System and method of notifying mobile devices to complete transactions

Patent metadata

Field	Value
Publication number	US-11832099-B2
Application number	US-202117490726-A
Country	US
Kind code	B2
Filing date	Sep 30, 2021
Priority date	Mar 3, 2010
Publication date	Nov 28, 2023
Grant date	Nov 28, 2023

Abstract

A method including registering an authority device for an account on an auth platform; receiving transaction request from an initiator to the auth platform; messaging the authority device with the transaction request; receiving an authority agent response from the authority device to the auth platform; if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

First claim

We claim:

1. A method of authenticating a web-based application, the method comprising:
registering a mobile communication device and at least one other communication device for an authentication account at a remote authentication platform; setting one or more authorization rules that identify the mobile communication device and the at least one other communication device for the authentication account;
at the remote authentication platform comprising an Internet-accessible server hosted on a distributed computing system:
receiving from a client, via a first communication channel, transaction data relating to an attempt by a user to access the web-based application via the client;
identifying the authentication account associated with the mobile communication device based on the transaction data;
based on the one or more authorization rules that indicate an order to select one or more of the mobile communication device and the at least one other communication device for authenticating using a second communication channel, selecting at least one device from the mobile communication device or the at least one other communication device and establishing the second communication channel with the at least one device for authenticating the client, the second communication channel being different from the first communication channel;
responsive to identifying the authentication account, transmitting to the mobile communication device, via the second communication channel, an authentication message;
receiving, via the second communication channel, a response to the authentication message from the mobile communication device; and
transmitting to the client, via the first communication channel, a confirmation or a denial of the attempt to access the web-based application based on the response to the authentication message from the client.

2. The method according to claim 1 , wherein the client comprises one of a client application, a client device, and a client website that communicates, via the first communication channel, with the Internet-accessible server of the remote authentication platform.

3. The method according to claim 1 , further comprising:
initiating a persistent connection of the second communication channel different from another persistent connection of the first communication channel between the remote authentication platform and the mobile communication device; and
messaging between the mobile communication device and the remote authentication platform using the persistent connection.

4. The method according to claim 1 , wherein the one or more authorization rules include priority of each of the mobile communication device and the at least one other communication device and
wherein the at least one device is a destination for the authentication message.

5. The method according to claim 1 , wherein the second communication channel is one of a short message system, an email, an instant message, an in-app notification system, a web based websocket, a publication-subscription channel, or a push notification system.

6. The method according to claim 1 , wherein the first communication channel and the second communication channel are different data channels.

7. The method of claim 1 , wherein the one or more authorization rules further indicate one or more of a timing of authentication messaging via the second communication channel or a threshold for a number of responses from one or more of the mobile communication device and the at least one other communication device for authenticating using the second communication channel.

8. A method of authenticating a digital transaction, the method comprising:
registering a mobile communication device and at least one other communication device for an authentication account at a remote authentication platform; setting one or more authorization rules that identify the mobile communication device and the at least one other communication device for the authentication account;
at the remote authentication platform comprising an Internet-accessible server hosted on a distributed computing system:
receiving, via a first communication channel, from a service provider, transaction data relating to an attempt by a user to perform the digital transaction with the service provider;
identifying the authentication account associated with the mobile communication device based on the transaction data;
based on the one or more authorization rules that indicate an order to select one or more of the mobile communication device and the at least one other communication device for authenticating using a second communication channel, selecting at least one device from the mobile communication device or the at least one other communication device and establishing the second communication channel with the at least one device for authenticating the mobile communication device, the second communication channel being different from the first communication channel;
responsive to identifying the authentication account, transmitting to the mobile communication device, via the second communication channel, an authentication message;
receiving, via the second communication channel, a response to the authentication message from the mobile communication device; and
transmitting, to the service provider, via the first communication channel, a confirmation of the digital transaction or a denial of the digital transaction based on the response to the authentication message from the mobile communication device.

9. The method according to claim 8 , further comprising:
initiating a persistent connection between the remote authentication platform and the mobile communication device; and
messaging between the mobile communication device and the remote authentication platform using the persistent connection.

10. The method according to claim 8 , wherein:
if the user of the mobile communication device provides a denial input denying the digital transaction, additionally receiving, at the remote authentication platform, a selection input of one of a plurality of available denial responses identifying a reason for the denial input.

11. The method according to claim 8 , wherein the digital transaction is initiated in an online environment over one or more communication networks.

12. The method according to claim 8 , wherein:
if the service provider denies the digital transaction based on the response to the authentication message, dynamically altering, by the remote authentication platform, authentication requirements for future digital transactions involving the authentication account.

13. The method according to claim 8 , wherein the second communication channel comprises a persistent connection provided via a push notification service associated with the mobile communication device.

14. The method according to claim 8 , wherein the transaction data comprises a request to access a digital account maintained by the service provider.

15. The method according to claim 8 , wherein the transaction data comprises a request to access a digital account through a website.

16. The method according to claim 8 , wherein the transaction data comprises a permission request to perform an action on a computer system.

17. The method according to claim 8 , wherein the authentication message comprises a size-limited message to the mobile communication device including a unique identifier of a full message that is larger than the size-limited message.

18. A remote authentication system comprising:
an Internet-accessible server hosted on a distributed

Assignees

• Cisco Tech Inc

Inventors

• Oberheide Jon
• Song Douglas
• Goodman Adam

Classifications

• H04W12/06 Primary

  Authentication · CPC title

• G06F21/305

  by remotely controlling device operation · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title