CN113595714A - 带有多个旋转安全密钥的非接触式卡 - Google Patents

带有多个旋转安全密钥的非接触式卡 Download PDF

Info

Publication number
CN113595714A
CN113595714A CN202110485202.XA CN202110485202A CN113595714A CN 113595714 A CN113595714 A CN 113595714A CN 202110485202 A CN202110485202 A CN 202110485202A CN 113595714 A CN113595714 A CN 113595714A
Authority
CN
China
Prior art keywords
key
contactless card
server
communication
selection algorithm
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202110485202.XA
Other languages
English (en)
Inventor
杰弗里·鲁尔
斯里尼瓦沙·希古鲁帕蒂
凯文·奥斯本
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Capital One Services LLC
Original Assignee
Capital One Services LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Capital One Services LLC filed Critical Capital One Services LLC
Publication of CN113595714A publication Critical patent/CN113595714A/zh
Pending legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/352—Contactless payments by cards
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/002—Countermeasures against attacks on cryptographic mechanisms
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/75—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation
    • G06F21/755—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation with measures against power attack
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/326—Payment applications installed on the mobile devices
    • G06Q20/3267—In-app payments
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0806—Details of the card
    • G07F7/0833—Card having specific functional components
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/18—Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0877—Generation of secret information including derivation or calculation of cryptographic keys or passwords using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/03—Protecting confidentiality, e.g. by encryption
    • H04W12/033—Protecting confidentiality, e.g. by encryption of the user plane, e.g. user's traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/40—Security arrangements using identity modules
    • H04W12/47—Security arrangements using identity modules using near field communication [NFC] or radio frequency identification [RFID] modules

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Accounting & Taxation (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Signal Processing (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Finance (AREA)
  • Computing Systems (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Software Systems (AREA)
  • Mathematical Physics (AREA)
  • Storage Device Security (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

非接触式卡可以包括用于特定操作(例如，加密或签名通信)的多个密钥。非接触式卡还可以包括使用密钥选择模块的小应用程序。密钥选择模块可以选择多个密钥中的一个，并且小应用程序可以使用密钥来，例如使用加密或签名算法对通信进行加密或签名。非接触式卡可以通过客户端设备将加密或签名的通信发送到主机。主机可以重复非接触式设备的密钥选择技术来选择相同的密钥，从而解密或验证通信。

