Systems and methods for verified communication between mobile applications

Patent metadata

Field	Value
Publication number	US-12323808-B2
Application number	US-202217664152-A
Country	US
Kind code	B2
Filing date	May 19, 2022
Priority date	May 19, 2022
Publication date	Jun 3, 2025
Grant date	Jun 3, 2025

Abstract

Systems and methods for using device data to validate a mobile user are disclosed. In accordance with aspects, a method may include receiving, at a backend processing infrastructure of a third party and from a backend processing infrastructure of a mobile application provider, a first copy of location information and an IP address, wherein the location information and the IP address are associated with a mobile device; receiving, at the backend processing infrastructure of the third party and from a mobile application provided by the third party, a second copy of the location information and the IP address, wherein the mobile application provided by the third party is executed on the mobile device; and verifying, by the backend processing infrastructure of the third party, that the first copy of the location information and the IP address matches the second copy of the location information and the IP address.

First claim

The invention claimed is:

1. A method, comprising:
receiving, at a backend processing infrastructure of a third party and from a backend processing infrastructure of a mobile application provider, a first copy of location information and an Internet Protocol (IP) address, wherein the location information and the IP address are associated with a mobile device, wherein the backend processing infrastructure of the mobile application provider is a micro application and is launched by a mobile application operating on the mobile device;
generating, by the backend processing infrastructure of the mobile application provider, an API call to an API gateway of the mobile application provider, the API call including a hash of a credential of the mobile device;
verifying, by the mobile application provider, the hash of the credential of the mobile device matches a stored hash and thereby determining the mobile device launched the micro application;
receiving, at the backend processing infrastructure of the third party and from the mobile application provided by the third party, a second copy of the location information and the IP address, wherein the mobile application provided by the third party is executed on the mobile device, wherein the first copy of the location information and the IP address, and the second copy of the location information and the IP address, are hashed; and
verifying, by the backend processing infrastructure of the third party, that the first copy of the location information and the IP address matches the second copy of the location information and the IP address; and
sending, by the backend processing infrastructure of the third party and to the backend processing infrastructure of the mobile application provider, a request for a redirect Uniform Resource Identifier (URI), wherein the redirect URI includes requested user data and an action identifier as parameters of the URI.

2. The method of claim 1 , comprising:
receiving, at the backend processing infrastructure of the third party, the requested user data and the action identifier.

3. The method of claim 2 , comprising:
validating, by the backend processing infrastructure of the third party, that the requested user data matches user data for completing an action associated with the action identifier.

4. The method of claim 3 , comprising:
sending, by the backend processing infrastructure of the third party and to the backend processing infrastructure of the mobile app provider, a request for the requested user data.

5. The method of claim 4 , comprising:
receiving, by the backend processing infrastructure of the third party and from the backend processing infrastructure of the mobile application provider, the requested data.

6. The method of claim 5 , comprising:
completing, by the backend processing infrastructure of the third party, the action using the requested data.

7. The method of claim 1 , wherein a salt value is hashed with the first copy of the location information and the IP address, and the salt value is hashed with the second copy of the location information and the IP address.

8. The method of claim 1 , comprising:
receiving, by the backend processing infrastructure of the third party and from a mobile application provided by the third party, a user-confirmation to share the requested data.

9. A non-transitory computer readable storage medium, including instructions stored thereon, which when read and executed by one or more computers cause the one or more computers to perform steps comprising:
receiving, at a backend processing infrastructure of a third party and from a backend processing infrastructure of a mobile application provider, a first copy of location information and an Internet Protocol (IP) address, wherein the location information and the IP address are associated with a mobile device, wherein the backend processing infrastructure of the mobile application provider is a micro application and is launched by a mobile application operating on the mobile device;
generating, by the backend processing infrastructure of the mobile application provider, an API call to an API gateway of the mobile application provider, the API call including a hash of a credential of the mobile device;
verifying, by the mobile application provider, the hash of the credential of the mobile device matches a stored hash and thereby determining the mobile device launched the micro application;
receiving, at the backend processing infrastructure of the third party and from the mobile application provided by the third party, a second copy of the location information and the IP address, wherein the mobile application provided by the third party is executed on the mobile device, wherein the first copy of the location information and the IP address, and the second copy of the location information and the IP address, are hashed;
verifying, by the backend processing infrastructure of the third party, that the first copy of the location information and the IP address matches the second copy of the location information and the IP address; and
sending, by the backend processing infrastructure of the third party and to the backend processing infrastructure of the mobile application provider, a request for a redirect Uniform Resource Identifier (URI), wherein the redirect URI includes requested user data and an action identifier as parameters of the URI.

10. The non-transitory computer readable storage medium of claim 9 , comprising:
receiving, at the backend processing infrastructure of the third party, the requested user data and the action identifier.

11. The non-transitory computer readable storage medium of claim 10 , comprising:
validating, by the backend processing infrastructure of the third party, that the requested user data matches user data for completing an action associated with the action identifier.

12. The non-transitory computer readable storage medium of claim 11 , comprising:
sending, by the backend processing infrastructure of the third party and to the backend processing infrastructure of the mobile app provider, a request for the requested user data.

13. The non-transitory computer readable storage medium of claim 12 , comprising:
receiving, by the backend processing infrastructure of the third party and from the backend processing infrastructure of the mobile application provider, the requested data.

14. The non-transitory computer readable storage medium of claim 13 , comprising:
completing, by the backend processing infrastructure of the third party, the action using the requested data.

15. The non-transitory computer readable storage medium of claim 9 , wherein a salt value is hashed with the first copy of the location information and the IP address, and the salt value is hashed with the second copy of the location information and the IP address.

16. A system comprising:
a backend processing infrastructure of a third party, the backend processing infrastructure being executed on a server comprising:
a memory storing executable instructions; and
a processor operatively coupled to the memory for executing the instructions to:
receive, from a backend processing infrastructure of a mobile application provider, a first copy of location information and an Internet Protocol (IP) address, wherein the location information and the IP address are associated with a mobile device, wherein the backend processing infrastructure of the mobile application provider is a micro application and is launched by a mobile application operating on the mobile device;
generate, by the backend processing infra

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Spector Howard
• Ouellette Scott H
• Carey Dave

Classifications

• H04L67/53

  using third party service providers · CPC title

• H04W8/08

  Mobility data transfer · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04W12/63 Primary

  Location-dependent; Proximity-dependent · CPC title