Authenticating online transactions using separate computing device

Patent metadata

Field	Value
Publication number	US-11410160-B2
Application number	US-201715802775-A
Country	US
Kind code	B2
Filing date	Nov 3, 2017
Priority date	Nov 4, 2016
Publication date	Aug 9, 2022
Grant date	Aug 9, 2022

Abstract

A method for authenticating an online transaction on a first computing device using a second computing device including detecting a request to process sensitive payment information input on the first computing device to complete a transaction, determining that a condition is present associated with the transaction, disabling a payment processing function of the website to prevent a payment from being processed and completed, generating a unique identifier to be displayed on the first computing device, wherein the user scans the unique identifier with a second computing device to initiate an authentication function, authenticating the user operating the first computing device, and enabling, by the processor, the payment processing function of the website to allow the payment to process.

First claim

The invention claimed is:

1. A method for authenticating an online transaction on a first computing device using a second computing device and a computing system configured to authenticate online transactions, the method comprising:
receiving, by a processor of the computing system, a purchase request from the first computing device over a network, the purchase request including product information of at least one product stored in a products database connected to the processor, and user information of a user stored in a customer authentication database connected to the processor of the computing system;
determining, by the processor of the computing system, that a condition associated with the purchase request for the at least one product to be purchased and requiring a validation of an identity of the user via the second computing device is present;
by the processor of the computing system, in response to the determining that the condition requiring the validation of an identity of the user via the second computing device is present:
preventing the purchase request from proceeding on the first computing device until the validation of the identity of the user via the second computing device is completed,
after the preventing of the purchase request from proceeding on the first computing device, generating a unique identifier encoded with the product information of the least one product, the unique identifier comprising computer executable code;
displaying the unique identifier on a display of the first computing device to prompt the user to scan the unique identifier with the second computing device in order to proceed with the purchase request;
in response to a scan of the computer executable code of the unique identifier by the second computing device:
acquiring, from the second computing device, location data indicative of a geographic location of the second computing device, and determining whether the second computing device is located within a predetermined proximity of the first computing device;
in response to a determination that the location data acquired from the second computing device indicates that the second computing device is located within a predetermined proximity of the first computing device, initiating, by the second computing device, a user validation process to obtain biometric validation data from the user, the biometric validation data being at least one of fingerprint, voice signature, and facial scan;
transmitting the biometric validation data obtained by the second computing device from the user during the user validation process to the processor of the computing system; and
validating the identity of the user via the processor of the computing system processing the biometric validation data transmitted to the computing system by the second computing device in response to the user scanning, using the second computing device, the unique identifier displayed on the display of the first computing device; and

in response to the validating of the identity of the user:
permitting, by the processor, the purchase request to proceed on the first computing device,
receiving, by the processor and over the network, validated user information and payment instrument information of the user from a payment accounts database connected to the processor; and
completing, by the processor and over the network, the purchase request on the first computing device using the product information and the payment instrument information.

2. The method of claim 1 , wherein the unique identifier is at least one of a QR code, a bar code, a photograph, and an encrypted token.

3. The method of claim 1 , wherein the condition is selected from a group consisting of: a price cap condition, a timing condition, and an age restriction condition.

4. The method of claim 1 , wherein the second computing device is a mobile device of the user.

5. A computing system for authenticating online transactions, the computing system comprising:
a processor;
a memory device coupled to the processor of the computing system; and
a non-transitory computer readable storage device coupled to the processor of the computing system, wherein the storage device contains program code executable by the processor of the computing system via the memory device to implement a method for authenticating an online transaction on a first computing device using a second computing device, the first computing device and the second computing device being separate from the computing system, the method comprising:
receiving, by the processor of the computing system, a purchase request from the first computing device over a network, the purchase request including product information of at least one product stored in a products database connected to the processor of the computing system, and user information of a user stored in a customer authentication database connected to the processor of the computing system;
determining, by the processor of the computing system, that a condition associated with the purchase request for the at least one product to be purchased and requiring a validation of an identity of the user via the second computing device is present;
by the processor of the computing system, in response to the determining that the condition requiring the validation of an identity of the user via the second computing device is present:
preventing the purchase request from proceeding on the first computing device until the validation of the identity of the user via the second computing device is completed, and
after the preventing of the purchase request from proceeding on the first computing device, generating a unique identifier encoded with the product information of the least one product, the unique identifier comprising computer executable code;
displaying the unique identifier on a display of the first computing device to prompt the user to scan the unique identifier with the second computing device in order to proceed with the purchase request;
in response to a scan of the computer executable code of the unique identifier by the second computing device:
acquiring, from the second computing device, location data indicative of a geographic location of the second computing device, and determining whether the second computing device is located within a predetermined proximity of the first computing device;
in response to a determination that the location data acquired from the second computing device indicates that the second computing device is located within a predetermined proximity of the first computing device, initiating, by the second computing device, a user validation process to obtain biometric validation data from the user, the biometric validation data being at least one of fingerprint, voice signature, and facial scan;
transmitting the biometric validation data obtained by the second computing device from the user during the user validation process to the processor of the computing system; and
validating the identity of the user via the processor of the computing system processing the biometric validation data transmitted to the computing system by the second computing device in response to the user scanning, using the second computing device, the unique identifier displayed on the display of the first computing device; and

in response to the validating of the identity of the user:
permitting, by the processor of the computing system, the purchase request to proceed on the first computing device,
receiving, by the processor of the computing system and over the network, validated user information and payment instrument information of the user from a payment accounts database connected to the processor of the computing system; and
completing, by the processor of the computing system and over the network, the purchas

Assignees

• Walmart Apollo Llc

Inventors

• Matthews Mark
• Eckert Daniel
• Nelms David Martin
• Mattingly Todd

Classifications

• G06V10/17

  using hand-held instruments · CPC title

• G06V40/10

  Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands · CPC title

• G06V30/2247

  Characters composed of bars, e.g. CMC-7 · CPC title

• G06V40/172

  Classification, e.g. identification · CPC title

• G06Q20/3274

  using a pictured code, e.g. barcode or QR-code, being displayed on the M-device · CPC title