan, retina scan, fingerprint, voice input for voice recognition, etc.). The application 116 of the second device 110 may authenticate the input. In another example, the application 116 may send the input to the server 120 for authentication of the input.

[0035] The first device 105 may receive one or more command application protocol data units based on a predetermined criterion. In some examples, the predetermined criterion may be any number of seconds, minutes, hours, days, weeks, months, years, etc. In other examples, the first device may receive one or more command application protocol data units after a determination of a security concern. For example, the server 120 may determine the one or more security concerns. Without limitation, the one or more security concerns may be associated with spoofing, fraud based on transaction history and / or transaction frequency evaluated over any predetermined period of time, notification of fraudulent charges, and / or any combination thereof. For example, the server 120 may send one or more messages to the application 116 of the second device 110 to transmit one or more command application protocol data units in response to a determination of any number of one or more security concerns associated with the first device 105. In this manner, the application 116 of the second device 110 can receive one or more messages from the server 120 indicating the transmission of one or more command application protocol data units following a determination of one or more security concerns.

[0036] The first device 105 may be subject to eligibility criteria. For example, after determining one or more security concerns, the first device 105 may follow a priority list associated with the eligibility before receiving one or more command application protocol data units. In some examples, the server 120 may screen the first device 105 based on at least one selected from one or more of the following groups: time since card issuance, card use in a transaction, transaction type, card type, determination of security concerns associated with the first device 105, and / or any combination thereof. In this manner, the server 120 may evaluate and rank how many first devices 105 and what types of first devices 105 may receive one or more command application protocol data units based on the eligibility criteria before sending a signal to the application 116 of the second device 110 to transmit one or more command application protocol data units. In one example, a set of one or more first devices 105 may be prioritized to receive one or more command application protocol data units after the server 120 determines that the first device 105 is a credit card and is associated with a fraudulent charge notification. In another example, a set of one or more first devices 105 may be prioritized to receive one or more command application protocol data units after the server 120 determines that the first device 105 is an anomalously used identification card (e.g., used beyond a predetermined threshold) for one or more transactions. In yet another example, a set of one or more first devices 105 may be prioritized to receive one or more command application protocol data units after the server 120 determines how much time has passed since the issuance of the first device 105. In these non-limiting examples, the server 120 may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a designated number of first devices 105 may be reprovisioned individually and / or in batches.The first device 105 may also be re-provisioned as needed according to a predetermined schedule and / or any combination thereof.

[0037] The first device 105 may receive one or more command application protocol data units. For example, the first device 105 may receive one or more command application protocol data units from the application 116 of the second device 110. The first device 105 may decrypt one or more encryption keys. One or more applets, such as the applet 106, of the first device 105 may store the one or more decryption keys in a secure element. The applet 106, such as the first applet, may transmit the one or more decryption keys and one or more parameters to the second applet 109 via the communication channel 111. After decrypting the one or more encryption keys, the first device 105 may change the association from the first account to the second account. Additionally, the first device 105 may be limited to a predetermined usage after decrypting the one or more encryption keys. In one example, the first device 105 may be subject to one or more predetermined spending thresholds. In another example, the first device 105 may be used a predetermined number of times. For example, the first device 105 may be used only for a designated set of transactions, such as only for lunch and / or office furniture. In other examples, the first device 105 may be used a predetermined number of times for one or more types of transactions, including, but not limited to, debit card transactions or credit card transactions.

[0038] In other examples, the first device 105 may be used only for transactions occurring at certain times (e.g., business hours 9:00 AM to 5:00 PM), certain days of the week (e.g., weekdays, weekends, Mondays only, Thursdays and Fridays only), certain dates (e.g., Wednesday July 1, 2020), etc. The first device 105 may be used only for certain purposes, such as for travel expenses (e.g., travel expenses including airfare, meals, and hotel), a specified project (e.g., a certain type of equipment or hardware needed for the project), a specific list of designated or approved vendors, or vendors known to provide goods or services needed for a certain purpose, etc.

[0039] It is understood that the above list is exemplary and any of these examples can be used in combination with each other, thus allowing a user to use the same card for different purposes with different accounts.

[0040] The first device 105 may send one or more response application protocol data units (R-APDUs) in response to the one or more command application protocol data units. The one or more response application protocol data units may include one or several bytes indicating the status of the instruction. For example, at least one of the one or more response application protocol data units may indicate an execution status associated with the one or more instructions. The first device 105 may send the one or more response application protocol data units to the application 116 of the second device 110. In some examples, the first device 105 may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the first device 105 may return a warning or execution failure status. For example, the one or more response application protocol data units may indicate whether and when one or more encryption keys have been decrypted and / or whether and when one or more decryption keys have been stored.

[0041] The application 116 may receive one or more response application protocol data units from the first device 105. For example, the one or more response application protocol data units may be received after the device 105 has entered one or more times. The one or more entries may be associated with at least one selected from the group of a tap, a swipe, a wave, and / or any combination thereof. Depending on the result of the execution status of the one or more instructions, the application 116 may perform one or more corrective actions. In one example, the application 116 may resend one or more command application protocol data units if the execution status of the one or more instructions is unsuccessful. In another example, the application 116 may resend one or more command application protocol data units if the execution status of the one or more instructions is not received from the first device 105 within a predetermined time (including but not limited to a numerical value of seconds, minutes, hours, days, etc.). In yet another example, the application 116 may notify the server 120 of the one or more command application protocol data units when the execution status of the one or more instructions is successful. In yet another example, the application 116 may notify the server 120 with one or more command application protocol data units when the execution status of one or more instructions is received within a predetermined time period.

[0042] Figure 2A illustrates one or more first devices 200. The first devices 200 may refer to components that are the same as or similar to the first devices 105, as described above with respect to Figure 1. Figures 2A and 2B illustrate a single example of components of the first devices 200, although any number of components may be utilized.

[0043] The first device 200 may communicate with one or more components of the system 100. The first device 200 may include contact or contactless cards, which may include payment cards such as credit cards, debit cards, gift cards, etc., issued to a service provider 205 and displayed on the front or back of the first device. In some examples, the first device 200 is not associated with a payment card and may include, but is not limited to, an identification card, a membership card, a transportation card, etc. In some examples, the payment card may include a dual interface contactless payment card. The first device 200 may include a substrate 210, which may include a single layer or one or more laminated layers of plastic, metal, and other materials. Exemplary substrate materials include polyvinyl chloride, polyvinyl chloride acetate, acrylonitrile butadiene styrene, polycarbonate, polyester, anodized titanium, palladium, gold, carbon, paper, and biodegradable materials. In some examples, the first device 200 may have physical characteristics conforming to the ID-1 format of the ISO / IEC 7810 standard, and the contactless card may conform to the ISO / IEC 14443 standard. However, it will be understood that the first device 200 according to the present disclosure may have different characteristics, and the present disclosure does not require that the contactless card be implemented in a payment card.

[0044] The first device 200 may also include identification information 215 displayed on the front and / or back of the card, and a contact pad 220. The contact pad 220 may establish contact with other communication devices, including, but not limited to, a user device, a smart phone, a laptop, a desktop, or a tablet computer. The first device 200 may also include processing circuitry, an antenna, and other components not shown in FIG. 2. These components may be located behind the contact pad 220 or elsewhere on the substrate 210. The first device 200 may also include a magnetic strip or tape that may be located on the back of the card (not shown in FIG. 2A).

[0045] As shown in Figure 2B, the contact pad 220 of Figure 2A can include processing circuitry 225 for storing and processing information, a processor 230, such as a microprocessor, and memory 235. It will be understood that the processing circuitry 225 may include additional components, including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, necessary to perform the functions described herein.

[0046] The memory 235 may be a read-only memory, a write-once-read-multiple-times memory, or a read / write memory, e.g., RAM, ROM, and EEPROM, and the first device 200 may include one or more of these memories. A read-only memory may be factory programmable as read-only or programmable only once. One-time programmability allows it to be written once and read multiple times. A write-once-read-multiple-times memory may be programmed at some point after the memory chip leaves the factory. Once programmed, the memory cannot be rewritten, but it can be read multiple times. A read / write memory may be programmed and reprogrammed multiple times after leaving the factory, and may also be read multiple times.

