Systems and methods for user identification and/or retrieval of user-related data at a local auxiliary system

Patent metadata

Field	Value
Publication number	US-12301722-B2
Application number	US-202217810560-A
Country	US
Kind code	B2
Filing date	Jul 1, 2022
Priority date	Jul 1, 2022
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

Systems and methods described herein may generate a temporary location-associated cryptographic identification code (which can be used to uniquely identify the user) based on detection of the user at the associated location. As an example, such systems and methods allow for the user to be identified (e.g., as part of an authentication process) when the user visits a location without having to share personally identifiable information with any other users or computing systems at the location. Additionally, or alternatively, such systems and methods enable the practical use of shorter cryptographic identification codes as a primary identifier (or sole identifier) at the location for retrieving data related to the user (e.g., by avoiding or mitigating collision or security risks typically associated with short identifiers).

First claim

What is claimed is:

1. A system for using a short cryptographic identification code for user-related data retrieval by a local system without the local system using personally identifiable information of the related user, the system comprising:
one or more processors and non-transitory computer-readable media comprising instructions that, when executed by the one or more processors, cause operations comprising:
receiving, from a mobile device, location information indicating a user location of a user of the mobile device;
in response to the user location matching a location of a local auxiliary device that is local to the mobile device, generating a temporary hash identification code in association with the user and the local auxiliary device such that:
(i) the temporary hash identification code is valid for authenticating the user via the local auxiliary device during a given time period without the local auxiliary device obtaining personally identifiable information of the user;
(ii) the temporary hash identification code is invalid for authenticating the user via one or more other auxiliary devices at one or more other locations without the one or more other auxiliary devices obtaining any personally identifiable information of the user; and
(iii) the temporary hash identification code is generated via a hash function based on a user identifier associated with the user and a current time;

sending the temporary hash identification code to the mobile device as an identification code for the user for authenticating at the local auxiliary device;
in response to sending the temporary hash identification code to the mobile device, receiving, from the local auxiliary device, a data access request, generated by the local auxiliary device, for access to data related to the user, the data access request comprising the temporary hash identification code received from the mobile device and an auxiliary identifier associated with the local auxiliary device; and
providing the requested access to the local auxiliary device by authenticating the user based on (i) the temporary hash identification code and the auxiliary identifier in the data access request and (ii) an identifier of a token, obtained via a chip reader of the local auxiliary device, presented by the user matching the user identifier.

2. The system of claim 1 , wherein authenticating the user further comprises:
obtaining, via a camera at the location of the local auxiliary device, a first image depicting the user at the location of the local auxiliary device;
determining, via a machine learning model, that a second image matches the first image, wherein the data related to the user comprises the second image; and
authenticating the user based on determining that the second image matches the first image.

3. The system of claim 1 , wherein authenticating the user further comprises the local auxiliary device authenticating the user.

4. The system of claim 1 , wherein authenticating a user further comprises:
retrieving appointment information associated with the user and the location; and
determining, based on the appointment information, that the user is expected to be at the location at the current time.

5. A method comprising:
receiving, from a mobile device, location information indicating a user location of a user of the mobile device;
in response to the user location matching a location of a local auxiliary device local to the mobile device, storing a temporary hash identification code in association with the user and the local auxiliary device, wherein (i) the user location matches the location of the local auxiliary device, (ii) the temporary hash identification code is valid for authenticating the user via the local auxiliary device during a given time period without the local auxiliary device obtaining personally identifiable information of the user, and (iii) the temporary hash identification code is invalid for authenticating the user via one or more other auxiliary devices at one or more other locations without the one or more other auxiliary devices obtaining any personally identifiable information of the user;
after storing the temporary hash identification code, receiving, from the local auxiliary device, a data access request, generated by the local auxiliary device, for access to data related to the user, the data access request comprising the temporary hash identification code received from the mobile device and an auxiliary identifier associated with the local auxiliary device; and
in response to receiving the data access request, providing the requested access by authenticating the user based on (i) an identifier of a token, obtained via a reader of the local auxiliary device, presented by the user corresponding to the temporary hash identification code and (ii) identification of the user using the temporary hash identification code and the auxiliary identifier.

6. The method of claim 5 , wherein authenticating the user further comprises:
receiving, via one or more sensors at the local auxiliary device, an identity token presented by the user;
performing optical character recognition on a scanned image of the identity token to obtain token text;
determining that a portion of the token text corresponds to the temporary hash identification code in the data access request; and
authenticating the user based on (i) the determination that the portion of the token text corresponds to the temporary hash identification code and (ii) identification of the user using the temporary hash identification code and the auxiliary identifier.

7. The method of claim 5 , wherein authenticating the user further comprises the local auxiliary device authenticating the user.

8. The method of claim 5 , wherein providing the requested access comprises:
using the temporary hash identification code as a parameter for retrieving the data related to the user by identifying the user using the temporary hash identification code and the auxiliary identifier; and
sending the data related to the user to the local auxiliary device.

9. The method of claim 5 , wherein authenticating the user further comprises:
retrieving appointment information associated with the user and the location of the local auxiliary device;
determining, based on the appointment information, that the user is expected to be at the location of the local auxiliary device at a time associated with the temporary hash identification code; and
authenticating the user based on determining that the user is expected to be at the location of the local auxiliary device.

10. The method of claim 5 , wherein the token is a digital token.

11. The method of claim 5 , wherein the token is a physical token.

12. The method of claim 10 , wherein the temporary hash identification code is generated via a hash function based on a user identifier associated with the user and a current time.

13. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause operations comprising:
receiving, via a user device, location information indicating a user location of a user of the user device;
storing, based on the user location matching a location of an auxiliary device, a temporary cryptographic identification code in association with the user and the auxiliary device, wherein (i) the temporary cryptographic identification code is valid for authenticating the user via the auxiliary device during a given time period without the auxiliary device obtaining personally identifiable information of the user and (ii) the temporary cryptographic identification code is invalid for authenticating the u

Assignees

• Capital One Services Llc

Inventors

• Farhady Ghalaty Nahid
• Adcock Lee
• Polk Benjamin

Classifications

• G06Q10/1093 Primary

  Calendar-based scheduling for persons or groups · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/3213

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title