Authentication and personal data sharing for partner services using out-of-band optical mark recognition

Patent metadata

Field	Value
Publication number	US-12499201-B2
Application number	US-202318139568-A
Country	US
Kind code	B2
Filing date	Apr 26, 2023
Priority date	Sep 30, 2016
Publication date	Dec 16, 2025
Grant date	Dec 16, 2025

Abstract

Disclosed are methods and apparatuses for creating a verified mutually authenticated transaction between a service provider and an on-line identity for a physical client person. A dynamic optical mark may be displayed on a device screen where the physical client person is using a web service. The dynamic optical mark may be recognized via scanning the dynamic optical mark by a personal mobile device equipped with a camera. The verified mutually authenticated transaction between the service provider and the on-line identity for the physical client person may be used for sharing personal data of the physical client person by using out-of-band optical mark recognition of the dynamic optical mark. The verified mutually authenticated transaction may be initiated with a time-limited one-time password comprising a sequence of numbers encoded in the dynamic optical mark.

First claim

What is claimed is:

1 . A device comprising:
a processor; a non-transitory memory coupled to the processor and storing an application, the application when executed by the processor causes the processor to perform the following:
generating an optical mark, including at least two concentric circles, wherein a portion of the optical mark within the at least two concentric circles, comprises a plurality of segments each comprising one color of a plurality of different colors;
displaying the optical mark on a device screen of the device;
receiving an authentication from a mobile device, wherein the authentication is based on the mobile device scanning the optical mark; and
displaying on the device screen a visual indication of the authorization of a client to access the web service of the web service provider.

2 . The device of claim 1 wherein the optical mark comprises a one-time password.

3 . The device of claim 1 wherein the application is further configured for:
orienting the optical mark upon detection, by positioning a registration mark relative to the portion of the optical mark; and
encoding the portion based on the plurality of different colors including associating each color with an optical code comprising a number.

4 . The device of claim 1 wherein the application is further configured for: calibrating the optical mark by comparing the plurality of different colors within a calibration region within the at least two concentric circles to an encoding palette.

5 . The device of claim 1 wherein the optical mark is recognized when it is displayed on a device screen of a mobile device.

6 . The device of claim 5 wherein recognizing the optical mark comprises recognizing the optical mark over an air-gapped channel between the mobile device and the device screen of the device.

Assignees

• Winkk Inc

Inventors

• Budko Renata
• Feld Dmitry
• Kalinin Konstantin
• Petrushan Mikhail

Classifications

• H04W12/06

  Authentication · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/3825

  Use of electronic signatures · CPC title