Methods and systems for validating mobile devices of customers via third parties

Patent metadata

Field	Value
Publication number	US-10327141-B2
Application number	US-201715818184-A
Country	US
Kind code	B2
Filing date	Nov 20, 2017
Priority date	Oct 30, 2014
Publication date	Jun 18, 2019
Grant date	Jun 18, 2019

Abstract

A method for authenticating a mobile device in real-time. The method includes detecting the mobile device, sending a text message containing a unique uniform resource locator (“URL”) to the mobile device, and detecting an access of the unique URL by the mobile device through a first communication path. In response to detecting the access of the unique URL, requesting and subsequently receiving, by the host system in real-time, a phone number and a subscriber identification ID associated with the mobile device through a second communication path distinct from the first communication path, and a device fingerprint of the mobile device through the first communication path. The method further includes initiating a risk analysis based on the phone number, the subscriber ID, and the device fingerprint and determining an authentication status of the mobile device based on the risk analysis.

First claim

What is claimed is:

1. A method for authenticating a user device in real-time comprising:
sending, by a host system, a message comprising a uniform resource locator (“URL”) to the user device;
receiving, by the host system, an indication that the user device has accessed the URL through a first communication path;
requesting in-real time, in response to receiving the indication, by the host system:
a device fingerprint of the user device through the first communication path; and
a phone number associated with the user device;

receiving in real-time, in response to requesting the device fingerprint and the phone number, by the host system:
the device fingerprint of the user device through the first communication path; and
the phone number associated with the user device;

initiating, by the host system, a risk analysis, wherein:
the risk analysis comprises comparing in real-time the device fingerprint and the phone number with a stored device fingerprint and a stored phone number, respectively; and
the stored device fingerprint is a previous device fingerprint obtained from a previous communication with the user device; and

determining, by the host system, an authentication status of the user device based on the risk analysis, wherein:
upon a comparison in the risk analysis of the phone number with the stored phone number being positive, the authentication status is verified;
upon a comparison in the risk analysis of the device fingerprint with the stored device fingerprint being negative, requiring, by the host system, a secondary verification with the user device; and
upon a positive result of the secondary verification the authentication status is verified.

2. The method of claim 1 , wherein:
the first communication path comprises a cellular network.

3. The method of claim 1 , further comprising:
sending, by the host system, instructions to the user device to disable a wireless IP network connection prior to accessing the URL.

4. The method of claim 1 , further comprising:
in response to receiving the indication, sending, by the host system, a landing page to a browser on the user device through the first communication path.

5. The method of claim 1 , further comprising:
requesting and receiving, by the host system, the phone number from a third party through a second communication path.

6. The method of claim 5 , wherein:
the first communication path and the second communication path utilize different communication channels in a common communication network.

7. The method of claim 5 , wherein:
the first communication path and the second communication path utilize different communication channels in different communication networks.

8. The method of claim 1 , wherein the device fingerprint comprises at least one selection from a group consisting of:
a user location, device name, network name, capacity figure, available capacity figure, operating system name, operating system version, carrier identification, model identification, serial number, one or more mobile apps installed, contacts, cookies, flash objects, browser plugins, gyro status, Bluetooth™ adapter, and MAC address.

9. The method of claim 1 , further comprising:
based at least in part on the authentication status being verified, initiating a funds transfer.

10. The method of claim 1 , further comprising:
in response to detecting the user device being in communication with the host system, generating, by the host system, the URL.

11. The method of claim 1 , further comprising:
in response to detecting the user device in communication with the host system, establishing, by the host system, a second communication path with a third party system.

12. The method of claim 1 , further comprising:
contacting, by the host system through a second communication path, a web service application programming interface (“API”) associated with a third party to request the phone number.

13. A system for authenticating a user device in real-time, comprising:
a host system configured to at least:
send a message comprising a uniform resource locator (“URL”) to a user device;
receive an indication that the user device has accessed the URL through a first communication path;
request, in real-time, in response to receiving the indication:
a device fingerprint of the user device through the first communication path; and
a phone number associated with the user device;

receive in real-time, in response to requesting the device fingerprint and phone number:
the device fingerprint of the user device through the first communication path; and
the phone number associated with the user device;

initiate a risk analysis, wherein:
the risk analysis comprises comparing in real-time the device fingerprint and the phone number with a stored device fingerprint and a stored phone number, respectively; and
the stored device fingerprint is a previous device fingerprint obtained from a previous communication with the user device; and

determine an authentication status of the user device based on the risk analysis, wherein:
upon a comparison in the risk analysis of the phone number with the stored phone number being positive, the authentication status is verified;
upon a comparison in the risk analysis of the device fingerprint with the stored device fingerprint being negative, requiring, by the host system, a secondary verification with the user device; and
upon a positive result of the secondary verification the authentication status is verified.

14. The system of claim 13 , wherein the indication that the user device has accessed the URL comprises:
a user login to a mobile website by the user device.

15. The system of claim 13 , wherein the indication that the user device has accessed the URL is selected from a group consisting of:
the user device downloading a mobile application; and
a login to the mobile application.

16. The system of claim 13 , wherein the phone number comprises:
an indentifier of a mobile phone line carrier account.

17. A non-transitory computer readable medium having instructions stored thereon for authenticating a user device in real-time, wherein the instructions are executable by one or more processors to at least:
send a message comprising a uniform resource locator (“URL”) to a user device;
receive an indication that the user device has accessed the URL through a first communication path;
request in real-time, in response to receiving the indication:
a device fingerprint of the user device through the first communication path; and
a phone number associated with the user device;

receive in real-time, in response to requesting the device fingerprint and the phone number:
the device fingerprint of the user device through the first communication path; and
the phone number associated with the user device;

initiate a risk analysis, wherein:
the risk analysis comprises comparing in real-time the device fingerprint and the phone number with a stored device fingerprint and a stored phone number, respectively; and
the stored device fingerprint is a previous device fingerprint obtained from a previous communication with the user device; and

determine an authentication status of the user device based on the risk analysis, wherein:
upon a comparison in the risk analysis of the phone number with the stored phone number being positive, the authentication status is verified;
upon a comparison in the risk analysis of the device fingerprint with the stored device fingerprint being negative, requiring, by the host system, a secondary ve

Assignees

• Western Union Co

Inventors

• Gupta Abhinav
• Mcmanus Bernard
• Mcnelley Don

Classifications

• G06Q20/3223

  Realising banking transactions through M-devices · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06F21/43

  wireless channels · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title