Description

带有多个旋转安全密钥的非接触式卡
背景技术
非接触式卡最近非常流行，因为这些卡简化了店内交易和在线交易。同时，由于这些卡的普及，黑客积极尝试伪造非接触式卡进行未经授权的交易。因此，人们重新把焦点放在加强这些卡的安全上。
发明内容
可以加密通信，使未经授权的收件人无法确定通信内容。存在用于加密通信的各种技术。当使用对称密码算法，例如加密算法、基于哈希的消息认证码(HMAC)算法和基于密码的消息认证码(CMAC)算法时，重要的是密钥在最初使用对称算法和密钥处理受保护的数据的一方和使用相同密码算法和相同密钥接收和处理数据的一方之间保持是秘密的。
暴力攻击可以包括***地检查所有可能的密钥，直到找到正确的密钥。黑客经常使用暴力攻击来窃取存储在非接触式卡上的密钥。因此，同样的密钥不被使用太多次是很重要的。如果密钥使用或重复使用太频繁，则该密钥可能会受到损害。每次使用密钥时，它向攻击者提供额外的数据样本，该数据样本由密码算法使用相同的密钥处理的。攻击者拥有使用相同密钥处理的数据越多，攻击者会发现密钥值的可能性就越大。经常使用的密钥可能会遭受各种不同的攻击。
而且，每次执行对称密码算法时，它都可以揭示关于对称密码操作期间使用的密钥的信息，例如侧信道数据。侧信道数据可以包括在使用密钥的同时密码算法执行时发生的微小功率波动。可以对侧信道数据进行足够的测量，以至于揭示足以允许攻击者恢复密钥的有关密钥的足够信息。使用相同的密钥交换数据将重复揭示由相同的密钥处理的数据。
然而，通过限制使用特定密钥的次数，攻击者能够收集的侧信道数据量受到限制，从而减少了对这种攻击类型的暴露。因此，本公开的目的是实施一种密码***，其通过实施多个安全密钥来增强非接触式卡抵御此类攻击的安全性。在一个示例实施例中，非接触式卡可以包括用于特定操作(例如，加密或签名通信)的多个密钥。非接触式卡还可以包括使用密钥选择模块的小应用程序。密钥选择模块可以选择多个密钥中的一个，并且小应用程序可以使用密钥来，例如使用加密或签名算法加密或签名通信。非接触式卡可以通过终端或客户端设备将加密或签名的通信发送到主机。主机可以重复或复制非接触式设备的密钥选择技术以选择相同的密钥，从而解密或验证通信。例如，主机可以使用与非接触式卡相同的密钥选择模块或算法。因此，主机的密钥选择模块可以选择与非接触式卡选择的密钥相同的密钥。使用相同的密钥，主机可以解密或验证通信的真实性。
在一个示例实施例中，密钥选择模块可以接收输入并基于输入选择密钥。输入可以由非接触式卡或外部设备(例如，终端或主机)提供。密钥选择模块可以执行将输入分配给存储在非接触式卡上的密钥中的一个的数学算法或函数。
在一个示例实施例中，非接触式卡可以存储多个加密算法。此外，非接触式卡可以包括加密算法选择模块。对于每个加密操作，加密算法选择模块当被执行时，可以选择多个加密算法中的一个。使用所选择的加密算法和所选择的密钥，非接触式卡可以加密通信，并将加密的通信传送到终端。
下文参照以下描述并在附图中说明的具体示例实施例，更详细地解释了公开设计的进一步特征及其由此提供的优势。
附图说明
图1示出了根据示例实施例的非接触式卡。
图2示出了根据示例实施例的终端或客户端设备。
图3示出了服务器或主机的示例性硬件组件。
图4示出了用于将信息从非接触式卡传输到主机的示例流程图。
具体实施方式
实施例的以下描述提供了参考数字的非限制性代表性示例，以具体描述本发明的不同方面的特征和教导。应该认识到所描述的实施例能够与来自实施例的描述的其他实施例以分开方式或组合方式实施。审阅实施例的描述的本领域普通技术人员应当能够学习和理解本发明的不同描述方面。实施例的描述应促进对本发明的理解，使得未具体涵盖但在已经阅读了实施例的描述的本领域技术人员的知识范围内的其他实施方式将被理解为与本发明的应用一致。
非接触式卡可以包括基板和用于存储和处理信息的处理电路。处理电路可以包括处理器、存储器、错误和奇偶校验/CRC校验器、数据编码器、防冲突算法、控制器、命令解码器、安全原语和防篡改硬件。
非接触式卡的尺寸可以与支付卡、***或借记卡的尺寸相同。根据ISO/IEC7810标准的ID-1，非接触式卡的尺寸可以是85.60毫米×53.98毫米(3.37英寸×2.13英寸)。然而，根据这些公开的非接触式卡可以具有不同的尺寸，并且非接触式卡不必以支付卡来实施。
信息的存储可以发生在处理电路的存储器中，存储器可以是只读存储器、一次写入多次读取存储器或读/写存储器，例如RAM、ROM和EEPROM。非接触式卡可以包括这些存储器中的一个或多个。只读存储器可在工厂编程为只读的或一次性可编程的。一次性可编程性提供了一次写入然后多次读取的机会。一次写入/多次读取存储器可以在存储器芯片出厂后的某一时间进行编程。一旦存储器被编程，它就不能被重写，但它可以被多次读取。读/写存储器出厂后可被多次编程和重新编程。它也可以被多次读取。
非接触式卡的存储器可分为几个区域，每个区域具有不同的安全级别。非接触式卡处理器可以跟踪哪些存储器地址属于哪些区域以及在什么情况下可以访问每个区域。非接触式卡处理器也可以处理信息并将信息存储到存储器上。在示例实施例中，非接触式卡存储器可分为四个区域：秘密区域、机密区域、使用区域和公共区域。
秘密区域可用于存储仅可以由处理器本身使用的信息，例如，口令(password)、密码密钥。存储在该区域中的信息在非接触式卡之外不可读。在实施例中，可以使用能够执行密码功能的单独处理器来实现秘密区域。密码密钥可以传递到秘密区域，或者可以在秘密区域中生成，并且在这两种中的任何一种情况下，密钥都可以存储在秘密区域中并用于支持密码服务。如果需要，可以从秘密区域导出密码密钥。
在示例实施例中，非接触式卡可以是JavaCard，其可以包括一个或多个小应用程序。小应用程序可以被防火墙保护，并且数据可以分配给小应用程序进行存储。数据可以事务性地存储在EEPROM闪存中，例如，如果断电时写入未完成，则内容与之前相同。
机密区域可用于存储与该卡进行的所有交易的列表。机密区域可以具有口令保护。在示例实施例中，口令仅为发卡机构所知，发卡机构可以检查卡的历史，以获得***误用的证据。机密区域可以具有只读访问限制，使得无法修改存储在该区域中的信息，例如，无法修改交易列表。
使用区域可用于存储可定期更新或修改的信息。根据数据的敏感性，可以为该区域实施口令。使用区域可以具有由口令保护的读取和写入访问。
公共区域可用于保存非敏感信息，例如发卡机构的名称和地址。公共区域可以具有只读访问，无需口令。
在一个示例实施例中，非接触式卡的存储器可以存储多个密钥。这些密钥可用于各种操作，例如，加密或签名。此外，非接触式卡可以存储多个加密算法。存储器还可以存储密钥选择模块和加密选择模块。使用密钥选择模块，非接触式卡的小应用程序可以选择用于非接触式卡的操作(例如，加密)的密钥。使用加密算法选择模块，非接触式卡可以选择加密算法对通信进行加密。
非接触式卡可与终端进行无线通信。例如，非接触式卡可以是***，其包括磁带或射频标识(“RFID”)标签。一些非接触式卡可以包括磁带和RFID标签两者。
如果非接触式卡保持接近终端，则终端可以与非接触式卡通信。终端可以使用使用射频感应的近场通信(“NFC”)技术在短距离内读取非接触式卡。非接触式卡可以包括感应器以捕获由终端传送的一些入射射频询问信号，对该信号进行整流，并使用该信号为卡的处理电路供电。因此，非接触式卡可以在没有内部电源的情况下工作。然而，在一些实施例中，非接触式卡可以包括内部电源。
非接触式卡可以符合EMV要求。Europeay、MasterCard和Visa(“EMV”)是基于智能支付卡的技术标准的支付方法。EMV卡除了磁条外，还可以将其数据存储在集成电路上。
接触式卡的标准可基于ISO/IEC 7816，而非接触式卡的标准可基于ISO/IEC14443。
图1示出了根据示例实施例的非接触式卡100。在本实施例中，非接触式卡100可以是由服务提供者101发行的支付卡，其名称可以显示在非接触式卡100的前面或背面。非接触式卡100的尺寸可以符合ISO/IEC 7810标准的ID-1，即85.60毫米×53.98毫米。非接触式卡100可以包括用于建立与接触端子的接触的接触垫102。非接触式卡100还可以包括图1中未显示的处理电路、天线和其他组件(例如，一个或多个微处理器和一个或多个存储器)。这些组件可以位于接触垫102的后面，但是，应当理解，这些组件也可以位于非接触式卡100内的其他位置，并且不需要位于非接触式卡100的后面。非接触式卡100还可以包括显示在卡的前面或背面的各种标识信息103。非接触式卡100还可以包括可位于卡的背面的磁条或磁带。
在一个示例实施例中，非接触式卡100可以包括电源和定时器。定时器可以由电源供电。例如，当处理交易或加密消息时，非接触式卡的处理器可以从定时器接收时间信号。处理器可以基于时间信号加密消息、选择密钥或选择加密算法。在一个示例实施例中，非接触式卡可以从终端、客户端设备或主机接收时间信号。在本实施例中，非接触式卡可以基于接收到的时间信号来加密消息或选择密钥。
在另一个示例中，非接触式卡100的小应用程序可以包括计数器模块。计数器模块可以维护可以对事件的发生次数进行计数的计数数字。例如，该模块可以计算非接触式卡与终端、客户端设备或主机交互的次数。每次在终端处扫描非接触式卡时，非接触式卡的处理器可以向计数器模块发送信号以使计数数字递增。
在示例实施例中，非接触式卡具有射频识别(“RFID”)标签。在一些实施例中，RFID标签可以包括用于存储和处理信息的处理电路，所述信息调制和解调射频信号(通常从终端、读写器或扫描仪接收)。RFID标签还可以包括用于接收和传送信号的天线。另外，RFID标签可以包括用于从入射终端信号收集DC功率的电源或装置。这些装置可以包括调制器、电压调节器、复位和到天线的连接。天线可以是电偶极天线或线圈天线。
在示例实施例中，非接触式卡的线圈可以作为空心变压器的次级。终端可以通过断电或调幅与非接触式卡进行通信。非接触式卡可以利用非接触式卡的电源连接中的间隙推断从终端传送的数据，该间隙在功能上通过电容器维持。非接触式卡可以通过切换非接触式卡的线圈上的负载或负载调制进行通信。通过干扰可以在终端的线圈中检测到负载调制。
终端可以从非接触式卡读取信息并将信息写到非接触式卡上。在一些实施例中，终端可以将信息从非接触式卡传递到主机(或服务器)，并将信息从主机写入非接触式卡。在一些实施例中，主机可以是终端。终端可为非接触式卡供电，并将卡的硬件接口通信地连接到主机。由于非接触式卡的处理器可以控制进出卡的存储器的实际信息流，因此终端可以以只是将信息发送到主机的最小处理能力来操作。在一个实施例中，终端可以是支付终端。在其他实施例中，终端可以是诸如手机、智能电话、笔记本电脑、台式机、可穿戴设备等的客户端设备。
在一些实施例中，终端可以包括处理器和收发机。终端的处理器可以解码从非接触式卡接收的任何数据。终端还可以更新、删除或修改存储在非接触式卡上的信息。
终端通过将数据传递到非接触式卡的处理器，可以在非接触式卡上写入数据。处理器可以处理数据并将其存储在非接触式卡的存储器中。终端可以与ISO 14443中描述的非接触式卡进行双向通信。非接触式卡可以包括RFID标签。双向通信可以被数字编码。可以存在用于双向通信的几个频率范围和几个专有格式(例如，125MHz范围内的HID)。13.56MHz频率范围(NFC)由ISO 14443兼容卡控制。
终端和非接触式卡可以交换消息，其可以包括命令或数据。例如，终端可以向非接触式卡发送命令消息，非接触式卡可以在其处理器中处理命令消息，并且非接触式卡可以将响应消息发送回终端。命令消息和响应消息中的每个都可以包括数据。消息可以包括TLV(类型、长度和值)数据和诸如STORE DATA命令之类的命令，该命令提示将消息中包括的数据存储在非接触式卡中。
图2示出了根据示例实施例的终端200。在该示例实施例中，终端200可以包括显示屏201。该显示屏可以是任何类型的显示屏，例如，LCD显示屏。终端200还可以包括小键盘202。使用小键盘202，客户可以向终端200输入信息。终端200还可以包括用于将芯片卡***终端200的开口203。使用开口203，客户可以将芯片卡***终端200中，使得终端200的引脚可以与芯片卡的接触垫电连接。在一些实施例中，终端200可以包括磁卡开口204。使用磁卡开口204，客户可以在终端200处刷非接触式卡，并且终端200可以获得存储在非接触式卡的磁带上的任何信息。
在示例实施例中，终端200可以是非接触式RFID终端，其可以包括用于发送和接收信号的天线、收发机和用于解码数据的处理器。在无源***中，终端可以传送能量场，其可以唤醒标签并为其芯片供电，从而使其能够传送或存储数据。反过来，标签将无线电信号转换为可用功率，并以无线电信号的形式响应终端。信号可以包括标签的身份和其他信息。一旦终端接收到响应，终端就转换响应并提取无线电信号中包含的任何信息。然后，从标签收集的信息通过通信接口传送到主机***，其中数据可以存储在数据库中或由计算机***进行分析。终端还可以更新、删除或修改存储在非接触式卡上的信息。
在图2的示例实施例中，终端200具有一个或多个天线(未显示)，其使得设备能够从非接触式卡读取信息并在非接触式卡上写入信息。终端200可以包括指示器205，其显示设备可以是非接触式的。
在本公开中，术语读写器、扫描仪、终端和客户端设备可以互换使用，并且它们都是指可以扫描非接触式卡和/或在非接触式卡上写入信息的设备。
在一些实施例中，终端可以通信地连接到主机、后端服务器或服务器。在其他实施例中，终端可以集成在主机(或服务器)中。主机可以从非接触式卡(例如，通过终端)接收加密或签名的通信，并且可以解密通信或验证通信的真实性。
图3示出了主机或后端服务器的示例性硬件组件。计算机***300或类似配置的其他计算机***可以包括并执行一个或多个子***组件以执行本文所述的功能，包括上述各种流程的步骤。同样，包括计算机***300的一些相同组件的移动设备、手机、智能手机、膝上型计算机、台式机、笔记本电脑、平板电脑、可穿戴设备、服务器等可以运行应用程序(或软件)并执行上述步骤和功能。计算机***300可以连接到网络314，例如，因特网或其他网络，以接收查询、获取数据并传送如上所述的信息和激励。
计算机***300通常包括存储器302、辅助存储设备304和处理器306。计算机***300还可以包括多个处理器306，并且被配置为多个，例如，刀片式服务器，或其他已知的服务器配置。计算机***300还可以包括网络连接设备308、显示设备310和输入设备312。
存储器302可以包括RAM或类似类型的存储器，并且它可以存储一个或多个应用程序以供处理器306执行。辅助存储设备304可以包括硬盘驱动器、软盘驱动器、CD-ROM驱动器或其他类型的非易失性数据存储器。处理器306执行存储在存储器302或辅助存储器304中、或从因特网或其他网络314接收的诸如本文所述的这些应用程序的一个或多个应用程序。处理器306的处理可以在供计算机或其他机器执行的软件(例如软件模块)中实施。这些应用程序优选地包括可执行的指令，以执行上述和本文图中所示的***和子***组件功能和方法。应用程序优选地提供图形用户界面(GUI)，用户可通过其查看子***组件并与之交互。
计算机***300可以在辅助存储器304中存储一个或多个数据库结构，例如，用于存储和维护执行上述功能所需的信息。或者，此类信息可以在与这些组件分离的存储设备中。
另外，如所述，处理器306可以执行一个或多个软件应用程序以提供本说明书中所述的功能，具体地说，以执行上述处理流程中的步骤和功能。这些过程可以在由计算机或其他机器执行的软件(例如软件模块)中实施。GUI可以例如被格式化为超文本标记语言(HTML)、可扩展标记语言(XML)或任何其他适当形式的网页，以根据用户用于与计算机***300交互的应用程序在显示设备上呈现。
输入设备312可以包括用于将信息输入计算机***300的任何设备，例如触摸屏、键盘、鼠标、光标控制设备、麦克风、数码相机、录像机或摄像机。输入输出设备312可用于在执行上述方法期间将信息输入到GUI中。显示设备310可以包括用于呈现视觉信息的任何类型的设备，例如，计算机监视器或平板显示器(或移动设备屏幕)。显示设备310可以显示GUI和/或来自子***组件(或软件)的输出。
计算机***300的示例包括专用服务器计算机，例如刀片式服务器、个人计算机、膝上型计算机、笔记本计算机、掌上型计算机、网络计算机、移动设备或能够执行web浏览器或其他类型的应用程序以与***交互的任何处理器控制的设备。
虽然仅详细显示了一个计算机***300，但***300可以在必要或需要时使用多个计算机***或服务器来支持用户，并且还可以使用备份或冗余服务器来防止在特定服务器发生故障时网络停机。另外，虽然计算机***300被描绘为具有各种组件，但是本领域技术人员将理解，该***可以包含附加的或不同的组件。另外，虽然与上述一致的实施方式的方面被描述为存储在存储器中，但是本领域技术人员将理解，这些方面也可以存储在其他类型的计算机程序产品或计算机可读介质(例如包括硬盘、软盘或CD-ROM或其他形式的RAM或ROM的辅助存储设备)上或从其读取。计算机可读介质可包括用于控制计算机***300以执行特定方法(例如上述方法)的指令。
在示例实施例中，非接触式卡可以例如通过终端或客户端设备通信传输(即，传送或接收)来自主机的数据。非接触式卡可以例如使用NFC、蓝牙、RFID、Wi-Fi和/或类似技术中的至少一种与终端通信。终端可以充当非接触式卡和主机之间的中介，例如，终端可以将从非接触式卡接收的通信转发给主机，反之亦然。终端可以使用网络与主机通信。例如，该网络可以包括光纤网络、无源光网络、电缆网络、因特网网络、卫星网络、无线LAN、全球移动通信***、个人通信服务、个人区域网、无线应用协议、多媒体消息传送服务、增强型消息传送服务、短消息服务、基于时分复用的***、基于码分多址的***、D-AMPS、Wi-Fi、固定无线数据、IEEE 802.11b、802.15.1、802.11n和802.11g、蓝牙、NFC、RFID、Wi-Fi和/或类似物中的一个或多个。
在一些实施例中，非接触式卡和终端之间的通信可以被加密，例如，通信可以以这样一种方式编码，即只有授权方或设备(例如，非接触式卡或主机)可以解码或解密通信。例如，可以使用对称密钥或公钥方案对通信进行加密。对于这些加密方案中的每一个，存在存储在非接触式卡上的至少一个密钥和加密算法。类似地，相关联的密钥和相关联的加密(解密)算法可以存储在主机上。非接触式卡可以使用密钥和加密算法对通信进行加密。非接触式卡可以例如通过诸如手机的客户端设备将通信传送到主机。主机可以使用相关联的密钥和相关联的加密算法对通信进行解密。
在示例实施例中，加密方案是对称密钥方案。在该示例中，非接触式卡可以存储对称密钥和加密算法。示例加密算法可以包括Twofish、Serpent、AES(Rijndael)、Blowfish、CASTS、Kuznyechik、RC4、DES、3DES、Skipjack、Safer+/++(蓝牙)和IDEA。主机还可以存储对称密钥和加密(或解密)算法的副本。响应于来自终端的消息，非接触式卡的处理器可以使用对称密钥和加密算法创建密码来加密通信。非接触式卡可以使用非接触式卡的收发机将密码传送到终端。终端可以进而将密码传送到主机。主机可以使用对称密钥和加密(或解密)算法对密码进行解密。
在示例实施例中，加密方案是公钥方案。在该示例中，非接触式卡可以存储公共(或私有)密钥和加密算法。公钥加密算法的示例包括Diffie–Hellma密钥交换协议、DSS、ElGamal、Paillier密码***、RSA、Cramer–Shoup密码***和YAK认证密钥协商协议。主机可以存储私有(或公共)密钥和加密(或解密)算法。响应于来自终端的消息，非接触式卡的处理器可以使用公共(或私有)密钥和加密算法创建密码来加密通信。非接触式卡可以使用非接触式卡的收发机将密码传送到终端。终端可以进而将密码传送到主机。主机可以使用私有(或公共)密钥和加密(或解密)算法对密码进行解密。
在示例实施例中，非接触式卡和主机之间的通信可以包括消息认证码(MAC)、散列消息认证码(HMAC)或数字签名。MAC、HMAC或数字签名可以是能够建立通信中包括的信息的真实性的数学代码或方案。例如，当在终端处扫描非接触式卡时，非接触式卡可以向主机传送通信以寻求交易的授权。通信可以包括各种数据，例如帐号、名称、卡安全值、有效日期和MAC(或HMAC或数字签名)。使用通信中包括的MAC(或HMAC或数字签名)，主机可以确定通信的内容是真实的(即，没有改变)。具体地，主机可以重新创建MAC(或HMAC或数字签名)，并且如果MAC(或HMAC或数字签名)的值与通信中包括的MAC(或HMAC或数字签名)相同，则主机可以确保通信的内容没有改变。此外，数字签名防止非接触式卡(的所有者)否认它传送了信息，因为只有非接触式卡才能创建消息中包括的MAC(或HMAC或数字签名)。
MAC可以包括以下算法。在第一步中，密钥生成算法可以生成密钥。在第二步中，签名算法可以返回使用生成的密钥和消息创建的标签。在第三步中，验证算法验证给定密钥和标签的消息的真实性。
数字签名方案可以包括以下算法。在第一步中，密钥生成算法生成私钥和相应的公钥。在第二步中，签名算法使用消息和私钥生成数字签名。在第三步中，签名验证算法可以利用数字签名和公钥来验证消息。MAC与数字签名的不同之处在于，MAC方案仅使用一个密钥，而数字签名方案使用两个密钥，即公钥和私钥。
在示例数字签名方案中，可以使用相应的公钥来验证从固定消息和固定私钥生成的数字签名的真实性。此外，选择这些算法使得在不知道一方的私钥的情况下为该方生成有效签名在计算上是不可行的。这种数字签名方案可以确保通信内容的真实性，因为如果对内容进行数字签名，则签名后内容中的任何更改都会使签名失效。换句话说，实际上不可能修改内容及其签名以产生具有有效签名的新内容。
在示例实施例中，非接触式卡可以具有私钥和签名算法。主机可以具有公钥和验证算法。当在终端处扫描非接触式卡时，非接触式卡可以向终端传送包括数字签名的通信，并且终端可以将该通信转发给主机。数字签名可以使用签名算法和非接触式卡的私钥生成。数字签名可以包括诸如帐号、有效日期和代码验证值之类的数据。当主机接收到通信时，主机可以使用公钥、验证算法和通信中包括的信息来验证通信中包括的信息的真实性。例如，主机可以使用通信中包括的信息重新生成数字签名。如果重新生成的数字签名与通信中包括的数字签名匹配，则主机可以验证信息的真实性。否则，主机可以断定通信内容是伪造的。
数字签名方案可以具有几个优点。例如，黑客会有动机伪造通信内容，以寻求虚假交易的授权。数字签名可以通过认证通信中包括的信息来防止这种情况。只要与非接触式卡相关联的私钥是秘密的，数字签名就可以对通信进行认证和验证。
在一些示例实施例中，在使用签名算法将内容转换为MAC或数字签名之前，可以对消息或内容进行散列。哈希函数是一种数学算法，其将任意大小的消息映射到固定大小的位串(即哈希)。哈希函数可以是单向函数，也就是说，反转函数是不可行的。在示例实施例中，MAC是从哈希函数构建的，因此，结果是HMAC。在另一示例实施例中，数字签名是从哈希函数构建的。
与内容本身不同，将MAC或数字签名形式作为散列内容有几个原因。例如，由于哈希具有固定大小，因此内容的哈希可以比实际内容更短，因此，哈希的MAC或数字签名可以比实际内容的MAC或数字签名短得多。此外，由于将内容哈希比将其转换为MAC或数字签名更快，因此将内容的哈希转换为MAC或数字签名更快。在示例实施例中，使用HMAC写入非接触式卡的内容。
在示例实施例中，非接触式卡可以包括多个安全密钥(或“密钥”)。例如，非接触式卡可以包括用于第一操作(例如，加密)的五个密钥。作为另一示例，非接触式卡可以包括用于第二操作(例如，对数字签名进行签名)的六个密钥。制造非接触式卡时，制造商可以将这些密钥存储在非接触式卡上。对于存储在非接触式卡上的每个密钥，制造商还可以将相关联的密钥存储在主机上。在对称密钥方案中，每个相关联的密钥可以与存储在非接触式卡上的密钥之一相同。在公钥方案中，私有(或公共)密钥可以与存储在非接触式卡上的公共(或私有)密钥中的一个相关联。在一个示例中，卡制造商可以生成密钥对。在另一示例中，密钥对可以由非接触式卡或主机生成。
非接触式卡的小应用程序可以包括密钥选择模块，其可以选择将用于操作的密钥。例如，每次非接触式卡对通信进行加密(或签名)时，密钥选择模块为加密(或签名)操作选择密钥之一。密钥选择模块可以使用多种技术来选择密钥。
例如，密钥选择模块可以顺序选择密钥。在该示例中，对于需要密钥的每个操作，可以为存储在非接触式卡上用于该操作的密钥分配顺序。密钥选择模块可以按分配的顺序选择密钥。一旦每个密钥都被用来执行了操作(例如，加密或签名通信)，密钥选择模块就可以再次以相同的顺序选择密钥。主机可以知道密钥的顺序或序列。例如，当制造商将密钥放在卡上时，卡的制造商分配密钥的顺序。在本示例中，制造商可以向主机提供顺序。作为另一示例，非接触式卡的小应用程序分配密钥的顺序，并且小应用程序可以将该顺序传送给主机(例如，通过客户端设备)。作为又一示例，终端或客户端设备可以确定顺序，并且终端或客户端设备可以将顺序发送到非接触式卡和主机。
在示例实施例中，密钥选择模块可以包括数学函数或算法，其接收输入并基于输入选择密钥(例如，该函数定义了输入和密钥之间的多对多关系)。例如，密钥选择模块可以接收计数器数字或时间信号，并且基于计数器数字或时间信号可以在多个可用密钥中选择密钥。在该示例实施例中，主机还可以存储相同的密钥选择模块(或嵌入其中的算法)以选择密钥。主机还可以获得相同的计数器数字或时间信号。例如，每次使用非接触式卡进行交易时，非接触式卡的计数器在非接触式卡处使计数器数字递增，并且主机的计数器在主机处使计数数字递增。这样，在选择密钥时，非接触式卡和主机都可以包括相同的计数数字。作为另一示例，非接触式卡和主机中的每个可以包括定时器。定时器可以向非接触式卡和主机提供时间信号。当非接触式卡和主机都包括相同的计数器数字或时间信号时，使用密钥选择模块，非接触式卡和主机中的每个可以选择相同的密钥进行操作。
作为又一示例，密钥选择模块可以基于非接触式卡外部的源提供的输入来选择密钥。例如，非接触式卡和主机可以接收来自终端或客户端设备的输入或信号，例如，输入或信号可以包括诸如日期、终端的位置坐标、哈勃望远镜的位置、用户在终端处拍摄的照片、用户在终端上提供的编号等信息。基于该输入，非接触式卡和主机中的每个的密钥选择算法可以选择密钥并处理交易。
作为又一示例，密钥选择模块可以随机选择密钥。在该示例中，主机不知道非接触式卡选择了哪个密钥。但是，当主机接收到通信时，主机可以尝试其所有密钥对通信进行解密。在一些示例中，密钥选择模块可以基于可替换的随机选择算法来选择密钥。
作为又一示例，密钥选择模块可以基于卡执行的最后一次交易值来选择密钥。非接触式卡可以存储最后一次交易的交易值。类似地，主机可以存储最后一次交易的交易值。使用交易值，密钥选择模块可以导出一个值，该值可以选择密钥。例如，如果卡的最后一次交易值是$9.95，则密钥选择模块可以基于交易值的最后一位(这里是5)选择用于加密的密钥。密钥选择模块可以选择例如排名为5的密钥。
作为又一示例实施例，可以存在多个密钥选择算法，并且每个算法可以接收输入并产生输出，该输出确定要被选择用于操作的密钥。在本实施例中，可以存在基于输入选择密钥选择算法的算法选择模块。例如，非接触式卡可以包括两个密钥选择算法，并且每个算法可以使用计数数字来指定用于加密操作的密钥。在该示例中，用户可以向客户端设备提供PIN。客户端设备可以将PIN传送到非接触式卡和主机，并且每个设备可以使用PIN作为用于算法选择模块的输入。使用PIN和算法选择模块，非接触式卡和主机中的每个可以选择两种密钥选择算法中的一种。使用计数数字和所选择的密钥选择算法，非接触式卡和主机中的每个可以选择相同的密钥进行操作。
图4示出了用于将信息从非接触式卡传输到主机的示例流程图。在该示例实施例中，公钥方案被实现为加密技术。在步骤401中，生成多对私钥和公钥。这些密钥可以使用密钥生成算法生成。在步骤402中，私钥存储在非接触式卡上，并且公钥存储在主机上。在步骤403中，客户在终端处扫描非接触式卡以请求交易。终端可以给非接触式卡通电，并且非接触式卡的小应用程序可以产生通信。通信可以包括用户的帐号。
在步骤404中，小应用程序的密钥选择模块可以选择存储在非接触式卡上的私钥中的一个。例如，小应用程序可以向终端传送请求以提示用户输入编号。作为响应，用户可以输入编号，并且终端可以将编号传送到非接触式卡。终端还可以将编号传送到主机。使用编号，密钥选择模块可以选择存储在非接触式卡上的私钥中的一个。在另一示例中，非接触式卡可以请求终端将终端的位置(例如，邮政编码)传送到非接触式卡。终端可以将位置传送到非接触式卡和主机。基于位置，密钥选择模块可以选择私钥中的一个。
在步骤405中，小应用程序可以使用选择的私钥加密通信。在步骤406中，非接触式卡可以向终端传送加密的通信，并且终端可以向主机传送加密的通信。在步骤407中，主机可以选择用于解密通信的公钥。例如，主机可以使用终端传送给主机的编号来选择公钥。可以使用存储在主机上的密钥选择模块来选择公钥。在步骤408中，主机使用在步骤407中选择的公钥解密通信。
在一个示例实施例中，非接触式卡可以包括多个加密算法。非接触式卡可以使用每种加密算法对通信进行加密或创建密码。非接触式卡还可以包括加密算法选择模块。加密算法选择模块可以选择多个加密算法中的一个，并且非接触式卡可以使用所选择的加密算法对通信进行加密。类似地，主机可以包括多个加密算法和加密算法选择模块。当主机接收到加密的通信时，使用加密算法选择模块，主机可以决定使用哪个加密算法来解密通信。
在一个实施例中，加密算法选择模块的操作与上面讨论的算法选择模块或密钥选择模块类似，例如，接收输入并基于输入选择多个加密算法中的一个。
在示例实施例中，对于加密操作，非接触式卡可以包括十个密钥和两个加密算法，例如AES和3DES。当处理交易时，非接触式卡可以接收来自终端的数字输入，例如，用户在终端的键盘上提供数字输入。非接触式卡还可以在非接触式卡的存储器中存储计数器数字。计数器数字可以表示非接触式卡已经请求的交易的数量。
非接触式卡可以包括密钥选择模块和加密算法选择模块。密钥选择模块可以接收数字输入，并且例如，基于数字输入的最后一位，选择存储在非接触式卡上的十个密钥中的一个用于加密操作。加密算法选择模块可以接收计数器数字，并且如果计数器数字为偶数，则选择AES算法，或者如果计数器数字为奇数，则选择3DES算法。非接触式卡可以使用选择的密钥和选择的加密算法创建密码，并将密码传送到终端。
在一个示例实施例中，非接触式卡可以在用于某些交易的秘密密钥OTP(或一次性口令)和用于其他交易的公钥(如果可能的话(例如，双向通信是有可能的))之间进行切换。如上所述，对于各种选择模块，加密算法选择模块可以在两种加密方案之间选择或切换。
在一个示例实施例中，非接触式卡可以包括用于特定操作的多个密钥，并且每次非接触式卡需要执行操作时，密钥选择模块可以选择用于操作的密钥之一。
在另一个示例实施例中，非接触式卡可以包括主密钥和密钥多样化算法。密钥多样化算法可以使用输入生成多个不同的密钥。在该示例实施例中，对于非接触式卡上的至少一个操作，非接触式卡可以存储主密钥。密钥选择模块可以将输出提供给密钥多样化算法，并且利用该输出，密钥多样化算法可以为主密钥生成多样化密钥。非接触式卡可以使用多样化密钥执行操作，例如，加密通信。类似地，如上所述，主机可以使用密钥选择模块生成相同的输出。主机还可以存储相同的密钥多样化算法和主密钥。使用输出、密钥多样化算法和主密钥，主机可以生成与非接触式卡相同的多样化密钥，并在主机上执行相关联的操作，例如，解密通信。
本公开不限于本申请中描述的特定实施例，这些实施例旨在作为各个方面的图示。许多修改和变化可以在不脱离其精神和范围的情况下进行，这会是显而易见的。除了本文列举的那些方法和装置之外，本公开范围内的功能等效的方法和装置可以从前述代表性描述中显而易见。这些修改和变化意在落入所附代表性权利要求的范围内。本公开仅限于所附代表性权利要求的条款，以及这些代表性权利要求有权获得的等价物的全部范围。还应理解，本文中使用的术语仅用于描述特定实施例的目的，而不是旨在限制。