[0047] The memory 235 may store one or more applets 240, one or more counters 245, and a customer identifier 250. The one or more applets 240 may include one or more software applications, such as Java Card applets, that execute on one or more contactless terminals. However, it will be understood that the one or more applets 240 are not limited to Java Card applets, but may be any software application operable on a contactless card or other device having limited memory. The one or more counters 245 may comprise a numeric counter sufficient to store an integer number. The customer identifier 250 may include a unique alphanumeric identifier assigned to a user of the first device 200, which may distinguish a contactless card user from other contactless card users. In some examples, the customer identifier 250 may identify both a customer and an account assigned to the customer, and may also identify a contactless card associated with the customer's account.

[0048] Although the processor and memory elements of the foregoing exemplary embodiments are described with reference to contact pads, the disclosure is not so limited, and it will be understood that these elements may be implemented outside of the contact pads 220, may be implemented completely separate from the contact pads 220, or may be implemented as additional elements in addition to the processor 230 and memory 235 elements located within the contact pads 220.

[0049] In some examples, the first device 200 may include one or more antennas 255. The one or more antennas 255 may be disposed within the first device 200 and around the processing circuit 225 of the contact pad 220. The one or more antennas 255 may be integral with the processing circuit 225, or the one or more antennas 255 may be used with an external booster coil. As another example, the one or more antennas 255 may be external to the contact pad 220 and the processing circuit 225.

[0050] In one embodiment, the coil of the first device 200 may act as the secondary of an air-core transformer. The terminal can communicate with the first device 200 by cutting the power or amplitude modulation. The first device 200 can use a gap in the power connection of the contactless card to infer the data sent from the terminal, which can be functionally maintained by one or more capacitors. The first device 200 can communicate back by switching the load or load modulation of the coil of the contactless card. Load modulation can be detected at the coil of the terminal due to interference.

[0051] Figure 3 illustrates a method 300 for secure re-provisioning. Figure 3 may reference components that are the same as or similar to the system 100 and the first device 200 illustrated in Figures 2A and 2B.

[0052] At block 305, the method 300 may include generating a ciphertext using the at least one key and the counter value. For example, one or more processors of the first device may generate a ciphertext using the at least one key and the counter value. The ciphertext may include the counter value and the transmission data. The first device may include a memory including one or more keys including the at least one key, the counter value, and the transmission data. The first device may further include a communication interface.

[0053] At block 310, the method 300 may include transmitting the ciphertext. For example, the one or more processors may transmit the ciphertext via a communications interface. For example, the one or more processors may transmit the ciphertext to one or more applications. In some examples, the one or more processors may transmit the ciphertext to an application that includes instructions to execute on the second device.

[0054] At block 315, the method 300 may include updating the counter value. For example, the one or more processors may update the counter value after transmitting the ciphertext.

[0055] At block 320, the method 300 may include receiving, via the communication interface, a first set of one or more encryption keys and a first set of one or more parameters. In some examples, an application including instructions executing on the second device may encrypt the one or more keys. The second device may include, but is not limited to, an ATM, a kiosk, a register, or other point-of-sale device. The application may transmit the one or more encryption keys. In some examples, the application may transmit the one or more parameters. Without limitation, the one or more parameters may include at least one selected from the group of primary account number information, expiration date information, card verification code, and / or any combination thereof. In some examples, the one or more parameters may include, but are not limited to, dynamic information, such as changed personalization data, including card master keys, such as private keys and public / private keys, and one or more spending limits. The application may transmit one or more command application protocol data units including one or more encryption keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. In some examples, the application may send one or more command application protocol data units to the first device after one or more communications interface entries into the communication field of the second device. The communication between the application and the first device is via NFC. Without limitation, the one or more command application protocol data units may be sent via Bluetooth, Wi-Fi, and RFID.

[0056] The first device may receive one or more command application protocol data units based on a predetermined criterion. In some examples, the predetermined criterion may be any number of seconds, minutes, hours, days, weeks, months, years, etc. In other examples, the first device may receive one or more command application protocol data units after a security concern is determined to exist. For example, the server may determine the one or more security concerns. Without limitation, the one or more security concerns may be associated with spoofing, fraud based on transaction history and / or transaction frequency evaluated over any predetermined period of time, notification of fraudulent charges, and / or any combination thereof. For example, the server may send one or more messages to the application of the second device to send one or more command application protocol data units in response to determining any number of one or more security concerns associated with the first device. In this manner, the application of the second device may receive one or more messages from the server, the one or more messages indicating to send one or more command application protocol data units after determining the one or more security concerns.

[0057] The first device may be subject to eligibility criteria. For example, after the determination of one or more security concerns, the first device may be subject to a priority list associated with eligibility before receiving one or more command application protocol data units. In some examples, the server may screen the first device based on at least one selected from the group of time since issuance of the card, use of the card in a transaction, type of transaction, type of card, determination of one or more security concerns associated with the first device, and / or any combination thereof. In this manner, the server may evaluate and rank how many first devices and what type of first devices may receive one or more command application protocol data units based on the eligibility criteria before sending a signal to the application of the second device to transmit the one or more command application protocol data units. In one example, after the server determines whether the first device is a credit card and is associated with a notification of a fraudulent charge, a set of one or more first devices may be prioritized for receiving one or more command application protocol data units. In other examples, one or more sets of first devices may be prioritized to receive one or more command application protocol data units after the server determines that the first device was an anomalously used identification (e.g., used beyond a predetermined threshold) for one or more transactions. In yet other examples, one or more sets of first devices may be prioritized to receive one or more command application protocol data units after the server determines how much time has passed since issuance of the first device. In these non-limiting examples, the server may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a specified number of first devices may be reprovisioned individually and / or in batches. The first devices may also be reprovisioned as needed according to a predetermined schedule and / or any combination thereof.

[0058] The first device may receive one or more encryption keys and one or more parameters after the input authentication. The first device may receive a command application protocol data unit including one or more instructions associated with one or more encryption keys, one or more parameters, one or more applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a ciphertext and a counter that encrypts the data. The first device may receive the encrypted data, decrypt and store it. The one or more instructions may each be associated with a code and may include decrypting and / or verifying one or more decryption keys, storing and / or verifying one or more decryption keys. In some examples, the first device may receive one or more command application protocol data units after the input authentication. For example, the input for authentication may include, but is not limited to, at least one or more selected from the group of personal identification numbers, usernames and / or passwords, mobile device numbers, account numbers, card numbers, and biometric authentication (e.g., face scan, retina scan, fingerprint, voice input for voice recognition, etc.). The application on the second device may authenticate the input. In another example, the application may send the input to a server for authentication of the input.

[0059] At block 325, the method 300 may include decrypting a first set of one or more encryption keys. The first device may receive one or more command application protocol data units. For example, the first device may receive one or more command application protocol data units from an application of the second device. The first device may decrypt the one or more encryption keys. One or more applets of the first device may store the one or more decryption keys in a secure element. The first applet may send the one or more decryption keys and one or more parameters to the second applet over a communication channel.

[0060] At block 330, the method 300 may include changing the association from the first account to the second account. After decrypting the one or more encryption keys, the first device may change the association from the first account to the second account. Additionally, the first device may be limited to a predetermined usage after decrypting the one or more encryption keys. In one example, the first device may be subject to one or more predetermined spending thresholds. In another example, the first device may be used a predetermined number of times. For example, the first device may be used only for a specified set of transactions, such as only for lunch and / or office furniture. In another example, the first device may be used a predetermined number of times for one or more types of transactions, including, but not limited to, debit card transactions or credit card transactions.

[0061] In other examples, the first device may be used only for transactions occurring at a certain time (e.g., business hours 9:00 AM to 5:00 PM), on certain days of the week (e.g., weekdays, weekends, Mondays only, Thursdays and Fridays only), on a certain date (e.g., Wednesday, July 1, 2020). In other examples, the first device may be utilized only for a certain purpose, such as for expense purposes (e.g., travel expenses including airfare, meals, and hotel), a specified project (e.g., a certain type of equipment or hardware needed for the project), a specified or approved vendor, or a specific list of vendors known to provide goods or services needed for a particular purpose, etc.

[0062] It will be understood that the above list is exemplary and any of these examples can be used in combination with each other, such that a user can use the same card with different accounts for different purposes.

