Systems and methods for conducting remote user authentication

Patent metadata

Field	Value
Publication number	US-12248935-B2
Application number	US-202318393763-A
Country	US
Kind code	B2
Filing date	Dec 22, 2023
Priority date	Oct 5, 2021
Publication date	Mar 11, 2025
Grant date	Mar 11, 2025

Abstract

Disclosed embodiments may include a system that may receive, from a user device associated with a user, authentication rule(s), each authentication rule associated with respective merchant(s) and comprising respective required authentication factor(s) for completing a transaction with the respective merchant(s). The system may identify a user has navigated to a merchant webpage and may determine at least one rule of the authentication rule(s) associated with the merchant. The system may identify first required authentication factor(s) corresponding to the at least one rule, and may cause the user device to display, via a GUI, the first required authentication factor(s). The system may receive, via the user device, authentication information associated with the user. The system may determine whether the authentication information satisfies the first required authentication factor(s). Responsive to making that determination, the system may enable the user to complete a transaction via the merchant webpage.

First claim

What is claimed is:

1. A system for user authentication comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
determine, via a web browser extension running on a first user device, that a first user has navigated to a webpage associated with a first merchant;
receive, via a graphical user interface (GUI) of the first user device, a request to use a virtual card number associated with the first merchant to complete a first transaction;
determine whether at least one rule of one or more authentication rules is associated with the first merchant, wherein the at least one rule corresponds to a required level of authentication based on a merchant type associated with the first merchant, and wherein the one or more authentication rules comprise one or more respective required authentication factors;
responsive to determining the at least one rule of the one or more authentication rules is associated with the first merchant, identify one or more first required authentication factors corresponding to the at least one rule, wherein the required level of authentication comprises one or more of a type and a total number of the one or more first required authentication factors, and wherein the type and the total number of the one or more first required authentication factors are stored along with the at least one rule;
receive, via the first user device, authentication information associated with the first user;
determine whether the authentication information satisfies the one or more first required authentication factors; and
responsive to determining the authentication information satisfies the one or more first required authentication factors:
direct the first user to the web browser extension to generate the virtual card number, wherein the web browser extension is external to the first merchant and generates the virtual card number;
modify the GUI of the first user device such that a previously greyed out user input object is enabled to receive user input; and
enable the first user to complete the first transaction by entering the generated virtual card number into the enabled user input object.

2. The system of claim 1 , wherein the instructions are further configured to cause the system to:
transmit a notification to a second user device associated with the first user, the notification providing the one or more first required authentication factors.

3. The system of claim 2 , wherein the first user device is a computer and the second user device is a mobile phone.

4. The system of claim 1 , wherein the one or more respective required authentication factors are customizable by the first user.

5. The system of claim 1 , wherein a total number of the one or more respective required authentication factors for completing the first transaction is based on a total dollar amount of the first transaction.

6. A system for user authentication comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
determine, via a web browser extension running on a first user device, that a first user has navigated to a webpage associated with a first merchant, wherein the web browser extension is external to the first merchant;
determine whether at least one rule of one or more authentication rules is associated with the first merchant, wherein the at least one rule corresponds to a required level of authentication based on a merchant type associated with the first merchant, and wherein the one or more authentication rules comprise one or more respective required authentication factors;
responsive to determining the at least one rule of the one or more authentication rules is associated with the first merchant,
identify one or more first required authentication factors corresponding to the at least one rule, wherein the required level of authentication comprises one or more of a type and a total number of the one or more first required authentication factors, and wherein the type and the total number of the one or more first required authentication factors are stored along with the at least one rule;
receive, via the first user device, authentication information associated with the first user;
determine whether the authentication information satisfies the one or more first required authentication factors; and
responsive to determining the authentication information satisfies the first required authentication factors:
modify a graphical user interface (GUI) of the first user device such that a previously greyed out user input object is enabled to receive user input;
direct the first user to the web browser extension to generate a first virtual card number, wherein the web browser extension generates the first virtual card number; and
enable the first user to complete a first transaction by entering the first virtual card number into the enabled user input object.

7. The system of claim 6 , wherein enabling the first user to complete the first transaction via the webpage comprises enabling the first user to generate a new virtual card number associated with the first merchant.

8. The system of claim 6 , wherein enabling the first user to complete the first transaction via the webpage comprises enabling the first user to utilize a virtual card number associated with the first merchant.

9. The system of claim 6 , wherein the instructions are further configured to cause the system to:
transmit a notification to a second user device associated with the first user, the notification providing the one or more first required authentication factors.

10. The system of claim 9 , wherein the first user device is a computer and the second user device is a mobile phone.

11. The system of claim 6 , wherein the one or more respective required authentication factors are customizable by the first user.

12. The system of claim 6 , wherein a total number of the one or more respective required authentication factors for completing the first transaction is based on a total dollar amount of the first transaction.

13. A system for user authentication comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
determine, via a web browser extension running on a first user device, that a first user has navigated to a webpage associated with a first merchant, wherein the web browser extension is external to the first merchant;
determine whether at least one rule of one or more stored authentication rules is associated with the first merchant, wherein the at least one rule corresponds to a required level of authentication based on a merchant type associated with the first merchant, and wherein the one or more stored authentication rules comprise one or more respective required authentication factors;
responsive to determining the at least one rule of the one or more stored authentication rules is associated with the first merchant, identify one or more first required authentication factors corresponding to the at least one rule;
receive, via the first user device, one or more first user inputs corresponding to the one or more first required authentication factors, wherein the required level of authentication comprises one or more of a type and a total number of the one or more first required authentication factors, and

Assignees

• Capital One Services Llc

Inventors

• Fletcher Abel

Classifications

• G06F21/35

  communicating wirelessly · CPC title

• G06Q20/351

  Virtual cards · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title

• G06Q20/401 Primary

  Transaction verification · CPC title