Computer-based systems involving enhanced one-time passcode (OTP) messaging and methods of use thereof

Patent metadata

Field	Value
Publication number	US-12328310-B2
Application number	US-202318502831-A
Country	US
Kind code	B2
Filing date	Nov 6, 2023
Priority date	Jan 5, 2021
Publication date	Jun 10, 2025
Grant date	Jun 10, 2025

Abstract

Systems and methods for enhanced OTP messaging, comprising: receiving a request from an application executing on a computing device of a user; generating the supplemental information based on the request; segmenting the supplemental information into a first part of the supplemental information and a second part of the supplemental information; transmitting the first part of the supplemental information to the computing device of the user via a first communication channel to another app executing on the computing device of the user; instructing the another app to allow the user to utilize one or more graphical user interface (GUI) elements of a GUI of the another app to transfer the first part of the supplemental information to the app; and transmitting the second part of the supplemental information to the computing device of the user via a second communication channel so as to provide the supplemental information to the app.

First claim

The invention claimed is:

1. A method comprising:
receiving, by a processor, an authentication request from a computing device of a user to authenticate user access to at least one resource;
generating, by the processor, an authentication code based on the authentication request;
wherein the authentication code comprises first authentication data and second authentication data;

transmitting, by the processor, the first authentication data via a first communication channel to the computing device;
transmitting, by the processor, the second authentication data via a second communication channel to the computing device;
wherein the first communication channel and the second communication channel are distinct;

receiving, by the processor, at least one authentication message from the computing device, wherein the at least one authentication message comprises a user-provided authentication code;
determining, by the processor, that the user-provided authentication code matches the authentication code; and
instructing, by the processor, the computing device to authenticate the user so as to enable the user access to the at least one resource based on the user-provided authentication code matching the authentication code.

2. The method of claim 1 , wherein the authentication code includes a one-time passcode (OTP).

3. The method of claim 2 , wherein the first authentication data comprises a first set of characters of the OTP, and the second authentication data comprises a second set of characters of the OTP, and wherein the first set of characters and the second set of characters together form the authentication code.

4. The method of claim 1 , wherein the generating the authentication code comprises:
anonymizing, by the processor, the first authentication data into unreadable format.

5. The method of claim 1 , wherein the authentication code is configured to expire upon a predetermined interval of time elapsing.

6. The method of claim 1 , wherein the first authentication data comprises one or more of:
an image,
a pass phrase,
a tone,
a displaying color,
a displaying motif, or
a displaying floating icon.

7. The method of claim 1 , further comprising transferring the first authentication data comprising: populating one or more graphical user interface (GUI) elements associated with the first communication channel with the authentication code to enable the user to operate one or more functionalities of the at least one resource.

8. The method of claim 1 , wherein the authentication code is displayed at the computing device as anonymized data, the anonymized data comprising one or more of:
a string comprising one or more of randomized letters, numbers, and symbols;
an image; and
text in a language foreign to the user,
the authentication code not readable for the user and provided to the first communication channel only upon transferring to the second communication channel.

9. The method of claim 1 , wherein a message comprising at least part of the authentication code is customized for being displayed differently via one or more of:
a preview badge graphical user interface (GUI) of the second communication channel,
a push notification GUI of the second communication channel,
a full-blown GUI of the second communication channel,
information of the computing device, and
information of an operating system of the computing device.

10. The method of claim 1 , wherein content of a message comprising at least part of the authentication code is customized based on one or more of:
demographic data of the user;
historical behavior data of the user;
demographic data of a group of users; and
historical behavior data of the group of users.

11. A system comprising:
at least one processor in communication with at least one non-transitory computer-readable medium having software instructions stored thereon, wherein, upon execution of the software instructions, the at least one processor is configured to:
receive an authentication request from a computing device of a user to authenticate user access to at least one resource;
generate an authentication code based on the authentication request;
wherein the authentication code comprises first authentication data and second authentication data;

transmit the first authentication data via a first communication channel to the computing device;
transmit the second authentication data via a second communication channel to the computing device;
wherein the first communication channel and the second communication channel are distinct;

receive at least one authentication message from the computing device, wherein the at least one authentication message comprises a user-provided authentication code;
determine that the user-provided authentication code matches the authentication code; and
instruct the computing device to authenticate the user so as to enable the user access to the at least one resource based on the user-provided authentication code matching the authentication code.

12. The system of claim 11 , wherein the authentication code includes a one-time passcode (OTP).

13. The system of claim 12 , wherein the first authentication data comprises a first set of characters of the OTP, and the second authentication data comprises a second set of characters of the OTP, and wherein the first set of characters and the second set of characters together form the authentication code.

14. The system of claim 11 , wherein the generating the authentication code comprises:
anonymizing the first authentication data into unreadable format.

15. The system of claim 11 , wherein the authentication code is configured to expire upon a predetermined interval of time elapsing.

16. The system of claim 11 , wherein the first authentication data comprises one or more of:
an image,
a pass phrase,
a tone,
a displaying color,
a displaying motif, or
a displaying floating icon.

17. The system of claim 11 , wherein, upon execution of the software instructions, the at least one processor is further configured to transfer the first authentication data comprising: populating one or more graphical user interface (GUI) elements associated with the first communication channel with the authentication code to enable the user to operate one or more functionalities of the at least one resource.

18. The system of claim 11 , wherein the authentication code is displayed at the computing device as anonymized data, the anonymized data comprising one or more of:
a string comprising one or more of randomized letters, numbers, and symbols;
an image; and
text in a language foreign to the user,
the authentication code not readable for the user and provided to the first communication channel only upon transferring to the second communication channel.

19. The system of claim 11 , wherein a message comprising at least part of the authentication code is customized for being displayed differently via one or more of:
a preview badge graphical user interface (GUI) of the second communication channel,
a push notification GUI of the second communication channel,
a full-blown GUI of the second communication channel,
information of the computing device, and
information of an operating system of the computing device.

20. The system of claim 11 , wherein content of a message comprising at least part of the authentication code is customized based on one or more of:
demographic data of the user;
historical behavior data of the user;
demographic data of a group of us

Assignees

• Capital One Services Llc

Inventors

• Jarvis Daniel Alan
• Whitmore Jon
• Zearfoss Patrick

Classifications

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• G06F9/451

  Execution arrangements for user interfaces · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title