[0063] The first device may send one or more response application protocol data units in response to the one or more command application protocol data units. The one or more response application protocol data units may include one or more bytes indicating a status of the instruction. For example, at least one of the one or more response application protocol data units may indicate an execution status associated with the one or more instructions. The first device may send the one or more response application protocol data units to an application of the second device. In some examples, the first device may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the first device may return a warning or execution failure status. For example, the one or more response application protocol data units may indicate whether and when one or more encryption keys have been decrypted and / or whether and when one or more decryption keys have been stored.

[0064] The application may receive one or more response application protocol data units from the first device. For example, the one or more response application protocol data units may be received after one or more entries of the communication interface into the communication field of the second device. The one or more entries may be associated with at least one selected from the group of a tap, a swipe, a wave, and / or any combination thereof. Depending on the result of the execution status of the one or more instructions, the application may perform one or more corrective actions. In one example, the application may resend one or more command application protocol data units if the execution status of the one or more instructions is unsuccessful. In another example, the application may resend one or more command application protocol data units if the execution status of the one or more instructions is not received from the first device within a predetermined time (including but not limited to a numerical value such as seconds, minutes, hours, days, etc.). In yet another example, the application may notify the server with one or more command application protocol data units if the execution status of the one or more instructions is successful. In yet another example, the application may notify the server with one or more command application protocol data units if the execution status of the one or more instructions is received within a predetermined time.

[0065] 4 illustrates a sequence diagram 400 of a process for secure re-provisioning in accordance with an example embodiment. FIG 4 may reference components that are the same as or similar to the system 100, the first device 200 of FIG 2A and FIG 2B, and the method 300 of FIG 3.

[0066] In step 405, an application including instructions executing on a device, such as an ATM, a kiosk, a POS device, or other device, may send an input for authentication to a server. For example, the input for authentication may include, but is not limited to, at least one or more selected from the group of personal identification number, username and / or password, mobile device number, account number, card number, and biometric authentication (such as face scan, retina scan, fingerprint, voice input for voice recognition, etc.). The application may authenticate the input. In another example, the application may send the input to a server for authentication of the input.

[0067] The device may include one or more processors and memory. The memory may include one or more applications, including but not limited to the first application. The device may be in data communication with any number of components of FIG. 4. For example, the device may transmit data over a network to a server. The device may transmit data over a network to a database. Without limitation, the device may be a network-enabled computer. As referred to herein, a network-enabled computer includes computing or communication devices including, but not limited to, a server, network appliance, personal computer, workstation, telephone, handheld PC, personal digital assistant, contactless card, contact card, thin client, fat client, Internet browser, kiosk, tablet, terminal, ATM, or other device. The device may be a mobile device. For example, the mobile device may include an Apple iPhone, iPod, iPad, or other mobile device running Apple's iOS operating system, any device running Microsoft's Windows mobile operating system, any device running Google's Android operating system, and / or other smartphones, tablets, or similar wearable mobile devices.

[0068] The device may include processing circuitry and may include additional components including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware as necessary to perform the functions described herein. The device may further include a display and input devices. A display may be any type of device that presents visual information, such as a computer monitor, a flat panel display, and a mobile device screen, and may include liquid crystal displays, light emitting diode displays, plasma panels, and cathode ray tube displays. An input device may include any device available and supported by the user's device for inputting information into the user's device, such as a touch screen, a keyboard, a mouse, a cursor control device, a touch screen, a microphone, a digital camera, a video recorder, or a camcorder. These devices may be used to input information and interact with the software and other devices described herein.

[0069] The network may be one or more of a wireless network, a wired network, or any combination of wireless and wired networks, and may be connected to any one of the components of Figure 4. In some examples, the network may include one or more of a fiber optic network, a passive optical network, a cable network, an Internet network, a satellite network, a wireless local area network (LAN), a global system for mobile communications, a personal communication service, a personal area network, a wireless application protocol, a multimedia messaging service, an enhanced messaging service, a short message service, a time division multiplexing based system, a code division multiple access based system, D-AMPS, Wi-Fi, fixed wireless data, IEEE 802.11b, 802.15.1, 802.11n and 802.11g, Bluetooth, NFC, radio frequency identification (RFID), Wi-Fi, and the like.

[0070] Further, the network may include, but is not limited to, telephone lines, fiber optics, IEEE Ethernet 902.3, wide area networks, wireless personal area networks, LANs, or global networks such as the Internet. Further, the network may support an Internet network, a wireless communication network, a cellular network, or the like, or any combination thereof. The network may further include one network, or any number of the above-mentioned exemplary types of networks, operating as a standalone network or in conjunction with one another. The network may utilize one or more protocols of one or more network elements to which they are communicatively coupled. The network may translate to and from one or more protocols of the network device. Although the network is shown as a single network, it will be understood that, according to one or more examples, the network may include multiple interconnected networks, such as, for example, the Internet, a service provider's network, a cable television network, an enterprise network such as a credit card company's network, and a home network.

[0071] The server may include one or more processors coupled to a memory. The server may be a central system, server, or platform that controls and invokes various data at different times to perform multiple workflow actions. The server may be in data communication with one or more applets of the card and / or applications of the device. For example, the server may be in data communication with the applets over one or more networks. The card may be in data communication with one or more servers over one or more networks and may operate as a respective front-end and back-end pair with the servers. The card may send one or more requests to the server, for example, from an applet being executed. The one or more requests may be associated with retrieving data from the server. The server may receive one or more requests from the card. Based on one or more requests from the applet, the server may retrieve the requested data. The server may send the received data to the applet, and the received data is responsive to the one or more requests.

[0072] In some examples, the server may be a dedicated server computer, such as a blade server, or may be a personal computer, laptop computer, notebook computer, palmtop computer, network computer, mobile device, wearable device, or any processor-controlled device capable of supporting the system of Figure 4. It will be appreciated that while Figure 4 shows a single server, in other embodiments, multiple servers or multiple computer systems may be used as needed or desired to support users, and backup or redundant servers may also be used to prevent network downtime in the event of an outage of a particular server.

[0073] The server may include an application that includes instructions to execute. For example, the application may include instructions to execute on the server. The application may communicate with any component of the system. For example, the server may execute one or more applications that enable network and / or data communication, etc., with one or more components of the system, and may also transmit and / or receive data. Without limitation, the server may be a network-enabled computer. As referred to herein, a network-enabled computer includes computing or communication devices, including, but not limited to, a server, network appliance, personal computer, workstation, telephone, handheld PC, personal digital assistant, contactless card, contact card, thin client, fat client, Internet browser, or other device, etc. The server may also be a mobile device. For example, the mobile device may include an Apple iPhone, iPod, iPad, or other mobile device running Apple's iOS operating system, any device running Microsoft's Windows mobile operating system, any device running Google's Android operating system, and / or other smartphones, tablets, or similar wearable mobile devices.

[0074] The server may include processing circuitry and may include additional components including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, as necessary, to perform the functions described herein. The server may further include a display and input devices. The display may be any type of device that presents visual information, such as a computer monitor, a flat panel display, a liquid crystal display, a light emitting diode display, a mobile device screen including a plasma panel, a cathode ray tube display. The input devices may include any device available and supported by the user's device for inputting information into the user's device, such as a touch screen, a keyboard, a mouse, a cursor control device, a touch screen, a microphone, a digital camera, a video recorder or camcorder, etc. These devices may be used to input information and interact with the software and other devices described herein.

[0075] The database may include a relational database, a non-relational database, or other database implementations, including multiple relational and non-relational databases, and any combination thereof. In some examples, the database may include a desktop database, a mobile database, or an in-memory database. Furthermore, the database may be hosted internally on any component of the system, such as the card, device, and / or server, or the database may be hosted externally on any component of the system, such as the card, device, and / or server, by a cloud-based platform, or by any storage device in data communication with the card, device, and / or server. In some examples, the database may be in data communication with any number of components of the system. For example, the server may retrieve requested data from the database transmitted by the applet. The server may transmit received data from the database over a network to one or more applets, the received data being responsive to the transmitted one or more requests. In other examples, one or more applets may transmit one or more requests for requested data from the database over a network.

