Multi-factor user authentication

Patent metadata

Field	Value
Publication number	US-12093945-B2
Application number	US-202117554348-A
Country	US
Kind code	B2
Filing date	Dec 17, 2021
Priority date	Dec 17, 2021
Publication date	Sep 17, 2024
Grant date	Sep 17, 2024

Abstract

A system for multi-factor user authentication for payment card-based transactions are described. The multifactor authentication may be based on a one-time passcode/password (OTP) as sent by an authentication server. A user device may, based on receiving the OTP, send an authentication code. The authentication code may be generated/determined based on the OTP. The authentication code may be augmented biometric identifier (ID) of a user associated with the user device. The authentication server may validate a transaction based on the authentication code.

First claim

The invention claimed is:

1. An apparatus comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
receive an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determine, based on the user identifier, a user device associated with the user;
send, to the user device, a one-time passcode (OTP);
send, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and

the character mapping is periodically refreshed;

after sending the OTP, receive an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generate, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, send an authorization response indicating whether the authentication request is approved or declined.

2. The apparatus of claim 1 , wherein the authorization response indicates that the authentication request is approved based on the validation code matching the authentication code.

3. The apparatus of claim 1 , wherein the authorization response indicates that the authentication request is declined based on the validation code not matching the authentication code.

4. The apparatus of claim 1 , wherein the instructions, when executed by the one or more processors, cause the apparatus to send the OTP via at least one of:
a short messaging service (SMS) message; or
an electronic mail.

5. The apparatus of claim 1 , wherein the user device is a mobile communication device.

6. The apparatus of claim 1 , wherein the instructions, when executed by the one or more processors, cause the apparatus to:
send the OTP via a first communication channel, and
receive the authentication code via a second communication channel.

7. A method for multi-factor user authentication, the method comprising:
receiving an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determining, based on the user identifier, a user device associated with the user;
sending, to the user device, a one-time passcode (OTP);
sending, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and

the character mapping is periodically refreshed;

after sending the OTP, receiving an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generating, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, sending an authorization response indicating whether the authentication request is approved or declined.

8. The method of claim 7 , wherein the authorization response indicates that the authentication request is approved based on the validation code matching the authentication code.

9. The method of claim 7 , wherein the authorization response indicates that the authentication request is declined based on the validation code not matching the authentication code.

10. A non-transitory computer readable medium storing instructions that, when executed, cause an authentication platform to:
receive an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determine, based on the user identifier, a user device associated with the user;
send, to the user device, a one-time passcode (OTP);
send, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and

the character mapping is periodically refreshed;

after sending the OTP, receive an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generate, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, send an authorization response indicating whether the authentication request is approved or declined.

Assignees

• Bank Of America

Inventors

• Ridzuan Bin Ma Arof Ra Uf
• Kulkarni Harish Tammaji
• Choyal Kumudini
• Nguyen Nhat Minh
• Surendran Surendran

Classifications

• G06Q20/382 Primary

  insuring higher security of transaction · CPC title

• G06Q20/407

  Cancellation of a transaction · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/34

  using cards, e.g. integrated circuit [IC] cards or magnetic cards · CPC title