Contactless Card Checkout via Browser-to-App Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face challenges in accurately entering account identifiers for payment cards, which can lead to security risks and higher transaction fees due to 'card not present' transactions, and existing systems are vulnerable to fraud.

Innovation Solution

A method using a contactless card to generate a cryptogram, verified by a server, which generates a virtual card number (VCN) for secure, automated checkout, bypassing browser restrictions and enabling 'card present' transaction processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users manually enter account identifiers for payment cards, then the transaction can be processed, but users make mistakes and enter incorrect account numbers, leading to security risks and higher processing fees

Engineering Contradiction:

Improveease of entering account identifierVSAvoidaccuracy of account identifier entry

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system enables the contactless card to automatically provide its account identifier through NFC communication with the mobile device. The card itself performs the service of identifying itself, eliminating the need for manual user input and thereby preventing entry errors while maintaining ease of operation.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical process of manual keyboard entry with an automated electronic system using NFC (Near Field Communication). The contactless card communicates account information electronically to the mobile device, substituting the manual mechanical typing process with a contactless electronic data transfer mechanism.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If conventional card not present transaction processing is used, then online transactions can be completed, but higher processing fees and greater fraud risks are incurred

Engineering Contradiction:

Improvetransaction processing capabilityVSAvoidtransaction processing fees

Core Design Contradiction:

ProductivityVSLoss of energy

Solution Approach 1:

The mobile device acts as an intermediary between the contactless card and the payment terminal. It captures the account identifier and cryptogram from the card via NFC, then transmits this data to the payment processor, enabling the transaction to be treated as card-present rather than card-not-present, thereby reducing fees while maintaining online transaction capability.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If manual account identifier entry is used, then transactions can be processed, but cameras or malicious entities can capture and identify account identifiers, posing security risks

Engineering Contradiction:

Improvetransaction completion processVSAvoidsecurity risks from account identifier capture

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the account identifier from the visual display domain and transfers it to the NFC communication domain. Instead of displaying the account number on the screen where it can be captured by cameras, the system uses NFC to transmit the identifier directly to the mobile device, removing it from the vulnerable visual interface and eliminating the risk of camera capture.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The mobile device serves as a secure intermediary that receives the account identifier directly from the contactless card through NFC communication. This intermediate step prevents the account identifier from being exposed in the browser environment where it could be captured by malicious entities, as the data never appears in plain text on the screen.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250371518A1Mobile web browser authentication and checkout using a contactless card

Publication Date: 2025.12.04 CAPITAL ONE SERVICES LLC

AI summary

A merchant page in a browser may receive selection of a first financial institution. The merchant page may generate a uniform resource identifier (URI) directed to an application. At least a portion of the URI may be registered with the application and the first financial institution in a mobile operating system. Responsive to receiving selection of the URI, the mobile OS may launch the application, which may authenticate credentials for an account. The application may associate the user ID parameter and the session ID parameter with the account and receive a cryptogram from a contactless card. The application may receive, from a server, an indication specifying the server verified the cryptogram. The OS may launch the browser, which may refresh the page. The refreshed page may include a virtual card number (VCN) in a first form field. A transaction may be processed based on the VCN.