[0076] In some examples, the exemplary procedures according to the present disclosure described herein may be executed by a processing device and / or computing device (e.g., computer hardware device). Such a processing / computing device may be all, part, or include a computer / processor, including, but not limited to, one or more microprocessors, and may utilize instructions stored on a computer-accessible medium (e.g., RAM, ROM, hard drive, or other storage device). For example, the computer-accessible medium may be part of the memory of a card, device, server, and / or database, or other computer hardware device.

[0077] In some examples, a computer-accessible medium (e.g., a storage device such as a hard disk, floppy disk, memory stick, CD-ROM, RAM, ROM, or a collection thereof, as described above herein) may be provided (e.g., in communication with a processing device). The computer-accessible medium may include executable instructions. Additionally or alternatively, a storage device may be provided separately from the computer-accessible medium, and the storage device may provide instructions to the processing device to perform certain example procedures, processes, and methods, e.g., as described above herein.

[0078] At step 410, the server may transmit one or more results of the eligibility criteria evaluation. For example, the server may receive input from the application. The server may authenticate the input. After authenticating the input, the server may transmit one or more results of the eligibility criteria evaluation associated with the card. The card may receive one or more command application protocol data units after a determination of a security concern. For example, the server may determine one or more security concerns. Without limitation, the one or more security concerns may be associated with spoofing, fraud based on transaction history and / or transaction frequency evaluated over any given period of time, notification of fraudulent charges, and / or any combination thereof. For example, the server may transmit one or more messages to the application of the device indicating transmission of one or more command application protocol data units in response to determining any number of one or more security concerns associated with the card. Thus, the application of the device may receive one or more messages from the server, the one or more messages indicating transmission of one or more command application protocol data units after determination of one or more security concerns.

[0079] The card may be subject to eligibility criteria. For example, after determining one or more security concerns, the card may be subject to a priority list associated with eligibility before receiving one or more command application protocol data units. In some examples, the server may screen the first device based on at least one selected from the group of one or more determinations of time since issuance of the card, use of the card in a transaction, type of transaction, type of card, security concerns regarding the card, and / or combinations thereof. In this manner, the server may evaluate and rank how many cards and what type of cards will receive one or more command application protocol data units based on the eligibility criteria before sending a signal to the application of the device to transmit one or more command application protocol data units.

[0080] In step 415, the one or more processors of the card may transmit the ciphertext via the communication interface. For example, the one or more processors of the card may generate the ciphertext using one or more keys and a counter value. The ciphertext may include the counter value and the transmission data. The first device may include a memory including the one or more keys, the counter value, and the transmission data. The one or more processors may transmit the ciphertext via the communication interface. For example, the one or more processors may transmit the ciphertext to one or more applications. In some examples, the one or more processors may transmit the ciphertext to an application that includes instructions to execute on the second device. The one or more processors may update the counter value. For example, the one or more processors may update the counter value after transmitting the ciphertext.

[0081] The card may include a contactless card, a contact card, or other devices described herein. As described above, the card may include one or more processors and memories. The memory may include one or more applets and one or more counters. Each counter may include a counter value. The memory may include a counter value, transmission data, and one or more keys.

[0082] The card may include a communication interface. The communication interface may include communication capabilities with a physical interface and a contactless interface. For example, the communication interface may communicate with the physical interface by swiping through a card swipe interface or by inserting into a card chip reader in an automated teller machine (ATM) or other device that communicates through the physical interface. In other examples, the communication interface may establish contactless communication with a card reader through near-field wireless communication methods such as NFC, Bluetooth, Wi-Fi, RFID, and other forms of contactless communication. The communication interface may directly communicate with an application, server, and / or database of the device over a network.

[0083] The card may communicate data with any number of components of the system. For example, the card may transmit data over the network to an application and / or server of a second device. The card may transmit data over the network to a database. In some examples, the card may transmit data over the network after entering one or more communication fields of any device. Without limitation, each entry may be associated with a tap, a swipe, a wave, and / or any combination thereof.

[0084] In step 420, an application of the device can transmit one or more command application protocol data units. For example, an application including instructions executing on the device can encrypt one or more keys. The application can transmit one or more encryption keys. In some examples, the application can transmit one or more parameters. Without limitation, the one or more parameters can include at least one selected from the group of primary account number information, expiration information, card verification code, and / or any combination thereof. In some examples, the one or more parameters can include dynamic information such as, without limitation, changed personalization data, including card master keys such as private keys and public / private keys, and one or more spending limits. The application can transmit one or more command application protocol data units including one or more encryption keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class of header. In some examples, one or more session keys can be generated on a second device or server and used to encrypt one or more master keys. In some examples, the application can transmit one or more command application protocol data units to the card after the communication interface has entered the communication field of the device one or more times. Communication between the application and the card may occur via Near Field Communication (NFC). Without limitation, one or more command application protocol data units may be transmitted via Bluetooth, Wi-Fi, RFID.

[0085] The card may receive one or more encryption keys and one or more parameters after input authentication. The card may receive a command application protocol data unit including one or more instructions associated with one or more encryption keys, one or more parameters, one or more applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a counter for encrypting the data with a ciphertext. The first device may receive the encrypted data, decrypt it, and store it. The one or more instructions may each be associated with a code and may include decrypting and / or verifying one or more decryption keys, storing and / or verifying one or more decryption keys. In some examples, the card may receive one or more command application protocol data units after input authentication.

[0086] In one example, after the server determines that the first device is a credit card and is associated with a fraudulent charge notification, a set of one or more cards may be prioritized to receive one or more command application protocol data units. In another example, after the server determines that the card is an identification card that has been abnormally used (e.g., used beyond a predetermined threshold) for one or more transactions, a set of one or more cards may be prioritized to receive one or more command application protocol data units. In yet another example, after the server determines how long it has been since the issuance of the card, a set of one or more cards may be prioritized to receive one or more command application protocol data units. In these non-limiting examples, the server may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a specified number of cards may be reprovisioned individually and / or in batches. Cards may also be reprovisioned according to a predetermined schedule and / or any combination thereof, as needed.

[0087] In step 425, one or more processors of the card may decrypt one or more encryption keys of one or more command application protocol data units. The card may receive one or more command application protocol data units. For example, the card may receive one or more command application protocol data units from an application of the device. The card may decrypt the one or more encryption keys. One or more applets of the card may store the one or more decryption keys in the secure element. The first applet may send the one or more decryption keys and one or more parameters to a second applet over a communication channel.

[0088] At step 430, one or more processors of the card may switch from the first account to the second account. For example, after decryption of one or more encryption keys, the card may change association from the first account to the second account. Additionally, the card may be limited to a predetermined use after decryption of one or more encryption keys. In one example, the card may be subject to one or more predetermined spending thresholds. In another example, the card may be used a predetermined number of times. For example, the card may be used only for a specified set of transactions, such as only for lunch and / or office furniture. In another example, the card may be used a predetermined number of times for one or more types of transactions, including but not limited to debit card transactions or credit card transactions.

[0089] In other examples, the card may only be used for transactions occurring during certain times (e.g., business hours 9:00 AM to 5:00 PM), on certain days of the week (e.g., weekdays, weekends, Mondays only, Thursdays and Fridays only), on certain dates (e.g., Wednesday, July 1, 2020), etc. In other examples, the card may only be used for certain purposes, such as for necessary expense purposes (e.g., travel including airfare, meals, and hotel), for designated projects (e.g., a particular type of equipment or hardware needed for a purpose), for designated or approved vendors, or a specific list of vendors known to provide goods or services needed for a certain purpose, etc.

[0090] It is understood that the above list is exemplary and any of these examples can be used in combination with each other, thus allowing a user to use the same card with different accounts, tailored for different purposes.

[0091] In step 435, the one or more processors of the card may send one or more response application protocol data units. For example, the card may send one or more response application protocol data units in response to one or more command application protocol data units. The one or more response application protocol data units may include one or more bytes indicating the status of the command. For example, at least one of the one or more response application protocol data units may indicate an execution status associated with one or more instructions. The card may send the one or more response application protocol data units to an application of the device. In some examples, the card may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the card returns a warning or execution failure status. For example, the one or more response application protocol data units may indicate if and when one or more encryption keys have been decrypted and / or if and when one or more decryption keys have been stored.