Claims (20)

1.一种服务器，包括：
处理器和存储器，所述存储器存储第一多个安全密钥、密钥选择算法和第一输入值；
其中，所述服务器被配置为：
通过客户端设备从非接触式卡接收第一加密通信，所述非接触式卡具有卡处理器和卡存储器，所述卡存储器存储所述第一多个安全密钥、所述密钥选择算法和所述第一输入值；
使用所述密钥选择算法和所述第一输入值选择第一选择的安全密钥，所述第一选择的安全密钥是所述第一多个安全密钥中的一个；
使用所述第一选择的安全密钥解密加密通信以获得非加密通信。
2.根据权利要求1所述的服务器，其中：
所述服务器的存储器存储第二多个安全密钥、第二输入值、验证算法和第三输入值；
所述卡存储器存储第二多个安全密钥、第二输入值、所述验证算法和所述第三输入值；
所述服务器还被配置为：
通过所述客户端设备从所述非接触式卡接收第二加密通信；
使用所述密钥选择算法和所述第二输入值选择第二选择的安全密钥，所述第二选择的安全密钥是所述第一多个安全密钥中的一个；
使用所述第二选择的安全密钥解密所述第二加密通信以获得第二非加密通信；
通过所述客户端设备从所述非接触式卡接收第三通信；
使用所述验证算法和所述第三输入值选择第三选择的安全密钥，所述第三选择的安全密钥是所述第二多个安全密钥中的一个；以及
使用所述第三选择的安全密钥验证所述第三通信。
3.根据权利要求1所述的服务器，其中，所述第一输入值是计数器数字，并且每次在所述客户端设备处扫描所述非接触式卡时，所述计数器数字在所述非接触式卡和所述服务器处被递增。
4.根据权利要求1所述的服务器，其中，所述第一输入值是时间信号。
5.根据权利要求1所述的服务器，其中，所述非接触式卡使用非接触式卡选择的安全密钥生成所述第一加密通信。
6.根据权利要求5所述的服务器，其中，所述非接触式卡选择的安全密钥是使用所述密钥选择算法基于所述第一输入值选择的。
7.根据权利要求5所述的服务器，其中，所述非接触式卡选择的安全密钥与所述第一选择的安全密钥相同。
8.根据权利要求1所述的服务器，其中，所述密钥选择算法基于计数器值选择所述第一选择的安全密钥。
9.根据权利要求1所述的服务器，其中，所述密钥选择算法基于交易的时间选择所述第一选择的安全密钥。
10.根据权利要求1所述的服务器，其中，所述密钥选择算法基于模块索引或可替换随机选择算法选择所述第一选择的安全密钥。
11.一种非接触式卡，包括：
基板，所述基板包括：
存储器，所述存储器包含一个或多个小应用程序、计数器值、多个主密钥和密钥选择算法；
通信接口；和
与所述存储器和所述通信接口通信的处理器；
其中，所述处理器被配置为：
当所述通信接口在客户端设备的通信场的范围内时，使所述计数器值递增；
使用存储在所述存储器上的密钥选择算法选择所选择的主密钥；
使用所选择的主密钥和所述计数器值创建多样化密钥；
使用所述多样化密钥创建密码；以及
经由所述通信接口将所述密码传送给所述客户端设备。
12.根据权利要求11所述的服务器，其中，所述密钥选择算法基于所述计数器值选择所选择的密钥。
13.根据权利要求11所述的服务器，其中，所述密钥选择算法基于交易的时间选择所选择的密钥。
14.根据权利要求11所述的服务器，其中，所述密钥选择算法基于模块索引选择所选择的密钥。
15.根据权利要求11所述的服务器，其中，所述密钥选择算法基于可替换随机选择算法选择所选择的密钥。
16.一种方法，包括：
从非接触式卡接收加密通信；
将所述加密通信传送给服务器；
从所述服务器接收授权交易的信号；
其中：
所述加密通信是使用多样化密钥创建的；
所述多样化密钥是使用所选择的主密钥、计数器值和密码算法生成的；
所选择的主密钥是使用密钥选择算法选择的；以及
所述非接触式卡被配置为，当所述非接触式卡的通信接口在客户端设备的通信场的范围内时，使所述计数器值递增。
17.根据权利要求16所述的服务器，其中，所述密钥选择算法基于所述计数器值选择所选择的密钥。
18.根据权利要求16所述的服务器，其中，所述密钥选择算法基于交易的时间选择所选择的密钥。
19.根据权利要求16所述的服务器，其中，所述密钥选择算法基于模块索引选择所选择的密钥。
20.根据权利要求16所述的服务器，其中，所述密钥选择算法基于可替换随机选择算法选择所选择的密钥。
CN202110485202.XA 2020-04-30 2021-04-30 带有多个旋转安全密钥的非接触式卡 Pending CN113595714A (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US16/863,902 US10915888B1 (en) 2020-04-30 2020-04-30 Contactless card with multiple rotating security keys
US16/863,902 2020-04-30

Publications (1)

Publication Number Publication Date
CN113595714A true CN113595714A (zh) 2021-11-02

Family

ID=74537313

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110485202.XA Pending CN113595714A (zh) 2020-04-30 2021-04-30 带有多个旋转安全密钥的非接触式卡

Country Status (8)

Country Link
US (3) US10915888B1 (zh)
EP (1) EP3905083A1 (zh)
JP (1) JP2021175184A (zh)
KR (1) KR20210134214A (zh)
CN (1) CN113595714A (zh)
AU (1) AU2021201415A1 (zh)
CA (1) CA3110585A1 (zh)
SG (1) SG10202102245QA (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
USD1006104S1 (en) * 2021-04-22 2023-11-28 Capital One Services, Llc Transaction card
EP4093068A1 (en) * 2021-05-17 2022-11-23 Thales DIS France SA Method for controlling an apparatus

