Augmented reality dynamic authentication for electronic transactions

Patent metadata

Field	Value
Publication number	US-11288679-B2
Application number	US-202016783607-A
Country	US
Kind code	B2
Filing date	Feb 6, 2020
Priority date	Dec 2, 2016
Publication date	Mar 29, 2022
Grant date	Mar 29, 2022

Abstract

A system for authorizing an electronic transaction in an augmented reality environment comprises an augmented reality user device and an authentication server. The augmented reality user device includes a display that overlays virtual objects onto a field of view of the user. The user device receives a request to verify information about a payment card used in an electronic transaction. The request includes a virtual authentication object, which is a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter an authentication code. The user device displays the virtual authentication object to the user and detects gestures performed on the virtual authentication object. The user device sends the detected gestures to the authentication server. The authentication server determines the authentication code using the virtual authentication object and the detected gestures, and uses it to authorize the transaction.

First claim

What is claimed is:

1. A system for authorizing an electronic transaction in an augmented reality environment, the system comprising:
an augmented reality user device comprising:
a display configured to overlay virtual objects onto a field of view of the user in real-time; and
one or more processors coupled to the display;
the one or more processors operable to:
receive a request to verify information about a payment card to be used to complete an electronic transaction initiated on behalf of a user, the request comprising a virtual authentication object capable of being manipulated by the user to enter a first authentication code;
display the virtual authentication object to the user via the display;
detect one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code; and

an authentication server communicatively coupled to the augmented reality user device and comprising:
a memory operable to store a database, the database comprising one or more records associating a payment card with a second authentication code; and
one or more processors coupled to the memory, the one or more processors operable to:
receive the detected one or more gestures from the augmented reality user device;
determine the first authentication code using the virtual authentication object and the detected one or more gestures; and
compare the determined first authentication code with the second authentication code to verify the electronic transaction.

2. The system of claim 1 , wherein the one or more processors of the augmented reality user device are further operable to send the virtual authentication object to the authentication server.

3. The system of claim 1 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the electronic transaction from the authentication server.

4. The system of claim 1 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the electronic transaction from a transaction server.

5. The system of claim 1 , wherein:
the one or more processors of the augmented reality user device are further operable to:
receive a transaction identifier associated with the electronic transaction;
associate the detected one or more gestures with the transaction identifier; and
send the transaction identifier to the authentication server.

6. The system of claim 1 , wherein the virtual authentication object comprises a plurality of virtual objects that are capable of being individually manipulated.

7. The system of claim 1 , wherein the detected gesture includes temporal information associated with a speed at which the user manipulated the virtual authentication object.

8. A method of authorizing an electronic transaction in an augmented reality environment, the method comprising:
receiving, by an augmented reality user device, a request to verify information about a payment card to be used to complete an electronic transaction initiated on behalf of a user, wherein:
the request comprises a virtual authentication object;
the virtual authentication object is capable of being manipulated by the user to enter a first authentication code; and
the augmented reality user device comprises a display configured to overlay virtual objects onto a field of view of a user in real-time;

displaying the virtual authentication object to the user via the display;
detecting one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code;
sending the detected one or more gestures to an authentication server, the authentication server comprising a database comprising one or more records associating a payment card with a second authentication code;
determining, by the authentication server, the first authentication code using the virtual authentication object and the detected one or more gestures; and
comparing the determined first authentication code with the second authentication code associated with the payment card in a database record for the payment card to verify the electronic transaction.

9. The method of claim 8 , further comprising sending, by the augmented reality user device, the virtual authentication object to the authentication server.

10. The method of claim 8 , wherein the request to verify the electronic transaction is received from the authentication server.

11. The method of claim 8 , wherein the request to verify the electronic transaction is received from a transaction server.

12. The method of claim 8 , further comprising:
receiving, by the augmented reality user device, a transaction identifier associated with the electronic transaction;
associating the detected one or more gestures with the transaction identifier; and
sending the transaction identifier to the authentication server.

13. The method of claim 8 , wherein the virtual authentication object comprises a plurality of virtual objects that are capable of being individually manipulated.

14. The method of claim 8 , wherein the detected gesture includes temporal information associated with a speed at which the user manipulated the virtual authentication object.

15. A system for authorizing an electronic transaction in an augmented reality environment, the system comprising:
an augmented reality user device comprising:
a display configured to overlay virtual objects onto a field of view of a user in real-time; and
one or more processors coupled to the display;
the one or more processors operable to:
receive a request to verify information, the request comprising a virtual authentication object, the virtual authentication object comprising a virtual representation of an object capable of being manipulated by the user in a particular sequence to enter a first authentication code;
display the virtual authentication object to the user via the display;
detect one or more gestures performed by the user on the displayed virtual authentication object, the one or more gestures manipulating the virtual authentication object to enter the first authentication code; and

an authentication server communicatively coupled to the augmented reality user device and comprising:
a memory operable to store a database, the database comprising one or more records associated with the second authentication code; and
one or more processors coupled to the memory, the one or more processors operable to:
receive the detected one or more gestures from the augmented reality user device;
determine the first authentication code using the virtual authentication object and the detected one or more gestures; and
compare the determined first authentication code with the second authentication code to verify the information.

16. The system of claim 15 , wherein the one or more processors of the augmented reality user device are further operable to send the virtual authentication object to the authentication server.

17. The system of claim 15 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the information from the authentication server.

18. The system of claim 15 , wherein the one or more processors of the augmented reality user device are operable to receive the request to verify the information.

19. Th

Assignees

• Bank Of America

Inventors

• Adams Amanda J
• Johansen Joseph N
• Ogrinz Michael
• Dolan Heather
• Jacobson William P
• Kurian Manu J

Classifications

• G06Q20/401

  Transaction verification · CPC title

• G06Q20/321

  using wearable devices · CPC title

• H04W12/06

  Authentication · CPC title

• G06F3/017

  Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883) · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title