[0092] 5 illustrates a method 500 for secure reprovisioning according to an example embodiment. FIG. 5 may reference components that are the same as or similar to the system 100, the first device 200 of FIGS. 2A and 2B, the method 300 of FIG. 3, and the sequence diagram 400 of FIG.

[0093] At block 505, the method 500 may include verifying the input authentication. In some examples, an application on the device, such as an ATM, kiosk, POS device, or other device, may verify the input authentication. In other examples, the application on the device may send the input to a server for authentication. For example, the input for authentication may include, but is not limited to, at least one or more selected from the group of a personal identification number, a username and / or password, a mobile device number, an account number, a card number, and a biometric authentication (e.g., a face scan, a retina scan, a fingerprint, a voice input for voice recognition).

[0094] The device may include one or more processors and memory. The memory may include one or more applications, including but not limited to the first application. The device may be in data communication with any number of components. For example, the device may transmit data over a network to a server. The device may transmit data over a network to a database. Without limitation, the device may be a network-enabled computer. As referred to herein, a network-enabled computer includes, but is not limited to, a computing or communication device, including a server, a network appliance, a personal computer, a workstation, a telephone, a handheld PC, a personal digital assistant, a contactless card, a thin client, a fat client, an Internet browser, a kiosk, a tablet, a terminal, an ATM, or other device. The device may also be a mobile device. For example, the mobile device may include an Apple iPhone, an iPod, an iPad, or other mobile device running Apple's iOS operating system, any device running Microsoft's Windows Mobile operating system, any device running Google's Android operating system, or other smartphones, tablets, or similar wearable mobile devices.

[0095] The device may include processing circuitry and may include additional components including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware as necessary to perform the functions described herein. The device may further include a display and input devices. The display may be any type of device that presents visual information, such as a computer monitor, a flat panel display, a liquid crystal display, a light emitting diode display, a mobile device screen including a plasma panel, a cathode ray tube display. The input devices may include any device available and supported by the user's device for inputting information into the user's device, such as a touch screen, a keyboard, a mouse, a cursor control device, a touch screen, a microphone, a digital camera, a video recorder or camcorder, etc. These devices may be used to input information and interact with the software and other devices described herein.

[0096] The network may be connected to any one of the components with one or more of a wireless network, a wired network, or any combination of wireless and wired networks. In some examples, the network may include one or more of a fiber optic network, a passive optical network, a cable network, an Internet network, a satellite network, a wireless local area network (LAN), a global system for mobile communications, a personal communication service, a personal area network, a wireless application protocol, a multimedia messaging service, an enhanced messaging service, a short message service, a time division multiplexing based system, a code division multiple access based system, a D-AMPS, Wi-Fi, fixed wireless data, IEEE 802.11b, 802.15.1, 802.11n and 802.11g, Bluetooth, NFC, radio frequency identification (RFID), Wi-Fi, and the like.

[0097] Further, the network may include, but is not limited to, telephone lines, fiber optics, IEEE Ethernet 902.3, wide area networks, wireless personal area networks, LANs, or global networks such as the Internet. Further, the network may support an Internet network, a wireless communication network, a cellular network, or the like, or any combination thereof. The network may further include one network or any number of the exemplary types of networks described above, operating as a standalone network or in conjunction with one another. The network may utilize one or more protocols of one or more network elements to which they are communicatively coupled. The network may translate to and from one or more protocols of the network device. Although the network is shown as a single network, it will be understood that, according to one or more examples, the network may include multiple interconnected networks, such as, for example, the Internet, a service provider's network, a cable television network, an enterprise network such as a credit card company's network, and a home network.

[0098] The server may include one or more processors coupled to a memory. The server may be a central system, server, or platform that controls and invokes various data at different times to perform multiple workflow actions. The server may be in data communication with one or more applets of the card and / or applications of the device. For example, the server may be in data communication with the applets over one or more networks. The card may be in data communication with one or more servers over one or more networks and may operate as a respective front-end and back-end pair with the servers. The card may send one or more requests to the server, for example, from an applet being executed. The one or more requests may be associated with retrieving data from the server. The server may receive one or more requests from the card. Based on one or more requests from the applet, the server may retrieve the requested data. The server may send the received data to the applet, and the received data is responsive to the one or more requests.

[0099] In some examples, the server may be a dedicated server computer, such as a blade server, or may be a personal computer, laptop computer, notebook computer, palmtop computer, network computer, mobile device, wearable device, or any processor-controlled device capable of supporting the system components of Figure 5. It will be appreciated that in other embodiments, multiple servers or multiple computer systems may be used as needed or desired to support users, and backup or redundant servers may also be used to prevent network downtime in the event that a particular server fails.

[0100] The server may include an application that includes instructions to execute. For example, the application may include instructions to execute on the server. The application may communicate with any component of the system. For example, the server may execute one or more applications that enable network and / or data communication with one or more components of the system to transmit and / or receive data. Without limitation, the server may be a network-enabled computer. As referred to herein, a network-enabled computer includes computing or communication devices including, but not limited to, a server, network appliance, personal computer, workstation, telephone, handheld PC, personal digital assistant, contactless card, thin client, fat client, Internet browser, or other device. The server may also be a mobile device. For example, the mobile device may include an Apple iPhone, iPod, iPad, or other mobile device running Apple's iOS operating system, any device running Microsoft's Windows mobile operating system, any device running Google's Android operating system, and / or other smartphones, tablets, or similar wearable mobile devices.

[0101] The server may include processing circuitry and may include additional components including processors, memory, error and parity / CRC checkers, data encoders, anti-collision algorithms, controllers, command decoders, security primitives, and anti-tamper hardware, as necessary, to perform the functions described herein. The server may further include a display and input devices. The display may be any type of device that presents visual information, such as a computer monitor, a flat panel display, a liquid crystal display, a light emitting diode display, a mobile device screen including a plasma panel, a cathode ray tube display. The input devices may include any device available and supported by the user's device for inputting information into the user's device, such as a touch screen, a keyboard, a mouse, a cursor control device, a touch screen, a microphone, a digital camera, a video recorder or camcorder, etc. These devices may be used to input information and interact with the software and other devices described herein.

[0102] The database may include a relational database, a non-relational database, or other database implementations, and any combination thereof, including multiple relational and non-relational databases. In some examples, the database may include a desktop database, a mobile database, or an in-memory database. Furthermore, the database may be hosted internally by any component of the system, such as the card, device, and / or server, or the database may be hosted externally by any component of the system, such as the card, device, and / or server, or any storage device in data communication with the card, device, and / or server. In some examples, the database may be in data communication with any number of components of the system. For example, a server may retrieve requested data from a database transmitted by an applet. The server may transmit received data from the database to one or more applets over a network, the received data being responsive to the transmitted one or more requests. In other examples, one or more applets may transmit one or more requests for requested data from a database over a network.

[0103] In some examples, the exemplary procedures according to the present disclosure described herein can be executed by a processing device and / or computing device (e.g., computer hardware device). Such a processing / computing device can be all, part, or include a computer / processor, including, but not limited to, one or more microprocessors, and can utilize instructions stored in a computer-accessible medium (e.g., RAM, ROM, hard drive, or other storage device). For example, the computer-accessible medium can be part of the memory of a card, device, server, and / or database, or other computer hardware configuration.

[0104] In some examples, a computer-accessible medium (e.g., a storage device such as a hard disk, floppy disk, memory stick, CD-ROM, RAM, ROM, or a collection thereof, as described above herein) may be provided (e.g., in communication with a processing device). The computer-accessible medium may include executable instructions. Additionally or alternatively, a storage device may be provided separately from the computer-accessible medium, and may provide instructions to a processing device to perform certain example procedures, processes, and methods, as described above herein.

[0105] At block 510, method 500 may include determining one or more security concerns. For example, the server may determine the one or more security concerns. Without limitation, the one or more security concerns may be associated with identity theft, fraud based on transaction history and / or transaction frequency evaluated over any given period of time, notification of fraudulent charges, and / or any combination thereof.

