Contactless Card Multi-Factor Authentication Patent

ChangeBridge: Patent Grants - Business Methods (G06Q)

Published March 31st, 2026

Detected March 31st, 2026

Summary

The USPTO granted Capital One patent US12591875B2 covering systems and methods for using a contactless card as one authentication factor in multi-factor authentication. The patent describes server-side validation of contactless card cryptograms and extraction of customer identifiers for user authentication. The patent was filed March 10, 2023, and contains 20 claims.

View original document View source feed page

What changed

The USPTO issued patent US12591875B2 to Capital One Services LLC, covering methods for authenticating users with a contactless card as a secondary factor in multi-factor authentication systems. The patent describes a server receiving authentication requests, validating contactless card cryptograms, decrypting them to extract unique customer identifiers, and verifying those identifiers to authenticate users. Inventors include Katherine McHugh, Lesley Newton, and Patrick Zearfoss.

Patent grants are informational notices establishing intellectual property rights rather than imposing compliance obligations. Financial institutions and technology companies developing payment authentication systems should review the patent claims to assess potential licensing implications or competitive positioning. Patent holders may choose to enforce these claims against competitors, which could affect product development strategies in the contactless payment authentication space.

Source document (simplified)

← USPTO Patent Grants

Systems and methods of contactless card as one authentication factor for multiple factor authentication

Grant US12591875B2 Kind: B2 Mar 31, 2026

Assignee

Capital One Services, LLC

Inventors

Katherine McHugh, Lesley Newton, Patrick Zearfoss

Abstract

Systems and methods for authenticating a user using a contactless card as one authentication factor for multiple factor authentication are provided. In an exemplary embodiment, a server receives a first request of authenticating a user using a first authentication factor, authenticates the user using the first authentication factor, and receives a second request of authenticating the user using a contactless card as a second authentication factor. The server receives a cryptogram of the contactless card, validates the cryptogram, decrypts the cryptogram, and extracts a unique customer identifier of the contactless card. The server verifies the unique customer identifier, authenticates the user using the unique customer identifier, and transmits an authentication result of authenticating the user using the contactless card as the second authentication factor.

CPC Classifications

G06Q 20/352 G06Q 20/401 G06Q 20/1085 G06Q 20/18 G06Q 20/341 G06Q 20/353 G06Q 20/3821 G06Q 20/386 G06Q 20/4014 G06Q 20/40145 G06Q 20/405 G06Q 20/40975 H04L 2463/082 H04L 63/0428 H04L 63/0853 H04W 12/06