Augmented reality dynamic authentication for electronic transactions

Patent metadata

Field	Value
Publication number	US-10607230-B2
Application number	US-201615367551-A
Country	US
Kind code	B2
Filing date	Dec 2, 2016
Priority date	Dec 2, 2016
Publication date	Mar 31, 2020
Grant date	Mar 31, 2020

Abstract

A system for authorizing an electronic transaction in an augmented reality environment comprises an augmented reality user device and an authentication server. The augmented reality user device includes a display that overlays virtual objects onto a field of view of the user. The user device receives a request to verify information about a payment card used in an electronic transaction. The request includes a virtual authentication object, which is a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter an authentication code. The user device displays the virtual authentication object to the user and detects gestures performed on the virtual authentication object. The user device sends the detected gestures to the authentication server. The authentication server determines the authentication code using the virtual authentication object and the detected gestures, and uses it to authorize the transaction.

First claim

What is claimed is:

1. A system for authorizing an electronic transaction in an augmented reality environment, the system comprising:
a user terminal, an augmented reality user device, and an authentication server;
the user terminal comprising one or more processors operable to:
initiate an electronic transaction on behalf of a user; and
transmit information about a payment card to be used to complete the electronic transaction;

the augmented reality user device comprising:
a display configured to overlay virtual objects onto a field of view of the user in real-time; and
one or more processors coupled to the display;
the one or more processors operable to:
receive a request to verify the information about the payment card to be used to complete the electronic transaction, the request comprising a virtual authentication object, the virtual authentication object comprising a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter a first authentication code;
display the virtual authentication object to the user via the display;
detect one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code; and
send the detected one or more gestures to the authentication server;

the authentication server comprising:
a memory operable to store a database, the database comprising one or more records associating a payment card with a second authentication code; and
one or more processors coupled to the memory, the one or more processors operable to:
receive the detected one or more gestures from the augmented reality user device;
determine the first authentication code using the virtual authentication object and the detected one or more gestures; and
compare the determined first authentication code with the second authentication code associated with the payment card in a database record for the payment card to verify the electronic transaction.

2. The system of claim 1 , wherein the one or more processors of the augmented reality user device are further operable to send the virtual authentication object to the authentication server.

3. The system of claim 1 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the electronic transaction from the authentication server.

4. The system of claim 1 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the electronic transaction from a transaction server.

5. The system of claim 1 , wherein:
the one or more processors of the augmented reality user device are further operable to:
receive a transaction identifier associated with the electronic transaction;
associate the detected one or more gestures with the transaction identifier; and
send the transaction identifier to the authentication server.

6. The system of claim 1 , wherein the virtual authentication object comprises a plurality of virtual objects that are capable of being individually manipulated.

7. The system of claim 1 , wherein the detected gesture includes temporal information associated with a speed at which the user manipulated the virtual authentication object.

8. A method of authorizing an electronic transaction in an augmented reality environment, the method comprising:
initiating an electronic transaction on behalf of a user;
transmitting information about a payment card to be used to complete the electronic transaction;
receiving, by an augmented reality user device, a request to verify the information about the payment card to be used to complete the electronic transaction, wherein:
the request comprises a virtual authentication object;
the virtual authentication object comprises a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter a first authentication code; and
the augmented reality user device comprises a display configured to overlay virtual objects onto a field of view of a user in real-time;

displaying the virtual authentication object to the user via the display;
detecting one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code;
sending the detected one or more gestures to an authentication server, the authentication server comprising a database comprising one or more records associating a payment card with a second authentication code;
determining, by the authentication server, the first authentication code using the virtual authentication object and the detected one or more gestures; and
comparing the determined first authentication code with the second authentication code associated with the payment card in a database record for the payment card to verify the electronic transaction.

9. The method of claim 8 , further comprising sending, by the augmented reality user device, the virtual authentication object to the authentication server.

10. The method of claim 8 , wherein the request to verify the electronic transaction is received from the authentication server.

11. The method of claim 8 , wherein the request to verify the electronic transaction is received from a transaction server.

12. The method of claim 8 , further comprising:
receiving, by the augmented reality user device, a transaction identifier associated with the electronic transaction;
associating the detected one or more gestures with the transaction identifier; and
sending the transaction identifier to the authentication server.

13. The method of claim 8 , wherein the virtual authentication object comprises a plurality of virtual objects that are capable of being individually manipulated.

14. The method of claim 8 , wherein the detected gesture includes temporal information associated with a speed at which the user manipulated the virtual authentication object.

15. A system for authorizing an electronic transaction in an augmented reality environment, the system comprising:
an augmented reality user device and an authentication server;
the augmented reality user device comprising:
a display configured to overlay virtual objects onto a field of view of the user in real-time; and
one or more processors coupled to the display;
the one or more processors operable to:
receive a request to verify information about a payment card used in an electronic transaction, the request comprising a virtual authentication object, the virtual authentication object comprising a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter a first authentication code;
display the virtual authentication object to the user via the display;
detect one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code; and
send the detected one or more gestures to the authentication server;

the authentication server comprising:
a memory operable to store a database, the database comprising one or more records associating a payment card with a second authentication code; and
one or more processors coupled to the memory, the one or more processors operable to:
receive the detected one or more gestures from the augmented reality user device;
determine the first authentication code using the virtual a

Assignees

• Bank Of America

Inventors

• Adams Amanda J
• Johansen Joseph N
• Ogrinz Michael
• Dolan Heather
• Jacobson William P
• Kurian Manu J

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06Q40/00

  Finance; Insurance; Tax strategies; Processing of corporate or income taxes · CPC title

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• G06F3/017

  Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883) · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title