User and entity authentication through an information storage and communication system

Patent metadata

Field	Value
Publication number	US-12073402-B2
Application number	US-202318369634-A
Country	US
Kind code	B2
Filing date	Sep 18, 2023
Priority date	Mar 29, 2013
Publication date	Aug 27, 2024
Grant date	Aug 27, 2024

Abstract

Systems and methods for authenticating parties and transactions are described herein. The systems and methods may be part of an information wallet system. The information wallet system or a separate authentication system in communication with the information wallet system may facilitate verification and/or authentication of the parties. In one embodiment, the authentication system includes an authentication server configured to receive an authentication request from a first party to authenticate a second party. The authentication server is further configured to transmit an information request the second party. The authentication server is configured to receive second party information and to configured to compare the second party information with a verified second party information. The authentication server is configured to transmit an authentication result to the first party device.

First claim

What is claimed is:

1. A non-transitory computer-readable medium having computer-executable instructions encoded thereon which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a first seller device, using a network interface in communication with the one or more processors, via a communication network, a first authentication request to authenticate information of a buyer for a first transaction, the first authentication request comprising a first seller device location and a first transaction value;
based on a comparison of the first transaction value to a lower level transaction threshold, and based on the first seller device location, determining that a lower level of authentication is required for the first transaction;
in response to determining that the lower level of authentication is required for the first transaction, transmitting, to a client application at a buyer device of the buyer, using the network interface, via the communication network, a first information request for a first set of one or more user inputs via a first user interface, the first set of one or more user inputs comprising at least an alphanumeric entry;
receiving, from the buyer device responsive to the first information request, using the network interface, via the communication network, an alphanumeric user input provided to the first user interface of the client application;
authenticating the alphanumeric user input from the buyer device by comparing the alphanumeric user input with information stored in an account of the buyer to verify the alphanumeric user input is associated with the buyer;
in response to authenticating the alphanumeric user input, transmitting, to the first seller device, using the network interface, via the communication network, a first authentication message comprising an indication the buyer is authenticated for the first transaction;
determining that a higher level of authentication is required for a second transaction; and
in response to determining that the higher level of authentication is required, transmitting, to the client application at the buyer device, using the network interface, via the communication network, a second information request for a second set of user inputs via a plurality of user interfaces, wherein the second set of user inputs comprises at least a biometric user input, each of the plurality of user interfaces accepting one of a second alphanumeric input or the biometric user input.

2. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform further operations comprising:
receiving, from a second seller device of the second seller, using the network interface, via the communication network, a second authentication request to authenticate information of the buyer for the second transaction, the second authentication request comprising a second transaction location and a second transaction value;
wherein determining that a higher level of authentication is required for the second transaction is based on the second transaction location and a comparison of the second transaction value to a higher level transaction threshold.

3. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform further operations comprising:
receiving, from the buyer device responsive to the second information request, using the network interface in communication, via the communication network, the second alphanumeric input and the biometric user input;
authenticating the second alphanumeric input and the biometric user input received from the client application at the buyer device by comparing the biometric user input and the second alphanumeric input with digitally signed biometric information and second information stored in the account of the buyer, respectively, to verify that the biometric user input and the second alphanumeric input are associated with the buyer; and
in response to authenticating the biometric user input and the second alphanumeric input, transmitting, to the second seller device, using the network interface, via the communication network, a second authentication message comprising an indication the buyer is authenticated for the second transaction.

4. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting, as the biometric user input, a picture taken by a camera.

5. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting fingerprint data as the biometric user input.

6. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting facial recognition data as the biometric user input.

7. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting a voice sample as the biometric user input.

8. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting, as the alphanumeric entry, a password or a personal identification number (PIN).

9. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting, as the alphanumeric entry, personal information of the buyer.

10. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising requesting a second alphanumeric entry as part of the second set of user inputs, wherein the second alphanumeric entry is selected from a group consisting of a password, a secret code, and a PIN.

11. The non-transitory computer-readable medium of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising authenticating the second alphanumeric user input and the biometric user input by determining that the second alphanumeric user input and the biometric user input match verified user inputs.

12. The non-transitory computer-readable medium of claim 1 , wherein the second authentication request identifies a good or service subject to the second transaction, wherein the second set of user inputs includes a verification of the good or service subject of the second transaction, and wherein the verification of the good or service of the second transaction is received, using the network interface, via the communication network, from the buyer device responsive to the second information request.

13. A computer-implemented method for authenticating, via an authentication server comprising one or more processors, electronic transactions involving seller dev

Assignees

• Wells Fargo Bank Na

Inventors

• Hecht Al

Classifications

• G06Q20/3674

  involving authentication · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/401

  Transaction verification · CPC title

• G06Q20/405

  Establishing or using transaction specific rules · CPC title

• G06Q20/4014 Primary

  Identity check for transactions · CPC title