[0106] At block 515, the method 500 may include evaluating the eligibility criteria. The server may transmit one or more results of the eligibility criteria evaluation. For example, the server may receive input from the application. The server may authenticate the input. After authenticating the input, the server may transmit one or more results of the eligibility criteria evaluation associated with the card. The card may receive one or more command application protocol data units after a security concern determination. For example, the server may transmit one or more messages to the application of the device indicating transmission of one or more command application protocol data units in response to determining any number of one or more security concerns associated with the card. In this manner, the application of the device may receive one or more messages from the server, the one or more messages indicating transmission of one or more command application protocol data units after a determination of one or more security concerns.

[0107] The card may be subject to eligibility criteria. For example, after determining one or more security concerns, the card may be subject to a priority list associated with eligibility before receiving one or more command application protocol data units. In some examples, the server may screen the first device based on at least one selected from the group of time since issuance of the card, use of the card in a transaction, type of transaction, type of card, one or more determinations of security concerns associated with the card, and / or combinations thereof. In this manner, the server may evaluate and rank how many cards and what types of cards will receive one or more command application protocol data units based on the eligibility criteria before sending a signal to the application of the device to transmit one or more command application protocol data units.

[0108] At block 520, the method 500 may include transmitting one or more first instructions after receiving the first cryptogram. For example, the one or more processors of the card may transmit the first cryptogram via the communication interface. For example, the one or more processors of the card may generate the first cryptogram using one or more keys and a counter value. The first cryptogram may include a counter value and transmission data. The card may include a memory including the one or more keys, the counter value, and the transmission data. The one or more processors may transmit the first cryptogram via the communication interface. For example, the one or more processors may transmit the first cryptogram to one or more applications. In some examples, the one or more processors may transmit the first cryptogram to an application that includes instructions to execute on the device. The one or more processors may update the counter value. For example, the one or more processors may update the counter value after transmitting the first cryptogram.

[0109] The card may include a contactless card, a contact card, or other devices described herein. As described above, the card may include one or more processors and memories. The memory may include one or more applets and one or more counters. Each counter may include a counter value. The memory may include a counter value, transmission data, and one or more keys.

[0110] The card may include a communication interface. The communication interface may include communication capabilities with the physical interface and the contactless interface. For example, the communication interface may communicate with the physical interface by swiping through a card swipe interface or by inserting into a card chip reader at an automated teller machine (ATM) or other device that communicates through the physical interface. In other examples, the communication interface may establish contactless communication with a card reader through near-field wireless communication methods such as NFC, Bluetooth, Wi-Fi, RFID, and other forms of contactless communication. The communication interface may directly communicate with the device's applications, servers, and / or databases over a network.

[0111] The card may communicate data with any number of components of the system. For example, the card may transmit data over the network to an application and / or server of a second device. The card may transmit data over the network to a database. In some examples, the card may transmit data over the network after entering one or more communication fields of any device. Without limitation, each entry may be associated with a tap, a swipe, a wave, and / or any combination thereof.

[0112] An application of the device may transmit one or more first command application protocol data units. For example, an application including instructions executing on the device may encrypt one or more keys. The application may transmit one or more first encryption keys. In some examples, the application may transmit one or more first parameters. Without limitation, the one or more parameters may include at least one selected from the group of primary account number information, expiration information, card verification code, and / or any combination thereof. In some examples, the one or more parameters may include dynamic information, such as, without limitation, card master keys, such as private keys and public / private keys, changed personalization data, and one or more spending limits. The application may transmit one or more first command application protocol data units including one or more first encryption keys, one or more first parameters, one or more first applet identifiers, and one or more instructions associated with a class of headers. In some examples, one or more session keys may be generated on the second device or server and used to encrypt the one or more master keys. In some examples, the application may send one or more first command application protocol data units to the card after one or more entrances of the communication interface into the communication field of the device. The communication between the application of the first device and the card may be via Near Field Communication (NFC). Without limitation, the one or more first command application protocol data units may be sent via Bluetooth, Wi-Fi, RFID.

[0113] At block 525, the method 500 may include switching from the first account to the second account after decrypting the first encryption key. The card may receive one or more first encryption keys and one or more first parameters from the application. The card may receive a first command application protocol data unit including one or more instructions associated with the one or more first encryption keys, the one or more first parameters, the one or more first applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a ciphertext that encrypts the data and a counter. The first device may receive the encrypted data and decrypt and store it. The one or more instructions may each be associated with a code and may include decrypting and / or verifying one or more first decryption keys, storing and / or verifying one or more first decryption keys. In some examples, the card may receive one or more first command application protocol data units after input authentication.

[0114] In one example, after the server determines that the first device is a credit card and is associated with a fraudulent charge notification, one or more sets of cards may be prioritized to receive one or more first command application protocol data units. In another example, after the server determines that the card is an identification card that has been abnormally used (e.g., used beyond a predetermined threshold) for one or more transactions, one or more sets of cards may be prioritized to receive one or more first command application protocol data units. In yet another example, after the server determines how long it has been since the issuance of the card, one or more sets of cards may be prioritized to receive one or more first command application protocol data units. In these non-limiting examples, the server may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a specified number of cards may be reprovisioned individually and / or in batches. Cards may be reprovisioned according to a predetermined schedule and / or any combination thereof, as needed.

[0115] The one or more processors of the card may decrypt the one or more first encryption keys of the one or more first command application protocol data units. The card may receive the one or more first command application protocol data units. For example, the card may receive the one or more first command application protocol data units from an application of the first device. The card may decrypt the one or more first encryption keys. The one or more applets of the card may store the one or more first decryption keys in a secure element. The first applet may send the one or more first decryption keys and the one or more first parameters to a second applet via a communication channel.

[0116] One or more processors of the card may switch from a first account to a second account. For example, after decrypting one or more first encryption keys, the card may change association from the first account to the second account. Additionally, the card may be limited to a predetermined use after decrypting one or more first encryption keys. In one example, the card may be subject to one or more predetermined spending thresholds. In another example, the card may be used a predetermined number of times. For example, the card may be used only for lunch and / or only for a specified set of transactions, such as office furniture. In another example, the card may be used a predetermined number of times for one or more types of transactions, including but not limited to debit card transactions or credit card transactions.

[0117] In other examples, the card may be used only for transactions occurring at certain times (e.g., business hours 9:00 AM to 5:00 PM), on certain days of the week (e.g., weekdays, weekends, Mondays only, Thursdays and Fridays only), on a particular date (e.g., Wednesday July 1, 2020), etc. In other examples, the card may be used only for predetermined purposes, such as for necessary expense purposes (e.g., travel expenses including airfare, meals, and hotel), for a specified project (e.g., a certain type of equipment or hardware needed for the project), for designated or approved vendors, or a specific list of vendors known to provide goods or services needed for a predetermined purpose, etc.

[0118] It is understood that the above list is exemplary and any of these examples can be used in combination with each other, so a user can use the same card for different purposes with different accounts.

[0119] At block 530, the method 500 may include transmitting one or more first responses. For example, one or more processors of the card may transmit one or more first response application protocol data units. For example, the card may transmit one or more first response application protocol data units in response to the one or more first command application protocol data units. The one or more first response application protocol data units may include one or more bytes indicating a status of the instruction. For example, at least one of the one or more first response application protocol data units may indicate an execution status associated with the one or more instructions. The card may transmit the one or more first response application protocol data units to an application of the device. In some examples, the card may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the card may return a warning or an execution failure status. For example, the one or more first response application protocol data units may indicate if and when the first encryption key was decrypted and / or if and when the one or more first decryption keys were stored.

[0120] At block 535, the method 500 may include transmitting one or more second instructions after receiving the second ciphertext. For example, the one or more processors of the card may transmit the second ciphertext via the communication interface. For example, the one or more processors of the card may generate the second ciphertext using one or more keys and a counter value. The second ciphertext may include a counter value and the transmission data. The card may include a memory including the one or more keys, the counter value, and the transmission data. The one or more processors may transmit the second ciphertext via the communication interface. For example, the one or more processors may transmit the second ciphertext to one or more applications. In some examples, the one or more processors may transmit the second ciphertext to an application including instructions to execute on the second device. The application including instructions to execute on the second device may be different from the application including instructions to execute on the first device. In some examples, the application for the first device may include an application including instructions to execute on a first ATM at a first location, and the application for the second device may include an application including instructions to execute on a second ATM at a second location. The one or more processors may update a counter value. For example, the one or more processors may update a counter value after transmitting the second cryptogram.