Family Cites Families (585)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2523745B1 (fr) 1982-03-18 1987-06-26 Bull Sa Procede et dispositif de protection d'un logiciel livre par un fournisseur a un utilisateur
JPS6198476A (ja) 1984-10-19 1986-05-16 Casio Comput Co Ltd カードターミナル
FR2613565B1 (fr) 1987-04-03 1989-06-23 Bull Cps Procede pour acheminer des cles secretes vers des modules de securite et des cartes utilisateurs, dans un reseau de traitement d'informations
US5036461A (en) 1990-05-16 1991-07-30 Elliott John C Two-way authentication system between user's smart card and issuer-specific plug-in application modules in multi-issued transaction device
FR2704341B1 (fr) 1993-04-22 1995-06-02 Bull Cp8 Dispositif de protection des clés d'une carte à puce.
US5363448A (en) 1993-06-30 1994-11-08 United Technologies Automotive, Inc. Pseudorandom number generation and cryptographic authentication
US5377270A (en) 1993-06-30 1994-12-27 United Technologies Automotive, Inc. Cryptographic authentication of transmitted messages using pseudorandom numbers
JP3053527B2 (ja) 1993-07-30 2000-06-19 インターナショナル・ビジネス・マシーンズ・コーポレイション パスワードを有効化する方法及び装置、パスワードを生成し且つ予備的に有効化する方法及び装置、認証コードを使用して資源のアクセスを制御する方法及び装置
US5537314A (en) 1994-04-18 1996-07-16 First Marketrust Intl. Referral recognition system for an incentive award program
US5748735A (en) 1994-07-18 1998-05-05 Bell Atlantic Network Services, Inc. Securing E-mail communications and encrypted file storage using yaksha split private key asymmetric cryptography
US5737419A (en) 1994-11-09 1998-04-07 Bell Atlantic Network Services, Inc. Computer system for securing communications using split private key asymmetric cryptography
US5764789A (en) 1994-11-28 1998-06-09 Smarttouch, Llc Tokenless biometric ATM access system
US7152045B2 (en) 1994-11-28 2006-12-19 Indivos Corporation Tokenless identification system for authorization of electronic transactions and electronic transmissions
US5778072A (en) 1995-07-07 1998-07-07 Sun Microsystems, Inc. System and method to transparently integrate private key operations from a smart card with host-based encryption services
US5666415A (en) 1995-07-28 1997-09-09 Digital Equipment Corporation Method and apparatus for cryptographic authentication
US5832090A (en) 1995-08-10 1998-11-03 Hid Corporation Radio frequency transponder stored value system employing a secure encryption protocol
US5748740A (en) 1995-09-29 1998-05-05 Dallas Semiconductor Corporation Method, apparatus, system and firmware for secure transactions
US6049328A (en) 1995-10-20 2000-04-11 Wisconsin Alumni Research Foundation Flexible access system for touch screen devices
US5616901A (en) 1995-12-19 1997-04-01 Talking Signs, Inc. Accessible automatic teller machines for sight-impaired persons and print-disabled persons
DE69704684T2 (de) 1996-02-23 2004-07-15 Fuji Xerox Co., Ltd. Vorrichtung und Verfahren zur Authentifizierung von Zugangsrechten eines Benutzers zu Betriebsmitteln nach dem Challenge-Response-Prinzip
US6226383B1 (en) 1996-04-17 2001-05-01 Integrity Sciences, Inc. Cryptographic methods for remote authentication
US5768373A (en) 1996-05-06 1998-06-16 Symantec Corporation Method for providing a secure non-reusable one-time password
US5901874A (en) 1996-05-07 1999-05-11 Breakthrough Marketing, Inc. Handicapped accessible dumpster
US5850443A (en) 1996-08-15 1998-12-15 Entrust Technologies, Ltd. Key management system for mixed-trust environments
US6058373A (en) 1996-10-16 2000-05-02 Microsoft Corporation System and method for processing electronic order forms
US6483920B2 (en) 1996-12-04 2002-11-19 Bull, S.A. Key recovery process used for strong encryption of messages
US5796827A (en) 1996-11-14 1998-08-18 International Business Machines Corporation System and method for near-field human-body coupling for encrypted communication with identification cards
US6021203A (en) 1996-12-11 2000-02-01 Microsoft Corporation Coercion resistant one-time-pad cryptosystem that facilitates transmission of messages having different levels of security
US6061666A (en) 1996-12-17 2000-05-09 Citicorp Development Center Automatic bank teller machine for the blind and visually impaired
GB9626196D0 (en) 1996-12-18 1997-02-05 Ncr Int Inc Self-service terminal (sst) and a method of oerating the sst to control movement of a card of the sst
US6282522B1 (en) 1997-04-30 2001-08-28 Visa International Service Association Internet payment system using smart card
US7290288B2 (en) 1997-06-11 2007-10-30 Prism Technologies, L.L.C. Method and system for controlling access, by an authentication server, to protected computer resources provided via an internet protocol network
US5960411A (en) 1997-09-12 1999-09-28 Amazon.Com, Inc. Method and system for placing a purchase order via a communications network
US5983273A (en) 1997-09-16 1999-11-09 Webtv Networks, Inc. Method and apparatus for providing physical security for a user account and providing access to the user's environment and preferences
US5883810A (en) 1997-09-24 1999-03-16 Microsoft Corporation Electronic online commerce card with transactionproxy number for online transactions
DE69824437T2 (de) 1997-10-14 2005-06-23 Visa International Service Association, Foster City Personalisieren von chipkarten
IL122105A0 (en) 1997-11-04 1998-04-05 Rozin Alexander A two-way radio-based electronic toll collection method and system for highway
US6889198B2 (en) 1998-01-30 2005-05-03 Citicorp Development Center, Inc. Method and system for tracking smart card loyalty points
US7207477B1 (en) 2004-03-08 2007-04-24 Diebold, Incorporated Wireless transfer of account data and signature from hand-held device to electronic check generator
US6199762B1 (en) 1998-05-06 2001-03-13 American Express Travel Related Services Co., Inc. Methods and apparatus for dynamic smartcard synchronization and personalization
ATE282990T1 (de) 1998-05-11 2004-12-15 Citicorp Dev Ct Inc System und verfahren zur biometrischen authentifizierung eines benutzers mit einer chipkarte
JP3112076B2 (ja) 1998-05-21 2000-11-27 豊 保倉 ユーザ認証システム
US6615189B1 (en) 1998-06-22 2003-09-02 Bank One, Delaware, National Association Debit purchasing of stored value card for use by and/or delivery to others
US6216227B1 (en) 1998-06-29 2001-04-10 Sun Microsystems, Inc. Multi-venue ticketing using smart cards
DE19850665A1 (de) 1998-11-03 2000-05-04 Siemens Ag Verfahren und Anordnung zur Authentifikation von einer ersten Instanz und einer zweiten Instanz
US7660763B1 (en) 1998-11-17 2010-02-09 Jpmorgan Chase Bank, N.A. Customer activated multi-value (CAM) card
US6032136A (en) 1998-11-17 2000-02-29 First Usa Bank, N.A. Customer activated multi-value (CAM) card
US6438550B1 (en) 1998-12-10 2002-08-20 International Business Machines Corporation Method and apparatus for client authentication and application configuration via smart cards
US6829711B1 (en) 1999-01-26 2004-12-07 International Business Machines Corporation Personal website for electronic commerce on a smart java card with multiple security check points
CA2363003A1 (en) 1999-02-18 2000-08-24 Orbis Patents Limited Credit card system and method
US6731778B1 (en) 1999-03-31 2004-05-04 Oki Electric Industry Co, Ltd. Photographing apparatus and monitoring system using same
US6402028B1 (en) 1999-04-06 2002-06-11 Visa International Service Association Integrated production of smart cards
US6227447B1 (en) 1999-05-10 2001-05-08 First Usa Bank, Na Cardless payment system
US7127605B1 (en) 1999-05-10 2006-10-24 Axalto, Inc. Secure sharing of application methods on a microcontroller
US6845498B1 (en) 1999-05-11 2005-01-18 Microsoft Corporation Method and apparatus for sharing data files among run time environment applets in an integrated circuit card
US6504945B1 (en) 1999-07-13 2003-01-07 Hewlett-Packard Company System for promoting correct finger placement in a fingerprint reader
US7908216B1 (en) 1999-07-22 2011-03-15 Visa International Service Association Internet payment, authentication and loading system using virtual smart card
US6324271B1 (en) 1999-08-17 2001-11-27 Nortel Networks Limited System and method for authentication of caller identification
SE515327C2 (sv) 1999-08-27 2001-07-16 Ericsson Telefon Ab L M Anordning för att utföra säkra transaktioner i en kommunikationsanordning
US7085931B1 (en) 1999-09-03 2006-08-01 Secure Computing Corporation Virtual smart card system and method
US6834271B1 (en) 1999-09-24 2004-12-21 Kryptosima Apparatus for and method of secure ATM debit card and credit card payment transactions via the internet
US7319986B2 (en) 1999-09-28 2008-01-15 Bank Of America Corporation Dynamic payment cards and related management systems and associated methods
US6910627B1 (en) 1999-09-29 2005-06-28 Canon Kabushiki Kaisha Smart card systems and electronic ticketing methods
JP2001195368A (ja) 1999-11-01 2001-07-19 Sony Corp 認証情報通信システムおよび認証情報通信方法、携帯情報処理装置、並びにプログラム提供媒体
US8814039B2 (en) 1999-11-05 2014-08-26 Lead Core Fund, L.L.C. Methods for processing a payment authorization request utilizing a network of point of sale devices
US8794509B2 (en) 1999-11-05 2014-08-05 Lead Core Fund, L.L.C. Systems and methods for processing a payment authorization request over disparate payment networks
AU1431301A (en) 1999-11-22 2001-06-04 Intel Corporation Integrity check values (icv) based on pseudorandom binary matrices
AU3086101A (en) 2000-01-05 2001-07-16 American Express Travel Related Services Company, Inc. Smartcard internet authorization system
JP2003519879A (ja) 2000-01-10 2003-06-24 タリアン・エルエルシー 認証および活性化のため組織病理学的・生理学的バイオメトリック・マーカを使用する装置
US20010034702A1 (en) 2000-02-04 2001-10-25 Mockett Gregory P. System and method for dynamically issuing and processing transaction specific digital credit or debit cards
US8150767B2 (en) 2000-02-16 2012-04-03 Mastercard International Incorporated System and method for conducting electronic commerce with a remote wallet server
EP1272954A4 (en) 2000-02-16 2004-08-18 Zipcar Inc SYSTEMS AND METHODS FOR CONTROLLING VEHICLE ACCESS
US6779115B1 (en) 2000-02-18 2004-08-17 Digital5, Inc. Portable device using a smart card to receive and decrypt digital data
US20010029485A1 (en) 2000-02-29 2001-10-11 E-Scoring, Inc. Systems and methods enabling anonymous credit transactions
US6852031B1 (en) 2000-11-22 2005-02-08 Igt EZ pay smart card and tickets system
US8046256B2 (en) 2000-04-14 2011-10-25 American Express Travel Related Services Company, Inc. System and method for using loyalty rewards as currency
AU2001257280C1 (en) 2000-04-24 2009-01-15 Visa International Service Association Online payer authentication service
US7933589B1 (en) 2000-07-13 2011-04-26 Aeritas, Llc Method and system for facilitation of wireless e-commerce transactions
US6631197B1 (en) 2000-07-24 2003-10-07 Gn Resound North America Corporation Wide audio bandwidth transduction method and device
AU2001286464A1 (en) 2000-08-14 2002-02-25 Peter H. Gien System and method for secure smartcard issuance
WO2002015117A2 (en) 2000-08-17 2002-02-21 Dexrad (Proprietary) Limited The transfer of verification data
AU2001288679A1 (en) 2000-09-11 2002-03-26 Sentrycom Ltd. A biometric-based system and method for enabling authentication of electronic messages sent over a network
US7006986B1 (en) 2000-09-25 2006-02-28 Ecardless Bancorp, Ltd. Order file processes for purchasing on the internet using verified order information
US6873260B2 (en) 2000-09-29 2005-03-29 Kenneth J. Lancos System and method for selectively allowing the passage of a guest through a region within a coverage area
US6877656B1 (en) 2000-10-24 2005-04-12 Capital One Financial Corporation Systems, methods, and apparatus for instant issuance of a credit card
US6769060B1 (en) 2000-10-25 2004-07-27 Ericsson Inc. Method of bilateral identity authentication
US6721706B1 (en) 2000-10-30 2004-04-13 Koninklijke Philips Electronics N.V. Environment-responsive user interface/entertainment device that simulates personal interaction
US7069435B2 (en) 2000-12-19 2006-06-27 Tricipher, Inc. System and method for authentication in a crypto-system utilizing symmetric and asymmetric crypto-keys
US6970562B2 (en) 2000-12-19 2005-11-29 Tricipher, Inc. System and method for crypto-key generation and use in cryptosystem
US6940980B2 (en) 2000-12-19 2005-09-06 Tricipher, Inc. High security cryptosystem
US8161565B1 (en) 2000-12-26 2012-04-17 Entrust, Inc. Key release systems, components and methods
JP2002207427A (ja) 2001-01-10 2002-07-26 Sony Corp 公開鍵証明書発行システム、公開鍵証明書発行方法、および情報処理装置、情報記録媒体、並びにプログラム記憶媒体
US7606771B2 (en) 2001-01-11 2009-10-20 Cardinalcommerce Corporation Dynamic number authentication for credit/debit cards
EP1223565A1 (en) 2001-01-12 2002-07-17 Motorola, Inc. Transaction system, portable device, terminal and methods of transaction
US20020093530A1 (en) 2001-01-17 2002-07-18 Prasad Krothapalli Automatic filling and submission of completed forms
US20020158123A1 (en) 2001-01-30 2002-10-31 Allen Rodney F. Web-based smart card system and method for maintaining status information and verifying eligibility
US20020152116A1 (en) 2001-01-30 2002-10-17 Yan Kent J. Method and system for generating fixed and/or dynamic rebates in credit card type transactions
US7181017B1 (en) 2001-03-23 2007-02-20 David Felsher System and method for secure three-party communications
ATE364202T1 (de) 2001-04-02 2007-06-15 Motorola Inc Aktivieren und deaktivieren von softwarefunktionen
US7290709B2 (en) 2001-04-10 2007-11-06 Erica Tsai Information card system
US7044394B2 (en) 2003-12-17 2006-05-16 Kerry Dennis Brown Programmable magnetic data storage card
US20020153424A1 (en) 2001-04-19 2002-10-24 Chuan Li Method and apparatus of secure credit card transaction
US20040015958A1 (en) 2001-05-15 2004-01-22 Veil Leonard Scott Method and system for conditional installation and execution of services in a secure computing environment
US7206806B2 (en) 2001-05-30 2007-04-17 Pineau Richard A Method and system for remote utilizing a mobile device to share data objects
DE10127511A1 (de) 2001-06-06 2003-01-02 Wincor Nixdorf Gmbh & Co Kg Schreib-/Lesegerät für eine Ausweis- oder Kreditkarte vom RFID-Typ
US20030167350A1 (en) 2001-06-07 2003-09-04 Curl Corporation Safe I/O through use of opaque I/O objects
AUPR559201A0 (en) 2001-06-08 2001-07-12 Canon Kabushiki Kaisha Card reading device for service access
US6834795B1 (en) 2001-06-29 2004-12-28 Sun Microsystems, Inc. Secure user authentication to computing resource via smart card
US7762457B2 (en) 2001-07-10 2010-07-27 American Express Travel Related Services Company, Inc. System and method for dynamic fob synchronization and personalization
US7993197B2 (en) 2001-08-10 2011-08-09 Igt Flexible loyalty points programs
US8266451B2 (en) 2001-08-31 2012-09-11 Gemalto Sa Voice activated smart card
US20030055727A1 (en) 2001-09-18 2003-03-20 Walker Jay S. Method and apparatus for facilitating the provision of a benefit to a customer of a retailer
CN1207867C (zh) 2001-09-28 2005-06-22 中国科学院研究生院 一种安全的数字签名***及其数字签名方法
US7373515B2 (en) 2001-10-09 2008-05-13 Wireless Key Identification Systems, Inc. Multi-factor authentication system
JP3975720B2 (ja) 2001-10-23 2007-09-12 株式会社日立製作所 Ｉｃカード、顧客情報分析システムおよび顧客情報分析結果提供方法
US6934861B2 (en) 2001-11-06 2005-08-23 Crosscheck Identification Systems International, Inc. National identification card system and biometric identity verification method for negotiating transactions
US6641050B2 (en) 2001-11-06 2003-11-04 International Business Machines Corporation Secure credit card
US7243853B1 (en) 2001-12-04 2007-07-17 Visa U.S.A. Inc. Method and system for facilitating memory and application management on a secured token
US8108687B2 (en) 2001-12-12 2012-01-31 Valve Corporation Method and system for granting access to system and content
FR2834403B1 (fr) 2001-12-27 2004-02-06 France Telecom Systeme cryptographique de signature de groupe
JP3820999B2 (ja) 2002-01-25 2006-09-13 ソニー株式会社 近接通信システム及び近接通信方法、データ管理装置及びデータ管理方法、記憶媒体、並びにコンピュータ・プログラム
SE524778C2 (sv) 2002-02-19 2004-10-05 Douglas Lundholm Förfarande och arrangemang för att skydda mjukvara för otillbörlig användning eller kopiering
US6905411B2 (en) 2002-02-27 2005-06-14 Igt Player authentication for cashless gaming machine instruments
US20030208449A1 (en) 2002-05-06 2003-11-06 Yuanan Diao Credit card fraud prevention system and method using secure electronic credit card
US7900048B2 (en) 2002-05-07 2011-03-01 Sony Ericsson Mobile Communications Ab Method for loading an application in a device, device and smart card therefor
CN100440195C (zh) 2002-05-10 2008-12-03 斯伦贝谢（北京）智能卡科技有限公司 智能卡更换方法及其更换***
US8010405B1 (en) 2002-07-26 2011-08-30 Visa Usa Inc. Multi-application smart card device software solution for smart cardholder reward selection and redemption
US20040127256A1 (en) 2002-07-30 2004-07-01 Scott Goldthwaite Mobile device equipped with a contactless smart card reader/writer
US7697920B1 (en) 2006-05-05 2010-04-13 Boojum Mobile System and method for providing authentication and authorization utilizing a personal wireless communication device
EP3547599A1 (en) 2002-08-06 2019-10-02 Apple Inc. Methods for secure enrollment and backup of personal identity credentials into electronic devices
US7221757B2 (en) 2002-08-15 2007-05-22 Opentv, Inc. Method and system for accelerated data encryption
JP4553565B2 (ja) 2002-08-26 2010-09-29 パナソニック株式会社 電子バリューの認証方式と認証システムと装置
CZ2005209A3 (cs) 2002-09-10 2005-12-14 Ivi Smart Technologies, Inc. Bezpečné biometrické ověření identity
US7306143B2 (en) 2002-09-20 2007-12-11 Cubic Corporation Dynamic smart card/media imaging
US9710804B2 (en) 2012-10-07 2017-07-18 Andrew H B Zhou Virtual payment cards issued by banks for mobile and wearable devices
US8985442B1 (en) 2011-07-18 2015-03-24 Tiger T G Zhou One-touch payment using haptic control via a messaging and calling multimedia system on mobile device and wearable device, currency token interface, point of sale device, and electronic payment card
WO2004036492A2 (en) 2002-10-16 2004-04-29 Sci-Tel Ltd. Smart card network interface device
US9740988B1 (en) 2002-12-09 2017-08-22 Live Nation Entertainment, Inc. System and method for using unique device indentifiers to enhance security
US9251518B2 (en) 2013-03-15 2016-02-02 Live Nation Entertainment, Inc. Centralized and device-aware ticket-transfer system and methods
EP1588318A1 (en) 2003-01-14 2005-10-26 Koninklijke Philips Electronics N.V. Method and terminal for detecting fake and/or modified smart card
US7453439B1 (en) 2003-01-16 2008-11-18 Forward Input Inc. System and method for continuous stroke word-based text input
US20050195975A1 (en) 2003-01-21 2005-09-08 Kevin Kawakita Digital media distribution cryptography using media ticket smart cards
US8589335B2 (en) 2003-04-21 2013-11-19 Visa International Service Association Smart card personalization assistance tool
