Authenticating a transaction

Patent metadata

Field	Value
Publication number	US-12481992-B2
Application number	US-202318107433-A
Country	US
Kind code	B2
Filing date	Feb 8, 2023
Priority date	Feb 21, 2022
Publication date	Nov 25, 2025
Grant date	Nov 25, 2025

Abstract

The invention relates to a transaction verification system for authenticating a transaction performed at a transaction system. The transaction system provides a visual presentation of the transaction, comprising uncoded data and machine-extractable coded data. The transaction system also provides verification data for verifying one or more authenticity features of at least part of the uncoded data. The verification data can be obtained based on the coded data. A transaction verification device obtains, using an image interface, one or more camera images of the visual presentation of the transaction, and these camera images are then used to verify the one or more authenticity features based on the verification data.

First claim

The invention claimed is:

1 . A transaction verification device for authenticating a transaction, wherein the transaction is performed at a transaction system, wherein the transaction verification device comprises:
a camera interface for obtaining camera images; a processor subsystem configured to: using the camera interface, obtain one or more camera images of a visual presentation of the transaction, wherein the visual presentation comprises uncoded data and machine-extractable coded data, wherein the uncoded data visually presents information of the transaction to a user that is interpretable by the user, and wherein the coded data is not for human interpretation and is a machine-extractable QR code; extract the coded data from the one or more camera images; based on the coded data, obtain verification data from the transaction system for verifying one or more authenticity features of at least part of the uncoded data, wherein at least part of the verification data is cryptographically protected and is included in the coded data; verify the one or more authenticity features based on the verification data by obtaining web address data from the verification data and verifying that a browser window visible in the one or more camera images shows a web address that matches the web address data; provide a verification result based on the verifying.

2 . The transaction verification device of claim 1 , wherein the transaction is visually presented on a screen of a personal computer used to perform the transaction.

3 . The transaction verification device of claim 1 , wherein the transaction is a login, a payment transaction, a purchase, or an access request.

4 . The transaction verification device of claim 1 , wherein the processor subsystem is further configured to verify an authentication feature by:
obtaining transaction data from the verification data and verifying that transaction details are visible in the one or more camera images that match the transaction data, and/or obtaining website display data from the verification data and verifying that a web page portion is visible in the one or more camera images that visually matches the webpage display data.

5 . The transaction verification device of claim 1 , wherein the processor subsystem is configured to obtain position data from the verification data, wherein the position data indicates an expected position of an authenticity feature in the visual presentation of the transaction; and to use the position data to verify the authenticity feature.

6 . The transaction verification device of claim 5 , wherein the processor subsystem is configured to show, on a display of the transaction verification device, a camera image being taken of the visual presentation of the transaction, and to indicate the expected position of the authenticity feature in the shown camera image.

7 . The transaction verification device of claim 1 , wherein the processor subsystem is configured to use the same camera image both to extract the coded data and to verify the one or more authenticity features; or wherein the processor subsystem is configured to verify that the one or more camera images used to verify the one or more authenticity features, show the same coded data as used to obtain the verification data.

8 . The transaction verification device of claim 1 , wherein the coded data comprises a transaction identifier, and wherein the processor subsystem is configured to obtain at least part of the verification data from the transaction system, optionally via an authentication system, by requesting said data using the transaction identifier.

9 . The transaction verification device of claim 1 , wherein the transaction verification device is further configured to obtain a confirmation of the transaction via a user interface.

10 . The transaction verification device of claim 1 , wherein the transaction verification device is a mobile device.

11 . The transaction verification device of claim 5 , wherein the position data indicates a position and/or direction of the authenticity feature relative to the coded data in the visual presentation of the transaction.

12 . The transaction verification device of claim 1 , wherein the at least part of the verification data is encrypted or digitally signed.

13 . An authentication system for authenticating a transaction, wherein the transaction is performed at a transaction system, wherein the authentication system comprises:
a communication interface configured for communication with a transaction verification device; a processor subsystem configured to: obtain, from the transaction verification device, one or more camera images of a visual presentation of the transaction, wherein the visual presentation comprises uncoded data and machine-extractable coded data, wherein the uncoded data visually presents information of the transaction to a user that is interpretable by the user, and wherein the coded data is not for human interpretation and is a machine-extractable QR code; based on the coded data, obtain verification data from the transaction system for verifying one or more authenticity features of at least part of the uncoded data, wherein at least part of the verification data is cryptographically protected and is included in the coded data; verify the one or more authenticity features based on the verification data by obtaining web address data from the verification data and verifying that a browser window visible in the one or more camera images shows a web address that matches the web address data; provide a verification result based on the verifying.

14 . The authentication system of claim 13 , wherein the at least part of the verification data is encrypted or digitally signed.

15 . A transaction verification system for authenticating a transaction,
wherein the transaction is performed at a transaction system, wherein the transaction system is configured to provide a visual presentation of the transaction, wherein the visual presentation comprises uncoded data and machine-extractable coded data, wherein the uncoded data visually presents information of the transaction to a user that is interpretable by the user, and wherein the coded data is not for human interpretation and is a machine-extractable QR code; and to provide verification data for verifying one or more authenticity features of at least part of the uncoded data; wherein the transaction verification system comprises a transaction verification device configured to obtain, using an image interface, one or more camera images of the visual presentation of the transaction; and wherein the transaction verification device, or an authentication system to which the transaction verification device is configured to provide the one or more camera images, is configured to: based on the coded data, obtain the verification data from the transaction system, wherein at least part of the verification data is cryptographically protected and is included in the coded data; verify the one or more authenticity features based on the verification data by obtaining web address data from the verification data and verifying that a browser window visible in the one or more camera images shows a web address that matches the web address data; and provide a verification result based on the verifying.

16 . A computer-implemented method of authenticating a transaction, wherein the transaction is performed at a transaction system, wherein the method comprises:
obtaining, from a transaction verification device, one or more camera images of a visual presentati

Assignees

• Koninklijke Kpn Nv

Inventors

• Appelboom Hubertus Mattheus

Classifications

• G06Q20/3276

  using a pictured code, e.g. barcode or QR-code, being read by the M-device · CPC title

• G06Q20/401 Primary

  Transaction verification · CPC title