[0121] The application of the second device may transmit one or more second command application protocol data units. For example, the application including instructions executing on the second device may encrypt one or more second keys. The application of the second device may transmit one or more second encryption keys. In some examples, the application may transmit one or more second parameters. Without limitation, the one or more second parameters may include at least one selected from the group of primary account number information, expiration information, card verification code, and / or any combination thereof. In some examples, the one or more second parameters may include dynamic information such as, without limitation, changed personalization data including card master keys such as secret keys and public / private keys, and one or more spending limits. The application may transmit one or more second command application protocol data units including one or more second encryption keys, one or more second parameters, one or more second applet identifiers, and one or more instructions associated with a class of headers. In some examples, one or more session keys may be generated on the second device or server and used to encrypt one or more master keys. In some examples, the application may send one or more second command application protocol data units to the card after one or more entrances of the communication interface into the communication field of the device. The communication between the application of the second device and the card may be via Near Field Communication (NFC). Without limitation, the one or more second command application protocol data units may be sent via Bluetooth, Wi-Fi, RFID.

[0122] At block 540, the method 500 may include switching from the second account to the first account after decrypting the second encryption key. The card may receive one or more second encryption keys and one or more second parameters from the application. The card may receive a second command application protocol data unit including one or more instructions associated with the one or more second encryption keys, the one or more second parameters, the one or more second applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a ciphertext that encrypts the data and a counter. The first device may receive the encrypted data, decrypt it, and store it. The one or more instructions may each be associated with a code and may include decrypting and / or verifying one or more second decryption keys, storing and / or verifying one or more second decryption keys. In some examples, the card may receive one or more second command application protocol data units after input authentication.

[0123] In one example, a set of one or more cards may be prioritized to receive one or more second command application protocol data units after the server determines if the cards are credit cards and associated with a fraudulent charge notification. In another example, a set of one or more cards may be prioritized to receive one or more second command application protocol data units after the server determines if the cards are anomalously used identification (e.g., above a predetermined threshold) for one or more transactions. In yet another example, a set of one or more cards may be prioritized to receive one or more second command application protocol data units after the server determines how long it has been since the issuance of the cards. In these non-limiting examples, the server may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a specified number of cards may be reprovisioned individually and / or in batches. Cards may be reprovisioned according to a predetermined schedule and / or any combination thereof, as needed.

[0124] The one or more processors of the card may decrypt the one or more second encryption keys of the one or more second command application protocol data units. The card may receive the one or more second command application protocol data units. For example, the card may receive the one or more second command application protocol data units from an application of the second device. The card may decrypt the one or more second encryption keys. The one or more applets of the card may store the one or more second decryption keys in a secure element. The first applet may send the one or more second decryption keys and the one or more second parameters to a second applet via a communication channel.

[0125] One or more processors of the card may switch from the second account to the first account. For example, after decrypting one or more second encryption keys, the card may change association from the second account to the first account. Additionally, the card may be limited to a predetermined use after decrypting one or more second encryption keys. In one example, the card may be subject to one or more predetermined spending thresholds. In another example, the card may be used a predetermined number of times. For example, the card may be used only for a specified set of transactions, such as only for lunch and / or office furniture. In another example, the card may be used a predetermined number of times for one or more types of transactions, including but not limited to debit card transactions or credit card transactions.

[0126] In other examples, the card may be used only for transactions occurring at certain times (e.g., business hours 9:00 AM to 5:00 PM), on certain days of the week (e.g., weekdays, weekends, Mondays only, Thursdays and Fridays only), on certain dates (e.g., Wednesday, July 1, 2020), etc. In other examples, the card may be used only for certain purposes, such as for necessary expenses (e.g., travel expenses including airfare, meals, and hotel), for a specified project (e.g., a certain type of equipment or hardware needed for a project), for a specified or approved vendor, or a specific list of vendors known to provide goods or services needed for a certain purpose, etc.

[0127] It is understood that the above list is exemplary and any of these examples can be used in combination with each other, thus allowing a user to use the same card for different purposes with different accounts.

[0128] At block 545, the method 500 may include transmitting one or more second responses. For example, one or more processors of the card may transmit one or more second response application protocol data units. For example, the card may transmit one or more response application protocol data units in response to the one or more second command application protocol data units. The one or more second response application protocol data units may include one or more bytes indicating a status of the instruction. For example, at least one of the one or more second response application protocol data units may indicate an execution status associated with the one or more instructions. The card may transmit the one or more second response application protocol data units to an application of the device. In some examples, the card may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the card may return a warning or execution failure status. For example, the one or more second response application protocol data units may indicate if and when the second encryption key was decrypted and / or if and when the one or more second decryption keys were stored.

[0129] Figure 6 illustrates a method 600 for secure re-provisioning according to an example embodiment. Figure 6 may reference components that are the same as or similar to the system 100, the first device 200 of Figures 2A and 2B, the method 300 of Figure 3, the sequence diagram 400 of Figure 4, and the method 500 of Figure 5.

[0130] At block 605, the method 600 may include identifying one or more security concerns. In some examples, the first device may receive one or more command application protocol data units after determining the security concerns. For example, the server may determine the one or more security concerns. Without limitation, the one or more security concerns may be associated with identity theft, fraud based on transaction history and / or transaction frequency evaluated over any given period of time, notification of fraudulent charges, and / or any combination thereof.

[0131] At block 610, the method 600 may include notifying an application on the device to request an input. Based on one or more determinations by the server, one or more notifications including instructions to execute on the second device may be sent to the application. For example, the application may request an authentication input. For example, the authentication input may include, but is not limited to, at least one or more selected from the group of a personal identification number, a username and / or password, a mobile device number, an account number, a card number, and a biometric authentication (such as a face scan, a retina scan, a fingerprint, a voice input for voice recognition, etc.). The application may authenticate the input. In another example, the server may authenticate the input based on one or more requests sent from the application to the server.

[0132] At block 615, the method 600 may include prioritizing the card reprovisioning sequence. For example, the server may prioritize card reprovisioning. The first device may be subject to eligibility criteria. For example, after a determination of one or more security concerns, the first device may be subject to a priority list associated with eligibility before receiving one or more command application protocol data units. In some examples, the server may screen the first device based on at least one selected from the group of: time since issuance of the card, use of the card in a transaction, type of transaction, type of card, and a determination of one or more security concerns associated with the first device. In this manner, the server may evaluate and rank how many first devices and what type of first devices may receive the one or more command application protocol data units based on the eligibility criteria before signaling the application to a second device to transmit the one or more command application protocol data units. In one example, after the server determines that the first device is a credit card and is associated with a fraudulent charge notification, a set of one or more first devices may be prioritized to receive the one or more command application protocol data units. In other examples, one or more sets of first devices may be prioritized to receive one or more command application protocol data units after determining whether the first device was abnormally used (e.g., used beyond a predetermined threshold) for one or more transactions. In yet other examples, one or more sets of first devices may be prioritized to receive one or more command application protocol data units after the server determines how much time has passed since the issuance of the first device. In these non-limiting examples, the server may be further configured to prioritize which of these determinations to make first, second, third, etc. In this manner, a specified number of first devices may be reprovisioned individually and / or in batches.The first device may be re-provisioned as needed according to a predetermined schedule and / or any combination thereof.

[0133] At block 620, the method 600 may include transmitting a command application protocol data unit over the communication interface. In some examples, an application including instructions executing on the second device may encrypt one or more keys. The second device may include, but is not limited to, an ATM, a kiosk, a point-of-sale device, or other device. The application may transmit one or more encryption keys. In some examples, the application may transmit one or more parameters. Without limitation, the one or more parameters may include at least one selected from the group of primary account number information, expiration information, card verification code, and / or any combination thereof. In some examples, the one or more parameters may include dynamic information, such as, but is not limited to, changed personalization data, including card master keys, such as private keys and public / private keys, and one or more spending limits. The application may transmit one or more command application protocol data units including one or more encryption keys, one or more parameters, one or more applet identifiers, and one or more instructions associated with a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt the one or more master keys. In some examples, the application may transmit one or more command application protocol data units to the first device after one or more entries of the communication interface into the communication field of the second device, or may be communicated between the application and the first device via Near Field Communication (NFC). Without limitation, the one or more command application protocol data units may be transmitted via Bluetooth, Wi-Fi, RFID.