EP1632091A4 (en) 2003-05-12 2006-07-26 Gtech Corp METHOD AND SYSTEM FOR AUTHENTICATION
US7949559B2 (en) 2003-05-27 2011-05-24 Citicorp Credit Services, Inc. Credit card rewards program system and method
US8200775B2 (en) 2005-02-01 2012-06-12 Newsilike Media Group, Inc Enhanced syndication
JP4744106B2 (ja) 2003-08-06 2011-08-10 パナソニック株式会社 セキュアデバイス、情報処理端末、通信システム及び通信方法
US20050075985A1 (en) 2003-10-03 2005-04-07 Brian Cartmell Voice authenticated credit card purchase verification
FI20031482A (fi) 2003-10-10 2005-04-11 Open Bit Oy Ltd Maksutapahtumatietojen prosessointi
US7597250B2 (en) 2003-11-17 2009-10-06 Dpd Patent Trust Ltd. RFID reader with multiple interfaces
US20050138387A1 (en) 2003-12-19 2005-06-23 Lam Wai T. System and method for authorizing software use
US8139770B2 (en) 2003-12-23 2012-03-20 Wells Fargo Bank, N.A. Cryptographic key backup and escrow system
US7357309B2 (en) 2004-01-16 2008-04-15 Telefonaktiebolaget Lm Ericsson (Publ) EMV transactions in mobile terminals
US7165727B2 (en) 2004-02-24 2007-01-23 Sun Microsystems, Inc. Method and apparatus for installing an application onto a smart card
US7374099B2 (en) 2004-02-24 2008-05-20 Sun Microsystems, Inc. Method and apparatus for processing an application identifier from a smart card
US7472829B2 (en) 2004-12-10 2009-01-06 Qsecure, Inc. Payment card with internally generated virtual account numbers for its magnetic stripe encoder and user display
US7584153B2 (en) 2004-03-15 2009-09-01 Qsecure, Inc. Financial transactions with dynamic card verification values
JP2007529797A (ja) 2004-03-19 2007-10-25 フンベル ローガー 認証機能および支払い機能を備えた、無線自転車キー、自動車、家屋、ｒｆｉｄタグのための携帯電話におけるオールインワンキーまたは制御ソフトウェアカード
US20140019352A1 (en) 2011-02-22 2014-01-16 Visa International Service Association Multi-purpose virtual card transaction apparatuses, methods and systems
US7748617B2 (en) 2004-04-12 2010-07-06 Gray R O'neal Electronic identification system
US8762283B2 (en) 2004-05-03 2014-06-24 Visa International Service Association Multiple party benefit from an online authentication service
CN100549985C (zh) 2004-05-03 2009-10-14 捷讯研究有限公司 用于应用认证的***和方法
US7703142B1 (en) 2004-05-06 2010-04-20 Sprint Communications Company L.P. Software license authorization system
US7660779B2 (en) 2004-05-12 2010-02-09 Microsoft Corporation Intelligent autofill
GB0411777D0 (en) 2004-05-26 2004-06-30 Crypomathic Ltd Computationally asymmetric cryptographic systems
US7314165B2 (en) 2004-07-01 2008-01-01 American Express Travel Related Services Company, Inc. Method and system for smellprint recognition biometrics on a smartcard
US7175076B1 (en) 2004-07-07 2007-02-13 Diebold Self-Service Systems Division Of Diebold, Incorporated Cash dispensing automated banking machine user interface system and method
US8439271B2 (en) 2004-07-15 2013-05-14 Mastercard International Incorporated Method and system using a bitmap for passing contactless payment card transaction variables in standardized data formats
US7424977B2 (en) 2004-07-15 2008-09-16 Mastercard International Incorporated Method and system for conducting contactless payment card transactions
US7287692B1 (en) 2004-07-28 2007-10-30 Cisco Technology, Inc. System and method for securing transactions in a contact center environment
EP1630712A1 (en) 2004-08-24 2006-03-01 Sony Deutschland GmbH Method for operating a near field communication system
BRPI0514159A2 (pt) 2004-08-27 2008-11-25 Victorion Technology Co Ltd dispositivo transmissor de comunicaÇço sem fio por conduÇço pelo osso nasal, sistema transmissor de comunicaÇço sem fio por conduÇço pelo osso nasal, e auxiliar auditivo de conduÇço pelo osso nasal
US20060047954A1 (en) 2004-08-30 2006-03-02 Axalto Inc. Data access security implementation using the public key mechanism
US7375616B2 (en) 2004-09-08 2008-05-20 Nokia Corporation Electronic near field communication enabled multifunctional device and method of its operation
US7270276B2 (en) 2004-09-29 2007-09-18 Sap Ag Multi-application smartcard
US20060085848A1 (en) 2004-10-19 2006-04-20 Intel Corporation Method and apparatus for securing communications between a smartcard and a terminal
GB2419787B (en) 2004-10-28 2007-07-04 Hewlett Packard Development Co Method and apparatus for providing short-term private keys in public-key cryptographic systems
US7748636B2 (en) 2004-11-16 2010-07-06 Dpd Patent Trust Ltd. Portable identity card reader system for physical and logical access
GB2410113A (en) 2004-11-29 2005-07-20 Morse Group Ltd A system and method of accessing banking services via a mobile telephone
TW200642408A (en) 2004-12-07 2006-12-01 Farsheed Atef System and method for identity verification and management
US7232073B1 (en) 2004-12-21 2007-06-19 Sun Microsystems, Inc. Smart card with multiple applications
GB0428543D0 (en) 2004-12-31 2005-02-09 British Telecomm Control of data exchange
US20060159269A1 (en) 2005-01-20 2006-07-20 Matsushita Electric Industrial Co., Ltd. Cryptographic system for resource starved CE device secure upgrade and re-configuration
US20130104251A1 (en) 2005-02-01 2013-04-25 Newsilike Media Group, Inc. Security systems and methods for use with structured and unstructured data
US8200700B2 (en) 2005-02-01 2012-06-12 Newsilike Media Group, Inc Systems and methods for use of structured and unstructured distributed data
US8347088B2 (en) 2005-02-01 2013-01-01 Newsilike Media Group, Inc Security systems and methods for use with structured and unstructured data
DE102005004902A1 (de) 2005-02-02 2006-08-10 Utimaco Safeware Ag Verfahren zur Anmeldung eines Nutzers an einem Computersystem
US7581678B2 (en) 2005-02-22 2009-09-01 Tyfone, Inc. Electronic transaction card
CN101171604A (zh) 2005-03-07 2008-04-30 诺基亚公司 包括智能卡模块和近场通信装置的方法和移动终端设备
US7628322B2 (en) 2005-03-07 2009-12-08 Nokia Corporation Methods, system and mobile device capable of enabling credit card personalization using a wireless network
US7128274B2 (en) 2005-03-24 2006-10-31 International Business Machines Corporation Secure credit card with near field communications
US8266441B2 (en) 2005-04-22 2012-09-11 Bank Of America Corporation One-time password credit/debit card
WO2006119184A2 (en) 2005-05-04 2006-11-09 Tricipher, Inc. Protecting one-time-passwords against man-in-the-middle attacks
US20080035738A1 (en) 2005-05-09 2008-02-14 Mullen Jeffrey D Dynamic credit card with magnetic stripe and embedded encoder and methods for using the same to provide a copy-proof credit card
US7793851B2 (en) 2005-05-09 2010-09-14 Dynamics Inc. Dynamic credit card with magnetic stripe and embedded encoder and methods for using the same to provide a copy-proof credit card
WO2006124808A2 (en) 2005-05-16 2006-11-23 Mastercard International Incorporated Method and system for using contactless payment cards in a transit system
US20060280338A1 (en) 2005-06-08 2006-12-14 Xerox Corporation Systems and methods for the visually impared
US8583454B2 (en) 2005-07-28 2013-11-12 Beraja Ip, Llc Medical claims fraud prevention system including photograph records identification and associated methods
US8762263B2 (en) 2005-09-06 2014-06-24 Visa U.S.A. Inc. System and method for secured account numbers in proximity devices
US20070067833A1 (en) 2005-09-20 2007-03-22 Colnot Vincent C Methods and Apparatus for Enabling Secure Network-Based Transactions
CA2624981C (en) 2005-10-06 2017-06-13 C-Sam, Inc. Three-dimensional transaction authentication
US7958362B2 (en) 2005-10-11 2011-06-07 Chang Gung University User authentication based on asymmetric cryptography utilizing RSA with personalized secret
US7747861B2 (en) * 2005-11-09 2010-06-29 Cisco Technology, Inc. Method and system for redundant secure storage of sensitive data by using multiple keys
US8245292B2 (en) 2005-11-16 2012-08-14 Broadcom Corporation Multi-factor authentication using a smartcard
JP4435076B2 (ja) 2005-11-18 2010-03-17 フェリカネットワークス株式会社 携帯端末，データ通信方法，およびコンピュータプログラム
US7568631B2 (en) 2005-11-21 2009-08-04 Sony Corporation System, apparatus and method for obtaining one-time credit card numbers using a smart card
US20080013721A1 (en) 2005-11-30 2008-01-17 Jing-Jang Hwang Asymmetric cryptography with discretionary private key
US8989390B2 (en) 2005-12-12 2015-03-24 Qualcomm Incorporated Certify and split system and method for replacing cryptographic keys
US8511547B2 (en) 2005-12-22 2013-08-20 Mastercard International Incorporated Methods and systems for two-factor authentication using contactless chip cards or devices and mobile devices or dedicated personal readers
FR2895608B1 (fr) 2005-12-23 2008-03-21 Trusted Logic Sa Procede pour la realisation d'un compteur securise sur un systeme informatique embarque disposant d'une carte a puce
US7775427B2 (en) 2005-12-31 2010-08-17 Broadcom Corporation System and method for binding a smartcard and a smartcard reader
US8352323B2 (en) 2007-11-30 2013-01-08 Blaze Mobile, Inc. Conducting an online payment transaction using an NFC enabled mobile communication device
US8559987B1 (en) 2005-12-31 2013-10-15 Blaze Mobile, Inc. Wireless bidirectional communications between a mobile device and associated secure element
US8224018B2 (en) 2006-01-23 2012-07-17 Digimarc Corporation Sensing data from physical objects
US9137012B2 (en) 2006-02-03 2015-09-15 Emc Corporation Wireless authentication methods and apparatus
US20070224969A1 (en) 2006-03-24 2007-09-27 Rao Bindu R Prepaid simcard for automatically enabling services
US7380710B2 (en) 2006-04-28 2008-06-03 Qsecure, Inc. Payment card preloaded with unique numbers
US7571471B2 (en) 2006-05-05 2009-08-04 Tricipher, Inc. Secure login using a multifactor split asymmetric crypto-key with persistent key security
DE602007008313D1 (de) 2006-05-10 2010-09-23 Inside Contactless Verfahren zur Weiterleitung von aus- und eingehenden Daten in ein NFC-Chipset
EP1873962B1 (en) 2006-06-29 2009-08-19 Incard SA Method for key diversification on an IC Card
US9985950B2 (en) 2006-08-09 2018-05-29 Assa Abloy Ab Method and apparatus for making a decision on a card
GB0616331D0 (en) 2006-08-16 2006-09-27 Innovision Res & Tech Plc Near Field RF Communicators And Near Field Communications Enabled Devices
US20100316219A1 (en) 2007-08-06 2010-12-16 David Boubion Systems and methods for simultaneous integrated multiencrypted rotating key communication
US20080072303A1 (en) 2006-09-14 2008-03-20 Schlumberger Technology Corporation Method and system for one time password based authentication and integrated remote access
US20080071681A1 (en) 2006-09-15 2008-03-20 Khalid Atm Shafiqul Dynamic Credit and Check Card
US8322624B2 (en) 2007-04-10 2012-12-04 Feinics Amatech Teoranta Smart card with switchable matching antenna
US8738485B2 (en) 2007-12-28 2014-05-27 Visa U.S.A. Inc. Contactless prepaid product for transit fare collection
US7962369B2 (en) 2006-09-29 2011-06-14 Einar Rosenberg Apparatus and method using near field communications
US8474028B2 (en) 2006-10-06 2013-06-25 Fmr Llc Multi-party, secure multi-channel authentication
GB2443234B8 (en) 2006-10-24 2009-01-28 Innovision Res & Tech Plc Near field RF communicators and near field RF communications enabled devices
WO2008054715A2 (en) 2006-10-31 2008-05-08 Solicore, Inc. Powered print advertisements, product packaging, and trading cards
US8682791B2 (en) 2006-10-31 2014-03-25 Discover Financial Services Redemption of credit card rewards at a point of sale
US8267313B2 (en) 2006-10-31 2012-09-18 American Express Travel Related Services Company, Inc. System and method for providing a gift card which affords benefits beyond what is purchased
US20080123842A1 (en) 2006-11-03 2008-05-29 Nokia Corporation Association of a cryptographic public key with data and verification thereof
US9251637B2 (en) 2006-11-15 2016-02-02 Bank Of America Corporation Method and apparatus for using at least a portion of a one-time password as a dynamic card verification value
US8365258B2 (en) 2006-11-16 2013-01-29 Phonefactor, Inc. Multi factor authentication
CN101192295A (zh) 2006-11-30 2008-06-04 讯想科技股份有限公司 芯片***网络交易***与方法
US8041954B2 (en) 2006-12-07 2011-10-18 Paul Plesman Method and system for providing a secure login solution using one-time passwords
US20080162312A1 (en) 2006-12-29 2008-07-03 Motorola, Inc. Method and system for monitoring secure applet events during contactless rfid/nfc communication
US7594605B2 (en) 2007-01-10 2009-09-29 At&T Intellectual Property I, L.P. Credit card transaction servers, methods and computer program products employing wireless terminal location and registered purchasing locations
GB2442249B (en) 2007-02-20 2008-09-10 Cryptomathic As Authentication device and method
US8095974B2 (en) 2007-02-23 2012-01-10 At&T Intellectual Property I, L.P. Methods, systems, and products for identity verification
US8463711B2 (en) 2007-02-27 2013-06-11 Igt Methods and architecture for cashless system security
US9081948B2 (en) 2007-03-13 2015-07-14 Red Hat, Inc. Configurable smartcard
US20080223918A1 (en) 2007-03-15 2008-09-18 Microsoft Corporation Payment tokens
EP2135359A4 (en) 2007-03-16 2011-07-27 Lg Electronics Inc APPLICATION EXECUTION, NON-CONTACT IN NON-BATTERY MODE
US8285329B1 (en) 2007-04-02 2012-10-09 Sprint Communications Company L.P. Mobile device-based control of smart card operation
US8667285B2 (en) 2007-05-31 2014-03-04 Vasco Data Security, Inc. Remote authentication and transaction signatures
US8112358B2 (en) * 2007-06-04 2012-02-07 Qualcomm Atheros, Inc. Authorizing customer premise equipment on a sub-network
US7739169B2 (en) 2007-06-25 2010-06-15 Visa U.S.A. Inc. Restricting access to compromised account information
US20120252350A1 (en) 2007-07-24 2012-10-04 Allan Steinmetz Vehicle safety device for reducing driver distractions
US20090037275A1 (en) 2007-08-03 2009-02-05 Pollio Michael J Consolidated membership/rewards card system
US8235825B2 (en) 2007-08-14 2012-08-07 John B. French Smart card holder for automated gaming system and gaming cards
US20110101093A1 (en) 2007-08-19 2011-05-05 Yubico Ab Device and method for generating dynamic credit card data
US7748609B2 (en) 2007-08-31 2010-07-06 Gemalto Inc. System and method for browser based access to smart cards
US20090143104A1 (en) 2007-09-21 2009-06-04 Michael Loh Wireless smart card and integrated personal area network, near field communication and contactless payment system
WO2009042819A2 (en) * 2007-09-26 2009-04-02 Clevx, Llc Self-authenticating credit card system
US8249654B1 (en) 2007-09-27 2012-08-21 Sprint Communications Company L.P. Dynamic smart card application loading
US8095113B2 (en) 2007-10-17 2012-01-10 First Data Corporation Onetime passwords for smart chip cards
GB2457221A (en) 2007-10-17 2009-08-12 Vodafone Plc Smart Card Web Server (SCWS) administration within a plurality of security domains
FR2922701B1 (fr) 2007-10-23 2009-11-20 Inside Contacless Procede de personnalisation securise d'un chipset nfc
US7652578B2 (en) 2007-10-29 2010-01-26 Motorola, Inc. Detection apparatus and method for near field communication devices
US8135648B2 (en) 2007-11-01 2012-03-13 Gtech Corporation Authentication of lottery tickets, game machine credit vouchers, and other items
US20090132417A1 (en) 2007-11-15 2009-05-21 Ebay Inc. System and method for selecting secure card numbers
US9349127B2 (en) * 2007-11-29 2016-05-24 Visa Usa Inc. Serial number and payment data based payment card processing
US20090159705A1 (en) 2007-12-24 2009-06-25 Dynamics Inc. Payment cards and devices operable to receive point-of-sale actions before point-of-sale and forward actions at point-of-sale
WO2009089099A1 (en) 2008-01-04 2009-07-16 M2 International Ltd. Dynamic card verification value
GB0801225D0 (en) 2008-01-23 2008-02-27 Innovision Res & Tech Plc Near field RF communications
US9558485B2 (en) 2008-01-30 2017-01-31 Paypal, Inc. Two step near field communication transactions
US8369960B2 (en) 2008-02-12 2013-02-05 Cardiac Pacemakers, Inc. Systems and methods for controlling wireless signal transfers between ultrasound-enabled medical devices
US9947002B2 (en) 2008-02-15 2018-04-17 First Data Corporation Secure authorization of contactless transaction
US8302167B2 (en) 2008-03-11 2012-10-30 Vasco Data Security, Inc. Strong authentication token generating one-time passwords and signatures upon server credential verification
ES2386164T3 (es) 2008-03-27 2012-08-10 Motorola Mobility, Inc. Método y aparato para la selección automática de una aplicación de comunicación de campo cercano en un dispositivo electrónico
ITMI20080536A1 (it) 2008-03-28 2009-09-29 Incard Sa Metodo per proteggere un file cap per una carta a circuito integrato.
US8024576B2 (en) 2008-03-31 2011-09-20 International Business Machines Corporation Method and system for authenticating users with a one time password using an image reader
US8365988B1 (en) 2008-04-11 2013-02-05 United Services Automobile Association (Usaa) Dynamic credit card security code via mobile device
US8347112B2 (en) 2008-05-08 2013-01-01 Texas Instruments Incorporated Encryption/decryption engine with secure modes for key decryption and key derivation
US9082117B2 (en) 2008-05-17 2015-07-14 David H. Chin Gesture based authentication for wireless payment by a mobile electronic device
US8099332B2 (en) 2008-06-06 2012-01-17 Apple Inc. User interface for application management for a mobile device
EP2139196A1 (en) 2008-06-26 2009-12-30 France Telecom Method and system for remotely blocking/unblocking NFC applications on a terminal
US8229853B2 (en) 2008-07-24 2012-07-24 International Business Machines Corporation Dynamic itinerary-driven profiling for preventing unauthorized card transactions
US8662401B2 (en) 2008-07-25 2014-03-04 First Data Corporation Mobile payment adoption by adding a dedicated payment button to mobile device form factors
US8740073B2 (en) 2008-08-01 2014-06-03 Mastercard International Incorporated Methods, systems and computer readable media for storing and redeeming electronic certificates using a wireless smart card
US8706622B2 (en) 2008-08-05 2014-04-22 Visa U.S.A. Inc. Account holder demand account update
US8438382B2 (en) 2008-08-06 2013-05-07 Symantec Corporation Credential management system and method
US20100033310A1 (en) 2008-08-08 2010-02-11 Narendra Siva G Power negotation for small rfid card
CA2733522C (en) 2008-08-08 2013-10-01 Assa Abloy Ab Directional sensing mechanism and communications authentication
CN102160061B (zh) 2008-08-20 2014-04-09 X卡控股有限公司 安全智能卡***
US8103249B2 (en) 2008-08-23 2012-01-24 Visa U.S.A. Inc. Credit card imaging for mobile payment and other applications
US10970777B2 (en) 2008-09-15 2021-04-06 Mastercard International Incorporated Apparatus and method for bill payment card enrollment
US9037513B2 (en) 2008-09-30 2015-05-19 Apple Inc. System and method for providing electronic event tickets
