Messaging omni-channel authentication

Patent metadata

Field	Value
Publication number	US-12155610-B2
Application number	US-202217661610-A
Country	US
Kind code	B2
Filing date	May 2, 2022
Priority date	May 2, 2022
Publication date	Nov 26, 2024
Grant date	Nov 26, 2024

Abstract

Techniques are disclosed that relate to authenticating users across different messaging channels. A computer system may implement a messaging platform that enables a messaging session to be established between an agent and a user that uses any of a plurality of messaging channels to communicate with the agent during the messaging session. The computer system may provide a configurable authorization request component that enables the agent to authenticate the user independent of a messaging channel used by the user. Based on receiving an indication that the configurable authorization request component has been selected by the agent via an interface displayed to the agent for communicating with the user, the computer system may communicate with a channel system associated with the messaging channel of the user to authenticate the user.

First claim

What is claimed is:

1. A method, comprising:
implementing, by a computer system, a messaging platform that enables a messaging session to be established between an agent and a user that uses any of a plurality of messaging channels to communicate with the agent during the messaging session;
causing, by the computer system, an agent interface to be displayed to the agent that includes a configurable authorization request component that enables the agent to authenticate the user as part of the messaging session independent of a messaging channel used by the user;
based on receiving an indication that the configurable authorization request component has been selected by the agent via the agent interface that is displayed to the agent for communicating with the user, the computer system communicating with a channel system associated with the messaging channel to route a device of the user to an endpoint authentication system to authenticate the user;
receiving, by the computer system from the channel system, a response generated based on an authentication of the user at the endpoint authentication system; and
causing, by the computer system, the agent interface to present, to the agent, an indication of whether the user authenticated.

2. The method of claim 1 , further comprising:
receiving, by the computer system, configuration information defining a configuration for the configurable authorization request component, wherein the configuration information identifies a post-processing routine provided by a tenant that is hosted by the computer system and associated with the agent; and
subsequent to receiving the response, the computer system executing the post-processing routine to process the response.

3. The method of claim 2 , wherein the post-processing routine is executable to verify that the user authenticated as a user linked to the messaging session and not a different user.

4. The method of claim 2 , further comprising:
converting, by the computer system, at least a portion of the response from a first format to a second format that can be processed by the post-processing routine.

5. The method of claim 1 , further comprising:
receiving, by the computer system, configuration information defining a configuration for the configurable authorization request component, wherein the configuration information specifies the endpoint authentication system where authentication is to occur.

6. The method of claim 1 , further comprising:
causing, by the computer system, a set of records to be presented to the agent, wherein a first one of the set of records indicates a verification level of the user and an expiration date of the verification level.

7. The method of claim 6 , wherein a second one of the set of records indicates:
whether the user has accepted an authentication request communicated to the device of the user, wherein the authentication request is communicated to the device of the user in response to receiving the indication that the configurable authorization request component has been selected by the agent; and
an expiration date of the authentication request.

8. The method of claim 6 , wherein a second one of the set of records stores authentication credentials that include an authentication token having an associated expiration date.

9. The method of claim 1 , wherein the communicating with the channel system includes:
generating, based on configuration information provided by a tenant when configuring the configurable authorization request component, a first native payload that can be understood by the channel system, wherein the first native payload is different than a second native payload generated for a different channel system; and
providing the first native payload to the channel system as an authentication request to authenticate the user.

10. The method of claim 1 , further comprising:
maintaining, by the computer system, a plurality of configurations for the configurable authorization request component that are defined by a respective plurality of tenants hosted by the computer system.

11. A non-transitory computer-readable medium having program instructions stored thereon that are executable by a computer system to cause the computer system to perform operations comprising:
implementing a messaging platform that enables a messaging session to be established between an agent and a user that uses any of a plurality of messaging channels to communicate with the agent during the messaging session;
causing an agent interface to be displayed to the agent that includes a configurable authorization request component that enables the agent to authenticate the user as part of the messaging session independent of a messaging channel used by the user;
based on receiving an indication that the configurable authorization request component has been selected by the agent via the agent interface that is displayed to the agent for communicating with the user, communicating with a channel system associated with the messaging channel to route a device of the user to an endpoint authentication system to authenticate the user;
receiving a response generated based on an authentication of the user at the endpoint authentication system; and
causing the agent interface to present an indication to the agent of whether the user authenticated.

12. The non-transitory computer-readable medium of claim 11 , wherein the communicating with the channel system includes:
sending, to the channel system, an authentication request specifying the endpoint authentication system identified by a tenant of the computer system when configuring the configurable authorization request component.

13. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise:
subsequent to receiving the response:
converting at least a portion of the response into a format that can be processed by a post-processing routine identified, by a tenant associated with the agent, when configuring the configurable authorization request component; and
executing the post-processing routine to process the portion of the response.

14. The non-transitory computer-readable medium of claim 11 , wherein the indication identifies a verification level of the user, wherein the verification level can be any of: unverified, verified by the channel system, and authenticated by the endpoint authentication system associated with the configurable authorization request component.

15. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise:
based on receiving an indication that the configurable authorization request component has been selected by the agent via the agent interface during another messaging session with a different user, sending an authentication request to a device of the different user, wherein selection of the authentication request is operable to cause the device of the different user to be routed to the computer system, and wherein the operations further comprise:
routing the device of the different user to the authentication endpoint system for authentication of the different user;
receiving an authentication code from the device of the different user; and
communicating with the endpoint authentication system to exchange the received authentication code for an authentication token.

16. A system, comprising:
at least one processor; and
memory having program instructions stored thereon that are executable by the at least one processor to cause the system to perform operations comprising:
implementing a messaging platform that enables

Assignees

• Salesforce Inc

Inventors

• Morales Jonathan Rico
• Kjellberg Orjan

Classifications

• H04L63/108 Primary

  when the policy decisions are valid for a limited amount of time · CPC title

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L51/046 Primary

  Interoperability with other network applications or services · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title