18232493. CONTACTLESS CARD PERSONAL IDENTIFICATION SYSTEM simplified abstract (Capital One Services, LLC)

From WikiPatents
Jump to navigation Jump to search

CONTACTLESS CARD PERSONAL IDENTIFICATION SYSTEM

Organization Name

Capital One Services, LLC

Inventor(s)

Kevin Osborn of Newton MA (US)

Srinivasa Chigurupati of Long Grove IL (US)

Jeffrey Rule of Chevy Chase MD (US)

CONTACTLESS CARD PERSONAL IDENTIFICATION SYSTEM - A simplified explanation of the abstract

This abstract first appeared for US patent application 18232493 titled 'CONTACTLESS CARD PERSONAL IDENTIFICATION SYSTEM

Simplified Explanation

The abstract describes a dual-factor PIN based authentication system using a cryptogram provided by a contactless card and a PIN stored on the card to authenticate the client.

  • Contactless card provides a cryptogram for authentication
  • Authentication may require a PIN match determination
  • Cryptogram may be formed using the stored PIN and dynamic key
  • Authentication is achieved by comparing the cryptogram with an expected value

Potential Applications

This technology could be applied in:

  • Access control systems
  • Financial transactions
  • Secure online authentication

Problems Solved

This technology helps solve:

  • Unauthorized access
  • Identity theft
  • Security breaches

Benefits

The benefits of this technology include:

  • Enhanced security
  • Dual-factor authentication
  • Protection of sensitive information

Potential Commercial Applications

A potential commercial application for this technology could be in:

  • Banking and financial institutions
  • Government agencies
  • Healthcare organizations

Possible Prior Art

One possible prior art for this technology could be:

  • Two-factor authentication systems
  • Contactless card authentication methods

Unanswered Questions

How does this technology handle PIN changes?

The article does not address how the system manages PIN changes and updates for the contactless card.

What are the potential vulnerabilities of this authentication system?

The article does not discuss any potential vulnerabilities or weaknesses that could be exploited in this dual-factor authentication system.


Original Abstract Submitted

A dual-factor PIN based authentication system and method uses a cryptogram provided by a contactless card associated with the client in association with a PIN stored by the contactless card to authenticate the client. In some embodiments, cryptogram authentication may be preconditioned upon a PIN match determination by the contactless card. In other embodiments, the cryptogram may be formed at least in part using the personal identification number (PIN) stored on the contactless card encoded using a dynamic key stored by the contactless card and uniquely associated with the client. Authentication may be achieved by comparing the cryptogram formed using the PIN against an expected cryptogram generated an expected PIN and an expected dynamic key.