System and method for carrying out two factor authentication using augmented/virtual reality

Patent metadata

Field	Value
Publication number	US-11636476-B2
Application number	US-201816605431-A
Country	US
Kind code	B2
Filing date	Apr 18, 2018
Priority date	Apr 21, 2017
Publication date	Apr 25, 2023
Grant date	Apr 25, 2023

Abstract

There is provided a method and system for carrying out two factor authentication, which renders an augmented reality environment or a virtual reality environment at the user device to depict an authentication object, and when a user interaction with the authentication object is detected, an authentication code received from an issuer server is displayed at the user device.

First claim

What is claimed is:

1. A computer-implemented method for carrying out two factor authentication using augmented reality or virtual reality, the method comprising:
accessing, at a user device, at least one digital wallet stored on an application interface of a digital wallet provider on one or more servers of the digital wallet provider, wherein the one or more servers are coupled over one or more networks to the user device;
initiating, at the user device, a payment authorization request;
receiving, from an issuer server in response to the payment authorization request, a notification message to retrieve an authentication code generated at the issuer server;
rendering, at the one or more servers of the digital wallet provider, an augmented reality environment or a virtual reality environment on a display to depict an authentication object associated with the authentication code, wherein the augmented reality environment or the virtual reality environment is configured to be restricted within the application interface;
receiving, from the issuer server, the authentication code in the augmented reality environment or the virtual reality environment;
detecting, at the user device, a user interaction with the authentication object in the augmented reality environment or virtual reality environment; and
decoding, at the user device, in response to the detected user interaction, the authentication object to display the authentication code.

2. The method of claim 1 , further comprising:
rendering, at the user device, the authentication object for interaction with the user; and
deleting, at the user device, the authentication code.

3. The method of claim 1 , wherein the depicted authentication object is in a form predefined by the user.

4. The method of claim 1 , wherein the authentication code is a one-time password (OTP).

5. The method of claim 1 , wherein the augmented reality environment or the virtual reality environment is rendered a merchant application.

6. A user device for carrying out two factor authentication using augmented reality or virtual reality, the user device comprising one or more electronic processing devices that are configured to:
accessing, at a user device, at least one digital wallet stored on an application interface of a digital wallet provider on one or more servers of the digital wallet provider, wherein the one or more servers are coupled over one or more networks to the user device;
initiate, at the user device, a payment authorization request;
receive, from an issuer server in response to the payment authorization request, a notification message to retrieve an authentication code generated at the issuer server;
render, at the one or more servers of the digital wallet provider, an augmented reality environment or a virtual reality environment on a display to depict an authentication object associated with the authentication code, wherein the augmented reality environment or the virtual reality environment is configured to be restricted within the application interface;
receive, from the issuer server, the authentication code in the augmented reality environment or the virtual reality environment;
detect a user interaction with the authentication object; and
decode, in response to the detected user interaction, the authentication object to display the authentication code.

7. The user device of claim 6 , wherein the one or more electronic processing devices are further configured to:
render the authentication object for interaction with the user; and
delete the authentication code.

8. The user device of claim 6 , wherein the depicted authentication object is predefined by the user.

9. The user device of claim 6 , wherein the authentication code is a one-time password (OTP).

10. The user device of claim 6 , wherein the augmented reality environment or the virtual reality environment is rendered within a merchant application.

11. A non-transitory computer readable storage medium embodying thereon a program of computer readable instructions which, when executed by one or more processors of a user device in communication with an issuer server, cause the user device to:
accessing, at a user device, at least one digital wallet stored on an application interface of a digital wallet provider on one or more servers of the digital wallet provider, wherein the one or more servers are coupled over one or more networks to the user device;
initiate, at the user device, a payment authorization request;
receive, from an issuer server in response to the payment authorization request, a notification message to retrieve an authentication code generated at the issuer server;
render, at the one or more servers of the digital wallet provider, an augmented reality environment or a virtual reality environment on a display to depict an authentication object associated with the authentication code, wherein the augmented reality environment or the virtual reality environment is configured to be restricted within the application interface;
receive, from the issuer server, the authentication code in the augmented reality environment or the virtual reality environment;
detect a user interaction with the authentication object; and
decode, in response to the detected user interaction, the authentication object to display the authentication code.

12. The non-transitory computer readable storage medium of claim 11 , wherein the program of computer readable instructions, when executed by the one or more processors, further cause the user device to:
render the authentication object for interaction with the user; and
delete the authentication code.

13. The non-transitory computer readable storage medium of claim 11 , wherein the depicted authentication object is predefined by the user.

14. The non-transitory computer readable storage medium of claim 11 , wherein the authentication code is a one-time password (OTP).

15. The non-transitory computer readable storage medium of claim 11 , wherein the augmented reality environment or the virtual reality environment is rendered within a merchant application.

Assignees

• Mastercard Asia Pacific Pte Ltd

Inventors

• Maheshwari Rajat
• Miryala Sunitha
• YEN Philip Wei Ping

Classifications

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• G06Q20/40 Primary

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title