US20100078471A1 (en) 2008-09-30 2010-04-01 Apple Inc. System and method for processing peer-to-peer financial transactions
US20100094754A1 (en) 2008-10-13 2010-04-15 Global Financial Passport, Llc Smartcard based secure transaction systems and methods
US20100095130A1 (en) * 2008-10-13 2010-04-15 Global Financial Passport, Llc Smartcards for secure transaction systems
US8689013B2 (en) 2008-10-21 2014-04-01 G. Wouter Habraken Dual-interface key management
CN101729502B (zh) 2008-10-23 2012-09-05 中兴通讯股份有限公司 密钥分发方法和***
US8371501B1 (en) 2008-10-27 2013-02-12 United Services Automobile Association (Usaa) Systems and methods for a wearable user authentication factor
EP2182439A1 (en) 2008-10-28 2010-05-05 Gemalto SA Method of managing data sent over the air to an applet having a restricted interface
US20100114731A1 (en) 2008-10-30 2010-05-06 Kingston Tamara S ELECTRONIC WALLET ("eWallet")
WO2010069033A1 (en) 2008-12-18 2010-06-24 Bce Inc Validation method and system for use in securing nomadic electronic transactions
EP2199992A1 (en) 2008-12-19 2010-06-23 Gemalto SA Secure activation before contactless banking smart card transaction
US10354321B2 (en) 2009-01-22 2019-07-16 First Data Corporation Processing transactions with an extended application ID and dynamic cryptograms
US9065812B2 (en) 2009-01-23 2015-06-23 Microsoft Technology Licensing, Llc Protecting transactions
EP2852070B1 (en) 2009-01-26 2019-01-23 Google Technology Holdings LLC Wireless communication device for providing at least one near field communication service
US9509436B2 (en) 2009-01-29 2016-11-29 Cubic Corporation Protection of near-field communication exchanges
EP2219374A1 (en) 2009-02-13 2010-08-18 Irdeto Access B.V. Securely providing a control word from a smartcard to a conditional access module
CN103152080B (zh) 2009-02-26 2015-12-23 中兴通讯股份有限公司 支持增强型近场通信的终端及其处理方法
US20100240413A1 (en) 2009-03-21 2010-09-23 Microsoft Corporation Smart Card File System
US8567670B2 (en) 2009-03-27 2013-10-29 Intersections Inc. Dynamic card verification values and credit transactions
EP2199965A1 (en) 2009-04-22 2010-06-23 Euro-Wallet B.V. Payment transaction client, server and system
US9704159B2 (en) * 2009-05-15 2017-07-11 Entit Software Llc Purchase transaction system with encrypted transaction information
US8893967B2 (en) 2009-05-15 2014-11-25 Visa International Service Association Secure Communication of payment information to merchants using a verification token
US8417231B2 (en) 2009-05-17 2013-04-09 Qualcomm Incorporated Method and apparatus for programming a mobile device with multiple service accounts
US8391719B2 (en) 2009-05-22 2013-03-05 Motorola Mobility Llc Method and system for conducting communication between mobile devices
US20100312635A1 (en) 2009-06-08 2010-12-09 Cervenka Karen L Free sample coupon card
US20100312634A1 (en) 2009-06-08 2010-12-09 Cervenka Karen L Coupon card point of service terminal processing
US9886696B2 (en) 2009-07-29 2018-02-06 Shopkick, Inc. Method and system for presence detection
US8186602B2 (en) 2009-08-18 2012-05-29 On Track Innovations, Ltd. Multi-application contactless smart card
US20110060631A1 (en) 2009-09-04 2011-03-10 Bank Of America Redemption of customer benefit offers based on goods identification
US8317094B2 (en) 2009-09-23 2012-11-27 Mastercard International Incorporated Methods and systems for displaying loyalty program information on a payment card
US9251538B1 (en) 2009-09-23 2016-02-02 Verient Inc System and method for automatically filling webpage fields
US8830866B2 (en) 2009-09-30 2014-09-09 Apple Inc. Methods and apparatus for solicited activation for protected wireless networking
US20110084132A1 (en) 2009-10-08 2011-04-14 At&T Intellectual Property I, L.P. Devices, Systems and Methods for Secure Remote Medical Diagnostics
US9307065B2 (en) 2009-10-09 2016-04-05 Panasonic Intellectual Property Management Co., Ltd. Method and apparatus for processing E-mail and outgoing calls
US8806592B2 (en) 2011-01-21 2014-08-12 Authentify, Inc. Method for secure user and transaction authentication and risk management
US8843757B2 (en) 2009-11-12 2014-09-23 Ca, Inc. One time PIN generation
US8799668B2 (en) 2009-11-23 2014-08-05 Fred Cheng Rubbing encryption algorithm and security attack safe OTP token
US9225526B2 (en) 2009-11-30 2015-12-29 Red Hat, Inc. Multifactor username based authentication
US9258715B2 (en) 2009-12-14 2016-02-09 Apple Inc. Proactive security for mobile devices
EP2336986A1 (en) 2009-12-17 2011-06-22 Gemalto SA Method of personalizing an application embedded in a secured electronic token
US10049356B2 (en) 2009-12-18 2018-08-14 First Data Corporation Authentication of card-not-present transactions
US9324066B2 (en) 2009-12-21 2016-04-26 Verizon Patent And Licensing Inc. Method and system for providing virtual credit card services
US8615468B2 (en) 2010-01-27 2013-12-24 Ca, Inc. System and method for generating a dynamic card value
CA2694500C (en) 2010-02-24 2015-07-07 Diversinet Corp. Method and system for secure communication
US10255601B2 (en) 2010-02-25 2019-04-09 Visa International Service Association Multifactor authentication using a directory server
US9129270B2 (en) 2010-03-02 2015-09-08 Gonow Technologies, Llc Portable E-wallet and universal card
US9317018B2 (en) 2010-03-02 2016-04-19 Gonow Technologies, Llc Portable e-wallet and universal card
SI23227A (sl) 2010-03-10 2011-05-31 Margento R&D D.O.O. Brezžični mobilni transakcijski sistem in postopek izvedbe transakcije z mobilnim telefonom
US20110238564A1 (en) 2010-03-26 2011-09-29 Kwang Hyun Lim System and Method for Early Detection of Fraudulent Transactions
US8811892B2 (en) 2010-04-05 2014-08-19 Mastercard International Incorporated Systems, methods, and computer readable media for performing multiple transactions through a single near field communication (NFC) tap
US10304051B2 (en) 2010-04-09 2019-05-28 Paypal, Inc. NFC mobile wallet processing systems and methods
US20120109735A1 (en) 2010-05-14 2012-05-03 Mark Stanley Krawczewicz Mobile Payment System with Thin Film Display
US9122964B2 (en) 2010-05-14 2015-09-01 Mark Krawczewicz Batteryless stored value card with display
US9047531B2 (en) 2010-05-21 2015-06-02 Hand Held Products, Inc. Interactive user interface for capturing a document in an image signal
TWI504229B (zh) 2010-05-27 2015-10-11 Mstar Semiconductor Inc 支援電子錢包功能之行動裝置
WO2011153505A1 (en) 2010-06-04 2011-12-08 Visa International Service Association Payment tokenization apparatuses, methods and systems
WO2012000091A1 (en) 2010-06-28 2012-01-05 Lionstone Capital Corporation Systems and methods for diversification of encryption algorithms and obfuscation symbols, symbol spaces and/or schemas
US8723941B1 (en) 2010-06-29 2014-05-13 Bank Of America Corporation Handicap-accessible ATM
CN103109259A (zh) 2010-07-01 2013-05-15 以谢·白南斯托克 位置感知移动连接及信息交换***
US8500031B2 (en) 2010-07-29 2013-08-06 Bank Of America Corporation Wearable article having point of sale payment functionality
US9916572B2 (en) 2010-08-18 2018-03-13 International Business Machines Corporation Payment card processing system
US8312519B1 (en) 2010-09-30 2012-11-13 Daniel V Bailey Agile OTP generation
US8799087B2 (en) 2010-10-27 2014-08-05 Mastercard International Incorporated Systems, methods, and computer readable media for utilizing one or more preferred application lists in a wireless device reader
US9965756B2 (en) 2013-02-26 2018-05-08 Digimarc Corporation Methods and arrangements for smartphone payments
WO2012071078A1 (en) 2010-11-23 2012-05-31 X-Card Holdings, Llc One-time password card for secure transactions
US20120143754A1 (en) 2010-12-03 2012-06-07 Narendra Patel Enhanced credit card security apparatus and method
US8352749B2 (en) 2010-12-17 2013-01-08 Google Inc. Local trusted services manager for a contactless smart card
US8807440B1 (en) 2010-12-17 2014-08-19 Google Inc. Routing secure element payment requests to an alternate application
US8726405B1 (en) 2010-12-23 2014-05-13 Emc Corporation Techniques for providing security using a mobile wireless communications device having data loss prevention circuitry
US8977195B2 (en) 2011-01-06 2015-03-10 Texas Insruments Incorporated Multiple NFC card applications in multiple execution environments
US8475367B1 (en) 2011-01-09 2013-07-02 Fitbit, Inc. Biometric monitoring device having a body weight sensor, and methods of operating same
US20140379361A1 (en) 2011-01-14 2014-12-25 Shilpak Mahadkar Healthcare Prepaid Payment Platform Apparatuses, Methods And Systems
WO2012104978A1 (ja) 2011-01-31 2012-08-09 富士通株式会社 通信方法、ノード、およびネットワークシステム
EP2487629B1 (en) 2011-02-10 2016-11-30 Nxp B.V. Secure smart poster
US10373160B2 (en) 2011-02-10 2019-08-06 Paypal, Inc. Fraud alerting using mobile phone location
US20130030828A1 (en) 2011-03-04 2013-01-31 Pourfallah Stacy S Healthcare incentive apparatuses, methods and systems
US20120238206A1 (en) 2011-03-14 2012-09-20 Research In Motion Limited Communications device providing near field communication (nfc) secure element disabling features related methods
WO2012125655A1 (en) 2011-03-14 2012-09-20 Conner Investments, Llc Bluetooth enabled credit card with a large date storage volume
US20180107591A1 (en) 2011-04-06 2018-04-19 P4tents1, LLC System, method and computer program product for fetching data between an execution of a plurality of threads
US20120284194A1 (en) 2011-05-03 2012-11-08 Microsoft Corporation Secure card-based transactions using mobile phones or other mobile devices
EP2707847A4 (en) 2011-05-10 2015-04-01 Dynamics Inc SYSTEMS, APPARATUS AND METHOD FOR MOBILE PAYMENT RECEIVING, MOBILE AUTHORIZATIONS, MOBILE POCKETS AND CONTACTLESS COMMUNICATION MECHANISMS
US20120296818A1 (en) 2011-05-17 2012-11-22 Ebay Inc. Method for authorizing the activation of a spending card
US8868902B1 (en) 2013-07-01 2014-10-21 Cryptite LLC Characteristically shaped colorgram tokens in mobile transactions
WO2013101297A1 (en) 2011-06-07 2013-07-04 Visa International Service Association Payment privacy tokenization apparatuses, methods and systems
WO2012170895A1 (en) 2011-06-09 2012-12-13 Yeager C Douglas Systems and methods for authorizing a transaction
TWI444030B (zh) 2011-06-21 2014-07-01 Univ Nat Chiao Tung 動態群組中建立金鑰、認證及安全通訊方法
EP2541458B1 (en) 2011-06-27 2017-10-04 Nxp B.V. Resource management system and corresponding method
US9042814B2 (en) 2011-06-27 2015-05-26 Broadcom Corporation Measurement and reporting of received signal strength in NFC-enabled devices
US9209867B2 (en) 2011-06-28 2015-12-08 Broadcom Corporation Device for authenticating wanted NFC interactions
US9026047B2 (en) 2011-06-29 2015-05-05 Broadcom Corporation Systems and methods for providing NFC secure application support in battery-off mode when no nonvolatile memory write access is available
US8620218B2 (en) 2011-06-29 2013-12-31 Broadcom Corporation Power harvesting and use in a near field communications (NFC) device
US9390411B2 (en) 2011-07-27 2016-07-12 Murray Jarman System or method for storing credit on a value card or cellular phone rather than accepting coin change
US9075979B1 (en) 2011-08-11 2015-07-07 Google Inc. Authentication based on proximity to mobile device
CN102956068B (zh) 2011-08-25 2017-02-15 富泰华工业（深圳）有限公司 自动柜员机及其语音提示方法
BR112014004374B1 (pt) 2011-08-30 2021-09-21 Simplytapp, Inc Método para participação com base em aplicação segura em um processo de autorização de transação de cartão de pagamento por um dispositivo móvel, sistema para participação com base em aplicação segura por um dispositivo móvel em interrogações de ponto de venda
FR2980055B1 (fr) 2011-09-12 2013-12-27 Valeo Systemes Thermiques Dispositif de transmission de puissance inductif
WO2013039395A1 (en) 2011-09-14 2013-03-21 Ec Solution Group B.V. Active matrix display smart card
US10032036B2 (en) 2011-09-14 2018-07-24 Shahab Khan Systems and methods of multidimensional encrypted data transfer
US8977569B2 (en) 2011-09-29 2015-03-10 Raj Rao System and method for providing smart electronic wallet and reconfigurable transaction card thereof
US8577810B1 (en) 2011-09-29 2013-11-05 Intuit Inc. Secure mobile payment authorization
US9152832B2 (en) 2011-09-30 2015-10-06 Broadcom Corporation Positioning guidance for increasing reliability of near-field communications
US20140279479A1 (en) 2011-10-12 2014-09-18 C-Sam, Inc. Nfc paired bluetooth e-commerce
US10332102B2 (en) 2011-10-17 2019-06-25 Capital One Services, Llc System, method, and apparatus for a dynamic transaction card
US9978058B2 (en) 2011-10-17 2018-05-22 Capital One Services, Llc System, method, and apparatus for a dynamic transaction card
US9318257B2 (en) 2011-10-18 2016-04-19 Witricity Corporation Wireless energy transfer for packaging
CA2851691C (en) 2011-10-31 2016-11-29 Money And Data Protection Lizenz Gmbh & Co. Kg Authentication method
US9000892B2 (en) 2011-10-31 2015-04-07 Eastman Kodak Company Detecting RFID tag and inhibiting skimming
US8818867B2 (en) 2011-11-14 2014-08-26 At&T Intellectual Property I, L.P. Security token for mobile near field communication transactions
EP2780854B1 (en) 2011-11-14 2017-04-12 Vasco Data Security International GmbH A smart card reader with a secure logging feature
US9064253B2 (en) 2011-12-01 2015-06-23 Broadcom Corporation Systems and methods for providing NFC secure application support in battery on and battery off modes
US20140040139A1 (en) 2011-12-19 2014-02-06 Sequent Software, Inc. System and method for dynamic temporary payment authorization in a portable communication device
US9740342B2 (en) 2011-12-23 2017-08-22 Cirque Corporation Method for preventing interference of contactless card reader and touch functions when they are physically and logically bound together for improved authentication security
US9154903B2 (en) 2011-12-28 2015-10-06 Blackberry Limited Mobile communications device providing near field communication (NFC) card issuance features and related methods
US8880027B1 (en) 2011-12-29 2014-11-04 Emc Corporation Authenticating to a computing device with a near-field communications card
US20130179351A1 (en) 2012-01-09 2013-07-11 George Wallner System and method for an authenticating and encrypting card reader
US20130185772A1 (en) 2012-01-12 2013-07-18 Aventura Hq, Inc. Dynamically updating a session based on location data from an authentication device
US20130191279A1 (en) 2012-01-20 2013-07-25 Bank Of America Corporation Mobile device with rewritable general purpose card
US9218624B2 (en) 2012-02-03 2015-12-22 Paypal, Inc. Adding card to mobile/cloud wallet using NFC
KR101443960B1 (ko) 2012-02-22 2014-11-03 주식회사 팬택 사용자 인증 전자 장치 및 방법
US9020858B2 (en) 2012-02-29 2015-04-28 Google Inc. Presence-of-card code for offline payment processing system
US8898088B2 (en) 2012-02-29 2014-11-25 Google Inc. In-card access control and monotonic counters for offline payment processing system
US20130232082A1 (en) 2012-03-05 2013-09-05 Mark Stanley Krawczewicz Method And Apparatus For Secure Medical ID Card
BR122016030290A2 (pt) 2012-03-15 2019-08-27 Intel Corp dispositivo eletrônico portátil e dispositivo eletrônico para proporcionar detecção de proximidade e comunicação de campo de proximidade (nfc)
WO2013155562A1 (en) 2012-04-17 2013-10-24 Secure Nfc Pty. Ltd. Nfc card lock
US20130282360A1 (en) 2012-04-20 2013-10-24 James A. Shimota Method and Apparatus for Translating and Locating Services in Multiple Languages
US9953310B2 (en) 2012-05-10 2018-04-24 Mastercard International Incorporated Systems and method for providing multiple virtual secure elements in a single physical secure element of a mobile device
US20130303085A1 (en) 2012-05-11 2013-11-14 Research In Motion Limited Near field communication tag data management
US9306626B2 (en) 2012-05-16 2016-04-05 Broadcom Corporation NFC device context determination through proximity gestural movement detection
US8681268B2 (en) 2012-05-24 2014-03-25 Abisee, Inc. Vision assistive devices and user interfaces
US8862113B2 (en) 2012-06-20 2014-10-14 Qualcomm Incorporated Subscriber identity module activation during active data call
US9589399B2 (en) 2012-07-02 2017-03-07 Synaptics Incorporated Credential quality assessment engine systems and methods
US20140032410A1 (en) 2012-07-24 2014-01-30 Ipay International, S.A. Method and system for linking and controling of payment cards with a mobile
KR101421568B1 (ko) 2012-07-27 2014-07-22 주식회사 케이티 스마트카드, 스마트카드 서비스 단말 및 스마트카드 서비스 방법
US9530130B2 (en) 2012-07-30 2016-12-27 Mastercard International Incorporated Systems and methods for correction of information in card-not-present account-on-file transactions
KR101934293B1 (ko) 2012-08-03 2019-01-02 엘지전자 주식회사 이동 단말기의 이동 단말기 및 그의 ｎｆｃ결제 방법
US9361619B2 (en) * 2012-08-06 2016-06-07 Ca, Inc. Secure and convenient mobile authentication techniques
EP2698756B1 (en) 2012-08-13 2016-01-06 Nxp B.V. Local Trusted Service Manager
US9332587B2 (en) 2012-08-21 2016-05-03 Blackberry Limited Smart proximity priority pairing
US20140074655A1 (en) 2012-09-07 2014-03-13 David Lim System, apparatus and methods for online one-tap account addition and checkout
AU2013315510B2 (en) 2012-09-11 2019-08-22 Visa International Service Association Cloud-based Virtual Wallet NFC Apparatuses, methods and systems
US9275218B1 (en) 2012-09-12 2016-03-01 Emc Corporation Methods and apparatus for verification of a user at a first device based on input received from a second device
US8888002B2 (en) 2012-09-18 2014-11-18 Sensormatic Electronics, LLC Access control reader enabling remote applications
US20140081720A1 (en) 2012-09-19 2014-03-20 Mastercard International Incorporated Method and system for processing coupons in a near field transaction
JP2014068140A (ja) 2012-09-25 2014-04-17 Sony Corp 情報処理装置、情報処理方法及びプログラム
US9338622B2 (en) 2012-10-04 2016-05-10 Bernt Erik Bjontegard Contextually intelligent communication systems and processes
US9665858B1 (en) 2012-10-11 2017-05-30 Square, Inc. Cardless payment transactions with multiple users
US9794602B2 (en) * 2012-10-29 2017-10-17 Echostar Technologies L.L.C. Systems and methods for securely providing streaming media content on-demand
US10075437B1 (en) 2012-11-06 2018-09-11 Behaviosec Secure authentication of a user of a device during a session with a connected server
US8584219B1 (en) 2012-11-07 2013-11-12 Fmr Llc Risk adjusted, multifactor authentication
WO2014075162A1 (en) 2012-11-15 2014-05-22 Behzad Malek System and method for location-based financial transaction authentication
EP3429250A1 (en) 2012-11-19 2019-01-16 Avery Dennison Corporation Nfc security system and method for disabling unauthorized tags
US9038894B2 (en) 2012-11-20 2015-05-26 Cellco Partnership Payment or other transaction through mobile device using NFC to access a contactless transaction card
CN103023643A (zh) 2012-11-22 2013-04-03 天地融科技股份有限公司 一种动态口令牌及动态口令生成方法
