Contactless Card Authentication Using Session-Key Cryptograms

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing contactless cards lack robust cryptographic authentication methods, relying on insecure log-in credentials and vulnerable data transmission protocols, which compromise transaction security and user identity verification.

Innovation Solution

Implement cryptographic authentication systems using contactless cards that generate and verify cryptograms with session keys, employing key diversification to enhance security and reduce side-channel attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional log-in credentials (username and password) are used for authentication, then ease of operation is improved, but reliability deteriorates due to vulnerability to hacking and unauthorized access

Engineering Contradiction:

Improveauthentication convenienceVSAvoidauthentication security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces traditional mechanical authentication methods (username/password entry) with a contactless cryptographic authentication system using NFC technology. The contactless card contains cryptographic keys and generates cryptograms that are verified by the server, eliminating the need for users to manually enter credentials while providing stronger security through cryptographic verification.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If email or SMS is used for transaction verification, then ease of operation is improved, but reliability deteriorates due to susceptibility to attack and hacking

Engineering Contradiction:

Improveverification convenienceVSAvoidtransaction security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces email/SMS-based verification with direct cryptographic verification through the contactless card. The card generates and transmits cryptograms that are verified by the server using stored cryptographic keys, providing secure transaction verification without relying on vulnerable communication channels like email or SMS.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Ease of operation

If cryptographic keys are transmitted or stored in accessible locations, then ease of operation is improved, but object-generated harmful factors worsen due to exposure to side-channel attacks

Engineering Contradiction:

Improvesystem accessibilityVSAvoidside-channel attack vulnerability

Core Design Contradiction:

Ease of operationVSObject-generated harmful factors

Solution Approach 1:

The patent implements local quality by keeping cryptographic keys confined to specific secure locations (the contactless card and server databases) and only transmitting derived cryptograms during authenticated transactions. The keys never leave their secure enclaves, and each transaction uses locally-generated cryptograms that are verified without exposing the underlying keys, thus preventing side-channel attacks while maintaining system functionality.

Inventive Principle:

Principle #3Local quality

4Ease of operation

If contactless card activation is simplified, then ease of operation is improved, but reliability deteriorates due to lack of robust authentication

Engineering Contradiction:

Improvecard activation simplicityVSAvoidactivation security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces manual activation processes (calling telephone numbers or visiting websites) with contactless NFC-based activation. The user simply taps the contactless card against a reader, and the system automatically performs cryptographic verification and activation, providing both simplicity and robust security through the cryptographic authentication mechanism.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP3861502B1Systems and methods for cryptographic authentication of contactless cards

Publication Date: 2026.02.18 CAPITAL ONE SERVICES LLC

Figure 1A
Figure 1B
Figure 2

AI summary

Example embodiments of systems and methods for data transmission and authorizing transactions between transmitting and receiving devices are provided. In an embodiment, a method includes generating a request for at least one authentication factor when a value of the transaction exceeds a predetermined value, wherein the at least one authentication factor includes a cryptogram, receiving an authentication signal, the authentication signal including the cryptogram, and authorizing a transaction when the authentication signal is received.