[0134] At block 625, the method 600 may include decrypting the one or more keys. The first device may receive a command application protocol data unit including one or more instructions associated with one or more encryption keys, one or more parameters, one or more applet identifiers, and a class of headers. In some examples, one or more session keys may be generated at the second device or server and used to encrypt one or more master keys. For example, one or more limited-use session keys may be generated based on a ciphertext that encrypts the data and a counter. The first device may receive the encrypted data, decrypt it, and store it. The one or more instructions may be associated with the code, and may include decrypting and / or verifying one or more decryption keys, and storing and / or verifying one or more decryption keys.

[0135] The first device may receive one or more command application protocol data units. For example, the first device may receive one or more command application protocol data units from an application of the second device. The first device may decrypt one or more encryption keys. One or more applets of the first device may store the one or more decryption keys in a secure element. The first applet may send the one or more decryption keys and one or more parameters to the second applet over a communication channel.

[0136] At block 630, the method 600 may include changing the association from the first account to the second account. After decrypting the one or more encryption keys, the first device may change the association from the first account to the second account. Additionally, the first device may be limited to a predetermined usage after decrypting the one or more encryption keys. In one example, the first device may be subject to one or more predetermined spending thresholds. In another example, the first device may be used a predetermined number of times. For example, the first device may be used only for a specified set of transactions, such as only for lunch and / or office furniture. In another example, the first device may be used a predetermined number of times for one or more types of transactions, including, but not limited to, debit card transactions or credit card transactions.

[0137] In other examples, the first device may be used only for transactions occurring at predetermined times (e.g., business hours 9:00 AM to 5:00 PM), on predetermined days of the week (e.g., weekdays, weekends only, Mondays only, Thursdays and Fridays only), on a predetermined date (e.g., Wednesday, July 1, 2020). In other examples, the first device may be used only for predetermined purposes, such as for expense purposes (e.g., travel expenses including airfare, meals, and hotel), for a specified project (e.g., a particular type of equipment or hardware required for a project), for designated or approved vendors, or for a specific list of vendors known to provide goods or services required for a predetermined purpose, etc.

[0138] It will be understood that the above list is exemplary and any of these examples can be used in combination with each other, thus allowing a user to use the same card with different accounts, tailored for different purposes.

[0139] At block 635, the method 600 may include transmitting a response application protocol data unit via the communication interface. The first device may transmit the one or more response application protocol data units in response to the one or more command application protocol data units. The one or more response application protocol data units may include one or more bytes indicating a status of the instruction. For example, at least one of the one or more response application protocol data units may indicate an execution status associated with the one or more instructions. The first device may transmit the one or more response application protocol data units to an application of the second device. In some examples, the first device may return an execution success status associated with the one or more instructions. Unless the execution status of the one or more instructions is successful, the first device may return a warning or execution failure status. For example, the one or more response application protocol data units may indicate whether and when one or more encryption keys have been decrypted and / or whether and when one or more decryption keys have been stored.

[0140] Additionally, it should be noted that the systems and methods described herein may be embodied in one or more physical media, such as, but not limited to, a compact disc (CD), a digital versatile disc (DVD), a floppy disk, a hard drive, a read-only memory (ROM), a random access memory (RAM), or other physical media capable of storing other data as well. For example, a data storage device may include a random access memory (RAM) and a read-only memory (ROM) that access and store data, information, and computer program instructions. A data storage device may also include an operating system, application programs, including, for example, a web browser application, an email application, and / or other applications, and a storage medium or other suitable type of memory (e.g., RAM, ROM, programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic disk, optical disk, floppy disk, hard disk, removable cartridge, flash drive, any type of tangible and non-transitory storage medium) on which files, including data files, may be stored. The data storage of a network-enabled computer system may include electronic information, files, and documents stored in a variety of ways, such as flat files, indexed files, hierarchical databases, relational databases (e.g., software from Oracle® Corporation, Microsoft Excel files, Microsoft Access files, solid-state storage devices (including flash arrays, hybrid arrays, or server-side products), enterprise storage (including online or cloud storage), or other storage mechanisms. Additionally, the diagram illustrates various components (e.g., servers, computers, processors, etc.) separately.The functions described as being performed by various components may be performed by other components, the various components may be combined or separated, and other variations are possible.

[0141] In the foregoing specification, various embodiments have been described with reference to the accompanying drawings. It will be apparent, however, that various modifications and changes are possible and additional embodiments may be implemented without departing from the broader scope of the invention as set forth in the claims. The specification and drawings are, therefore, to be regarded in an illustrative sense rather than a restrictive sense.

Claims

1. A method for secure reprovisioning of a contactless card storing first personalization data, comprising: Generate the ciphertext, Transmitting the cryptogram to a device via a communication field; receiving encrypted data from the device via the communication field; decrypting the encrypted data to provide decrypted data corresponding to second personalization data; storing the second personalization data on the contactless card and reprovisioning the contactless card; How to safely reprovision.

2. The cryptogram is generated after the contactless card enters the communication field. The method of secure re-provisioning according to claim 1 .

3. The first personalization data includes one or more first keys; the second personalization data includes one or more second keys; The method of secure re-provisioning according to claim 1 .

4. When the second personalization data is stored, the association of the contactless card is changed from a first account to a second account. The method of secure re-provisioning according to claim 1 .

5. The contactless card is restricted to a predetermined use after the second personalization data is decrypted. The method of secure re-provisioning according to claim 1 .

6. The predetermined use includes a predetermined expenditure threshold. The method of secure re-provisioning according to claim 5.

7. The ciphertext includes transmission data, the encrypted data is received after decryption and verification of the ciphertext; The method of secure re-provisioning according to claim 1 .

8. The cryptographic data includes at least one selected from the group consisting of primary account number information, an expiration date, a card verification code, and a private key. The method of secure re-provisioning according to claim 1 .

9. The verification of the transmitted data is performed by an authentication server connected to the device; The authentication server receives the transmission data from the device. The method of secure re-provisioning according to claim 7.

10. The contactless card receives the encrypted data at a predetermined time. The method of secure re-provisioning according to claim 1 .

11. The contactless card is adapted to be conditioned on one or more eligibility criteria before receiving the cryptographic data; The one or more eligibility criteria include at least one selected from the group including time since issuance of the contactless card, use of the contactless card in a transaction, transaction type, and type of the contactless card. The method of secure re-provisioning according to claim 1 .

12. The device includes a mobile device, a personal computer, a tablet, an automated teller machine (ATM), a wearable device, or a terminal. The method of secure re-provisioning according to claim 1 .

13. A contactless card comprising: a memory for storing first personalization data; and a processor, The processor, Generate the ciphertext, Transmitting the cryptogram to a device via a communication field; receiving encrypted data from the device via the communication field; decrypting the encrypted data to provide decrypted data corresponding to second personalization data; storing the second personalization data on the contactless card and reprovisioning the contactless card; Contactless card.

14. The cryptographic data is received from an automated teller machine (ATM) at a first location; the cryptographic data is generated by an authentication server associated with the contactless card; The encrypted data is transmitted by the authentication server to the ATM.

14. A contactless card according to claim 13.

15. The device stores an application including instructions for execution at an ATM at a second location.

15. A contactless card according to claim 14.

16. The cryptogram includes transmission data, the encrypted data is received after decryption and verification of the ciphertext; 14. A contactless card according to claim 13.

17. The method of claim 16, wherein the processor receives the cryptographic data after determining a security concern associated with the contactless card.

14. A contactless card according to claim 13.

18. When executed by a computer device, the computer device generating a ciphertext; transmitting said cryptogram to a device via a communications field; receiving encrypted data from the device via the communication field; decrypting the encrypted data to provide decrypted data corresponding to second personalization data; storing the second personalization data on the contactless card and reprovisioning the contactless card; A non-transitory computer-readable medium storing instructions for performing operations including:

19. The computing device, comprising: a contactless card; 20. The non-transitory computer readable medium of claim 18. When the second personalization data is stored, the association of the contactless card is changed from a first account to a second account.

20. The non-transitory computer readable medium of claim 18.

Images