US9224013B2 (en) 2012-12-05 2015-12-29 Broadcom Corporation Secure processing sub-system that is hardware isolated from a peripheral processing sub-system
US9064259B2 (en) 2012-12-19 2015-06-23 Genesys Telecomminucations Laboratories, Inc. Customer care mobile application
US10147086B2 (en) 2012-12-19 2018-12-04 Nxp B.V. Digital wallet device for virtual wallet
WO2014102721A1 (en) 2012-12-24 2014-07-03 Cell Buddy Network Ltd. User authentication system
US8934837B2 (en) 2013-01-03 2015-01-13 Blackberry Limited Mobile wireless communications device including NFC antenna matching control circuit and associated methods
US9942750B2 (en) 2013-01-23 2018-04-10 Qualcomm Incorporated Providing an encrypted account credential from a first device to a second device
US20140214674A1 (en) 2013-01-29 2014-07-31 Reliance Communications, Llc. Method and system for conducting secure transactions with credit cards using a monitoring device
US20140229375A1 (en) 2013-02-11 2014-08-14 Groupon, Inc. Consumer device payment token management
US9785946B2 (en) 2013-03-07 2017-10-10 Mastercard International Incorporated Systems and methods for updating payment card expiration information
US10152706B2 (en) 2013-03-11 2018-12-11 Cellco Partnership Secure NFC data authentication
US9307505B2 (en) 2013-03-12 2016-04-05 Blackberry Limited System and method for adjusting a power transmission level for a communication device
US9763097B2 (en) 2013-03-13 2017-09-12 Lookout, Inc. Method for performing device security corrective actions based on loss of proximity to another device
EP2973305A4 (en) 2013-03-15 2016-08-17 Intel Corp MECHANISM FOR ENHANCING DYNAMIC AND TARGET ADVERTISING FOR COMPUTER SYSTEMS
US20140339315A1 (en) 2013-04-02 2014-11-20 Tnt Partners, Llc Programmable Electronic Card and Supporting Device
WO2014170741A2 (en) 2013-04-15 2014-10-23 Pardhasarthy Mahesh Bhupathi Payback payment system and method to facilitate the same
JP6307593B2 (ja) 2013-04-26 2018-04-04 インターデイジタル パテント ホールディングス インコーポレイテッド 必要とされる認証保証レベルを達成するための多要素認証
US20140325225A1 (en) 2013-04-27 2014-10-30 Quantron Inc. Self-authenticated method with timestamp
CA2851895C (en) 2013-05-08 2023-09-26 The Toronto-Dominion Bank Person-to-person electronic payment processing
US9104853B2 (en) 2013-05-16 2015-08-11 Symantec Corporation Supporting proximity based security code transfer from mobile/tablet application to access device
US10043164B2 (en) 2013-05-20 2018-08-07 Mastercard International Incorporated System and method for facilitating a transaction between a merchant and a cardholder
US20140365780A1 (en) 2013-06-07 2014-12-11 Safa Movassaghi System and methods for one-time password generation on a mobile computing device
US10475027B2 (en) 2013-07-23 2019-11-12 Capital One Services, Llc System and method for exchanging data with smart cards
US8994498B2 (en) 2013-07-25 2015-03-31 Bionym Inc. Preauthorized wearable biometric device, system and method for use thereof
GB2516861A (en) 2013-08-01 2015-02-11 Mastercard International Inc Paired Wearable payment device
CN103417202B (zh) 2013-08-19 2015-11-18 赵蕴博 一种腕式生命体征监测装置及其监测方法
EP3050335B1 (en) 2013-09-24 2019-12-04 Intel Corporation Systems and methods for nfc access control in a secure element centric nfc architecture
EP2854332A1 (en) 2013-09-27 2015-04-01 Gemalto SA Method for securing over-the-air communication between a mobile application and a gateway
US10878414B2 (en) 2013-09-30 2020-12-29 Apple Inc. Multi-path communication of electronic device secure element data for online payments
US11748746B2 (en) 2013-09-30 2023-09-05 Apple Inc. Multi-path communication of electronic device secure element data for online payments
US8930274B1 (en) 2013-10-30 2015-01-06 Google Inc. Securing payment transactions with rotating application transaction counters
EP3070602A4 (en) 2013-11-15 2016-12-14 Kuang-Chi Intelligent Photonic Tech Ltd METHODS OF TRANSMITTING AND RECEIVING INSTRUCTION INFORMATION AND RELATED DEVICES
CA2930149A1 (en) 2013-11-19 2015-05-28 Visa International Service Association Automated account provisioning
US9384485B1 (en) 2013-11-26 2016-07-05 American Express Travel Related Services Company, Inc. Systems and methods for rapidly provisioning functionality to one or more mobile communication devices
KR102103377B1 (ko) 2013-12-02 2020-04-23 마스터카드 인터내셔날, 인코포레이티드 보안 요소 없이 모바일 장치들에게 원격 알림 서비스 메시지를 보안 전송하는 방법 및 시스템
KR102293822B1 (ko) 2013-12-19 2021-08-26 비자 인터네셔널 서비스 어소시에이션 클라우드-기반 트랜잭션 방법 및 시스템
US20150205379A1 (en) 2014-01-20 2015-07-23 Apple Inc. Motion-Detected Tap Input
US9420496B1 (en) 2014-01-24 2016-08-16 Sprint Communications Company L.P. Activation sequence using permission based connection to network
US9805384B2 (en) * 2014-02-05 2017-10-31 Mastercard International Incorporated Method and system for payment card linked offer generation
US9773151B2 (en) 2014-02-06 2017-09-26 University Of Massachusetts System and methods for contactless biometrics-based identification
US20160012465A1 (en) 2014-02-08 2016-01-14 Jeffrey A. Sharp System and method for distributing, receiving, and using funds or credits and apparatus thereof
US20150371234A1 (en) 2014-02-21 2015-12-24 Looppay, Inc. Methods, devices, and systems for secure provisioning, transmission, and authentication of payment data
EP2924914A1 (en) 2014-03-25 2015-09-30 Gemalto SA Method to manage a one time password key
GB2524578A (en) 2014-03-28 2015-09-30 Ibm Production of cryptographic signatures
US9251330B2 (en) 2014-04-09 2016-02-02 International Business Machines Corporation Secure management of a smart card
US20150317626A1 (en) 2014-04-30 2015-11-05 Intuit Inc. Secure proximity exchange of payment information between mobile wallet and point-of-sale
CA2946150A1 (en) 2014-05-01 2015-11-05 Visa International Service Association Data verification using access device
US20150326545A1 (en) 2014-05-06 2015-11-12 Apple Inc. Secure key rotation for an issuer security domain of an electronic device
SG11201609220YA (en) 2014-05-07 2016-12-29 Visa Int Service Ass Enhanced data interface for contactless communications
US10475026B2 (en) 2014-05-16 2019-11-12 International Business Machines Corporation Secure management of transactions using a smart/virtual card
US20150339663A1 (en) 2014-05-21 2015-11-26 Mastercard International Incorporated Methods of payment token lifecycle management on a mobile device
US10043185B2 (en) 2014-05-29 2018-08-07 Apple Inc. User interface for payments
US9449239B2 (en) 2014-05-30 2016-09-20 Apple Inc. Credit card auto-fill
US10026507B2 (en) * 2014-06-09 2018-07-17 Lg Cns Co., Ltd. Apparatus and method for managing a care service
US9455968B1 (en) 2014-12-19 2016-09-27 Emc Corporation Protection of a secret on a mobile device using a secret-splitting technique with a fixed user share
KR101508320B1 (ko) 2014-06-30 2015-04-07 주식회사 인포바인 Nfc 카드를 이용한 otp 발급 장치, otp 생성 장치, 및 이를 이용한 방법
US9780953B2 (en) 2014-07-23 2017-10-03 Visa International Service Association Systems and methods for secure detokenization
US20160026997A1 (en) 2014-07-25 2016-01-28 XPressTap, Inc. Mobile Communication Device with Proximity Based Communication Circuitry
US9875347B2 (en) 2014-07-31 2018-01-23 Nok Nok Labs, Inc. System and method for performing authentication using data analytics
US20160048913A1 (en) 2014-08-15 2016-02-18 Mastercard International Incorporated Systems and Methods for Assigning a Variable Length Bank Identification Number
US9775029B2 (en) 2014-08-22 2017-09-26 Visa International Service Association Embedding cloud-based functionalities in a communication device
US10242356B2 (en) 2014-08-25 2019-03-26 Google Llc Host-formatted select proximity payment system environment response
AU2015308608B2 (en) 2014-08-29 2019-07-04 Visa International Service Association Methods for secure cryptogram generation
CN104239783A (zh) 2014-09-19 2014-12-24 东软集团股份有限公司 一种特定信息安全输入***及方法
US9953323B2 (en) 2014-09-23 2018-04-24 Sony Corporation Limiting e-card transactions based on lack of proximity to associated CE device
GB2530726B (en) 2014-09-25 2016-11-02 Ibm Distributed single sign-on
AU2015319804B2 (en) 2014-09-26 2019-03-14 Visa International Service Association Remote server encrypted data provisioning system and methods
US9473509B2 (en) 2014-09-29 2016-10-18 International Business Machines Corporation Selectively permitting or denying usage of wearable device services
US9432339B1 (en) 2014-09-29 2016-08-30 Emc Corporation Automated token renewal using OTP-based authentication codes
SE539602C2 (en) 2014-10-09 2017-10-17 Kelisec Ab Generating a symmetric encryption key
CN104463270A (zh) 2014-11-12 2015-03-25 惠州Tcl移动通信有限公司 一种基于rfid的智能终端、金融卡以及金融管理***
US9379841B2 (en) 2014-11-17 2016-06-28 Empire Technology Development Llc Mobile device prevention of contactless card attacks
US10223689B2 (en) 2014-12-10 2019-03-05 American Express Travel Related Services Company, Inc. System and method for over the air provisioned wearable contactless payments
GB2533333A (en) 2014-12-16 2016-06-22 Visa Europe Ltd Transaction authorisation
WO2016112290A1 (en) 2015-01-09 2016-07-14 Interdigital Technology Corporation Scalable policy based execution of multi-factor authentication
US10333696B2 (en) 2015-01-12 2019-06-25 X-Prime, Inc. Systems and methods for implementing an efficient, scalable homomorphic transformation of encrypted data with minimal data expansion and improved processing efficiency
US20170011406A1 (en) 2015-02-10 2017-01-12 NXT-ID, Inc. Sound-Directed or Behavior-Directed Method and System for Authenticating a User and Executing a Transaction
CN105930040A (zh) 2015-02-27 2016-09-07 三星电子株式会社 包含电子支付***的电子装置及其操作方法
US20160267486A1 (en) 2015-03-13 2016-09-15 Radiius Corp Smartcard Payment System and Method
US20160277383A1 (en) 2015-03-16 2016-09-22 Assa Abloy Ab Binding to a user device
US11736468B2 (en) 2015-03-16 2023-08-22 Assa Abloy Ab Enhanced authorization
US20170289127A1 (en) 2016-03-29 2017-10-05 Chaya Coleena Hendrick Smart data cards that enable the performance of various functions upon activation/authentication by a user's fingerprint, oncard pin number entry, and/or by facial recognition of the user, or by facial recognition of a user alone, including an automated changing security number that is displayed on a screen on a card's surface following an authenticated biometric match
WO2016160816A1 (en) 2015-03-30 2016-10-06 Hendrick Chaya Coleena Smart data cards that enable the performance of various functions upon activation/authentication by a user's fingerprint, oncard pin number entry, and/or by facial recognition of the user, or by facial recognition of a user alone, including an automated changing security number that is displayed on a screen on a card's surface following an authenticated biometric match
CA2982764C (en) 2015-04-14 2023-05-23 Capital One Services, Llc A system, method, and apparatus for a dynamic transaction card
US10360557B2 (en) 2015-04-14 2019-07-23 Capital One Services, Llc Dynamic transaction card protected by dropped card detection
US10482453B2 (en) 2015-04-14 2019-11-19 Capital One Services, Llc Dynamic transaction card protected by gesture and voice recognition
US9674705B2 (en) 2015-04-22 2017-06-06 Kenneth Hugh Rose Method and system for secure peer-to-peer mobile communications
US9209974B1 (en) 2015-05-03 2015-12-08 Zeutro, Llc Functional encryption key management
US10007913B2 (en) 2015-05-05 2018-06-26 ShoCard, Inc. Identity management service using a blockchain providing identity transactions between devices
US20160335531A1 (en) 2015-05-12 2016-11-17 Dynamics Inc. Dynamic security codes, tokens, displays, cards, devices, multi-card devices, systems and methods
FR3038429B1 (fr) 2015-07-03 2018-09-21 Ingenico Group Conteneur de paiement, procede de creation, procede de traitement, dispositifs et programmes correspondants
US20170039566A1 (en) 2015-07-10 2017-02-09 Diamond Sun Labs, Inc. Method and system for secured processing of a credit card
US10108965B2 (en) 2015-07-14 2018-10-23 Ujet, Inc. Customer communication system including service pipeline
US11120436B2 (en) 2015-07-17 2021-09-14 Mastercard International Incorporated Authentication system and method for server-based payments
US20170024716A1 (en) 2015-07-22 2017-01-26 American Express Travel Related Services Company, Inc. System and method for single page banner integration
US9894471B1 (en) 2015-07-25 2018-02-13 Gary M. Zalewski Wireless coded communication (WCC) devices with power harvesting power sources for processing biometric identified functions
US10492163B2 (en) 2015-08-03 2019-11-26 Jpmorgan Chase Bank, N.A. Systems and methods for leveraging micro-location devices for improved travel awareness
KR20170028015A (ko) 2015-09-03 2017-03-13 엔에이치엔엔터테인먼트 주식회사 휴대용 단말기를 이용한 온라인 신용카드 결제 시스템 및 결제 방법
FR3041195A1 (fr) 2015-09-11 2017-03-17 Dp Security Consulting Procede d'acces a un service en ligne au moyen d'un microcircuit securise et de jetons de securite restreignant l'utilisation de ces jetons a leur detenteur legitime
WO2017042400A1 (en) 2015-09-11 2017-03-16 Dp Security Consulting Sas Access method to an on line service by means of access tokens and secure elements restricting the use of these access tokens to their legitimate owner
ITUB20155318A1 (it) 2015-10-26 2017-04-26 St Microelectronics Srl Tag, relativo procedimento e sistema per identificare e/o autenticare oggetti
US20170140379A1 (en) 2015-11-17 2017-05-18 Bruce D. Deck Credit card randomly generated pin
GB2545889A (en) * 2015-11-17 2017-07-05 Gelliner Ltd Payment confirmation system and method
CA2944935A1 (en) 2015-11-27 2017-05-27 The Toronto-Dominion Bank System and method for remotely activating a pin-pad terminal
EP3374740A4 (en) 2015-12-07 2019-09-25 Capital One Services, LLC ELECTRONIC ACCESS CONTROL SYSTEM
US9948467B2 (en) 2015-12-21 2018-04-17 Mastercard International Incorporated Method and system for blockchain variant using digital signatures
KR101637863B1 (ko) 2016-01-05 2016-07-08 주식회사 코인플러그 본인인증용 정보 보안 전송시스템 및 방법
WO2017134281A1 (en) 2016-02-04 2017-08-10 Nasdaq Technology Ab Systems and methods for storing and sharing transactional data using distributed computer systems
US9619952B1 (en) 2016-02-16 2017-04-11 Honeywell International Inc. Systems and methods of preventing access to users of an access control system
US10148135B2 (en) 2016-02-16 2018-12-04 Intel IP Corporation System, apparatus and method for authenticating a device using a wireless charger
FR3049083A1 (fr) 2016-03-15 2017-09-22 Dp Security Consulting Sas Procede de duplication des donnees d'un microcircuit securise vers un autre microcircuit securise permettant, au plus, a un seul microcircuit securise d'etre operationnel a un instant donne
US9961194B1 (en) 2016-04-05 2018-05-01 State Farm Mutual Automobile Insurance Company Systems and methods for authenticating a caller at a call center
EP3229397B1 (en) 2016-04-07 2020-09-09 ContactOffice Group Method for fulfilling a cryptographic request requiring a value of a private key
US10255816B2 (en) 2016-04-27 2019-04-09 Uber Technologies, Inc. Transport vehicle configuration for impaired riders
US10333705B2 (en) 2016-04-30 2019-06-25 Civic Technologies, Inc. Methods and apparatus for providing attestation of information using a centralized or distributed ledger
KR20170126688A (ko) 2016-05-10 2017-11-20 엘지전자 주식회사 스마트 카드 및 그 스마트 카드의 제어 방법
US9635000B1 (en) 2016-05-25 2017-04-25 Sead Muftic Blockchain identity management system based on public identities ledger
GB201609460D0 (en) 2016-05-30 2016-07-13 Silverleap Technology Ltd Increased security through ephemeral keys for software virtual contactless card in a mobile phone
US10097544B2 (en) 2016-06-01 2018-10-09 International Business Machines Corporation Protection and verification of user authentication credentials against server compromise
US10680677B2 (en) 2016-08-01 2020-06-09 Nxp B.V. NFC system wakeup with energy harvesting
US10032169B2 (en) 2016-08-08 2018-07-24 Ellipse World, Inc. Prepaid, debit and credit card security code generation system
US20180039986A1 (en) 2016-08-08 2018-02-08 Ellipse World S.A. Method for a Prepaid, Debit and Credit Card Security Code Generation System
US10084762B2 (en) 2016-09-01 2018-09-25 Ca, Inc. Publicly readable blockchain registry of personally identifiable information breaches
US10748130B2 (en) 2016-09-30 2020-08-18 Square, Inc. Sensor-enabled activation of payment instruments
US10462128B2 (en) 2016-10-11 2019-10-29 Michael Arthur George Verification of both identification and presence of objects over a network
US10719771B2 (en) 2016-11-09 2020-07-21 Cognitive Scale, Inc. Method for cognitive information processing using a cognitive blockchain architecture
US20180160255A1 (en) 2016-12-01 2018-06-07 Youngsuck PARK Nfc tag-based web service system and method using anti-simulation function
US10133979B1 (en) 2016-12-29 2018-11-20 Wells Fargo Bank, N.A. Wearable computing device-powered chip-enabled card
US10237070B2 (en) 2016-12-31 2019-03-19 Nok Nok Labs, Inc. System and method for sharing keys across authenticators
DE102017000768A1 (de) 2017-01-27 2018-08-02 Giesecke+Devrient Mobile Security Gmbh Verfahren zum Durchführen einer Zweifaktorauthentifizierung
US20180240106A1 (en) 2017-02-21 2018-08-23 Legacy Ip Llc Hand-held electronics device for aggregation of and management of personal electronic data
US20180254909A1 (en) 2017-03-06 2018-09-06 Lamark Solutions, Inc. Virtual Identity Credential Issuance and Verification Using Physical and Virtual Means
US10764043B2 (en) 2017-04-05 2020-09-01 University Of Florida Research Foundation, Incorporated Identity and content authentication for phone calls
US10129648B1 (en) 2017-05-11 2018-11-13 Microsoft Technology Licensing, Llc Hinged computing device for binaural recording
US20180375838A1 (en) * 2017-06-27 2018-12-27 Salesforce.Com, Inc. Filtering and unicity with deterministic encryption
US20190019375A1 (en) 2017-07-14 2019-01-17 Gamblit Gaming, Llc Ad hoc customizable electronic gaming table
US9940571B1 (en) 2017-08-25 2018-04-10 Capital One Services, Llc Metal contactless transaction card
US10019707B1 (en) 2017-10-24 2018-07-10 Capital One Services, Llc Transaction card mode related to locating a transaction card
US11102180B2 (en) 2018-01-31 2021-08-24 The Toronto-Dominion Bank Real-time authentication and authorization based on dynamically generated cryptographic data
US10511443B1 (en) 2018-10-02 2019-12-17 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
WO2020072474A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
EP3654264A1 (en) * 2018-11-14 2020-05-20 Mastercard International Incorporated Credential management for mobile devices
US11102004B2 (en) * 2019-04-29 2021-08-24 Google Llc Systems and methods for distributed verification of online identity

