Systems and methods for authenticating user identities in networked computer systems

Patent metadata

Field	Value
Publication number	US-10896419-B2
Application number	US-201816139347-A
Country	US
Kind code	B2
Filing date	Sep 24, 2018
Priority date	Jun 23, 2014
Publication date	Jan 19, 2021
Grant date	Jan 19, 2021

Abstract

The disclosed embodiments include methods, systems, system terminals, and point-of-sale terminals for authenticating a user. The disclosed embodiments include, for example, a method for receiving, by one or more processors, authentication data from an authentication network, the authentication data including an authentication code identifying an authentication transaction associated with an authenticating partner system. The method may also include validating, by the one or more processors, the authentication data, the validating comprising comparing the authentication data with validation data corresponding to a prior authentication event associated with the user. The method may also include generating, by the one or more processors, validation information based on the validating, the validation information comprising a determination whether to validate the user for the authentication transaction. The method may also include providing, by the one or more processors, the validation information to the authentication network.

First claim

What is claimed is:

1. An apparatus, comprising:
a communications interface;
a memory storing software instructions; and
one or more processors coupled to the memory and the communications interface, the one or more processors configured to execute the software instructions to perform one or more operations, the operations comprising:
obtaining an authentication code from a first authentication partner system, the authentication code being associated with an authentication transaction, the authentication code comprising routing encoding and at least one of an alphanumeric code, a visual code, or a biometric code, and the routing encoding specifying a second authentication partner system in communication with an authentication network;
generating and transmitting, via the communications interface, a first signal to a terminal device, the first signal comprising authentication data that includes the authentication code obtained from the first authentication partner system, the terminal device being configured to transmit the authentication data to the second authentication partner system, and the second authentication partner system being configured to validate the authentication transaction based on the authentication data and transaction data characterizing one or more prior authentication transactions and transmit validation data to the first authentication partner system; and
receiving a second signal via the communications interface, the second signal comprising confirmation data that reflects an approval, by the first authentication partner system, of the authentication transaction based on an application of an authorization condition to the authentication code or a validation condition to validation data, the authorization condition and the validation condition being generated by the second authentication partner system.

2. The apparatus of claim 1 , wherein the terminal device, the first authentication partner system, and the second authentication partner system are in communication across the authentication network.

3. The apparatus of claim 1 , wherein the authentication code is representative of a request to authenticate an identity of a user involved in the authentication transaction.

4. The apparatus of claim 3 , wherein the operations further comprise:
generating and transmitting, via the communications interface, a third signal that includes the request to the first authentication partner system;
receiving, via the communications interface, a fourth signal that includes the authentication code from the first authentication partner system; and
initiating the authentication transaction based on information received from a client device in communication with the apparatus.

5. The apparatus of claim 3 , wherein:
the request comprises data associated with the user;
the data associated with the user includes at least one of personal information, government-issued identifying information, or device information identifying at least one of the first authentication partner system and the second authentication partner system providing the authentication data; and
the authentication code is representative of the data associated with the user.

6. The apparatus of claim 3 , wherein:
the one or more prior authentication transactions involve the user or are initiated by a client device associated with the user;
the second authentication partner system is further configured to validate the authentication transaction based on a comparison between the authentication data and the transaction data, generate the validation data, and transmit the authentication code and the validation data to the first authentication partner system; and
the validation data reflects the validated authorization transaction.

7. The apparatus of claim 1 , wherein the second authentication partner system is further configured to validate the authentication transaction based on a comparison between the authentication data and the transaction data, generate the validation data indicative of the validated authentication transaction, and transmit the authentication code and the validation data to the first authentication partner system.

8. The apparatus of claim 1 , wherein the confirmation data further reflects an approval, by the first authentication partner system, of a request to authenticate an identity of a user involved in the authentication transaction, the request being associated with authentication code.

9. A terminal device, comprising:
a communications interface;
a memory storing software instructions; and
one or more processors coupled to the memory and the communications interface, the one or more processors configured to execute the software instructions to perform one or more operations, the operations comprising:
receiving a first signal via the communications interface, the first signal comprising first authentication data that includes an authentication code, the authentication code being associated with an authentication transaction, and the authentication code being generated by a first authentication partner system, the authentication code comprising routing encoding and at least one of an alphanumeric code, visual code, or biometric code, and the routing encoding specifying a second authentication partner system in communication with an authentication network;
generating and transmitting, via the communications interface, a second signal that includes the first authentication data to the second authentication partner system, the second authentication partner system being configured to validate the authentication transaction based on the first authentication data and transaction data characterizing one or more prior authentication transactions; and
receiving a third signal from the first authentication partner system via the communications interface, the third signal comprising confirmation data reflecting an approval of the authentication transaction by the first authentication partner system, the approval being based on an application of an authorization condition to the authentication code or a validation condition to validation data generated by the second authentication partner system.

10. The terminal device of claim 9 , wherein the authentication code is representative of a request to authenticate an identity of a user involved in the authentication transaction.

11. The terminal device of claim 10 , wherein:
the one or more prior authentication transactions involve the user or are initiated by a client device associated with the user;
the second authentication partner system is configured to validate the authentication transaction based on a comparison between the authentication data and the transaction data, generate the validation data, and transmit the authentication code and the validation data to the first authentication partner system; and
the validation data reflects the validated authentication transaction.

12. The terminal device of claim 10 , wherein:
the first signal is generated by a client device associated with the user;
the first authentication data is associated with the user; and
the operations further comprise:
receiving second authentication data associated with the user, the second authentication data corresponding to the authentication transaction;
determining the second authentication partner system based on the second set of authentication data;
generating and transmitting, via the communications interface, a fourth signal that includes the second authentication data to the second authentication partner system, the second authentication partner system being configured to validate the authentication transaction based on portions

Assignees

• Toronto Dominion Bank

Inventors

• Sivashanmugam Prabaharan
• Van Heerden Lauren
• Cummins Michael D
• Del Vecchio Orin
• Nadarajah Gunalan
• Lounsbury Edward
• Chan Paul Mon-Wah
• Barnett Jonathan K
• Metwalli Ashraf
• Danielak Jakub

Classifications

• G06Q20/4014 Primary

  Identity check for transactions · CPC title

• G06Q20/4015

  using location information · CPC title

• G06Q20/202 Primary

  Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title