Also Published As

Publication number Publication date
KR20210134214A (ko) 2021-11-09
AU2021201415A1 (en) 2021-11-18
JP2021175184A (ja) 2021-11-01
US10915888B1 (en) 2021-02-09
EP3905083A1 (en) 2021-11-03
US20230252451A1 (en) 2023-08-10
CA3110585A1 (en) 2021-10-30
US20210342819A1 (en) 2021-11-04
US11562346B2 (en) 2023-01-24
SG10202102245QA (en) 2021-11-29

Similar Documents

Publication Publication Date Title
CN112602300B (zh) 用于非接触式卡的密码认证的***和方法
CN113168635A (zh) 用于非接触式卡的密码认证的***和方法
US11770254B2 (en) Systems and methods for cryptographic authentication of contactless cards
US20230252451A1 (en) Contactless card with multiple rotating security keys
CN113168631A (zh) 用于非接触卡的密码认证的***和方法
US20200106609A1 (en) Systems and methods for cryptographic authentication of contactless cards
US20230254339A1 (en) Systems and methods for signaling an attack on contactless cards
CA3106454A1 (en) Systems and methods for cryptographic authentication of contactless cards
KR102122555B1 (ko) 사용자가 소지한 금융 카드 기반 본인 인증 시스템 및 방법
JP2022501861A (ja) 非接触カードの暗号化認証のためのシステムおよび方法
KR20240023613A (ko) 비접촉식 카드의 확장 가능한 암호화 인증을 위한 시스템 및 방법

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
REG Reference to a national code

Ref country code: HK

Ref legal event code: DE

Ref document number: 40055820

Country of ref document: HK

SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination