Virtual credential authentication based on browsing context

Patent metadata

Field	Value
Publication number	US-12513143-B2
Application number	US-202318327391-A
Country	US
Kind code	B2
Filing date	Jun 1, 2023
Priority date	Dec 31, 2020
Publication date	Dec 30, 2025
Grant date	Dec 30, 2025

Abstract

In some implementations, an authentication device may receive information related to website browsing activity at a client device. The information related to the website browsing activity may include information associated with a web address for a current website where information associated with a virtual credential was entered. The authentication device may identify one or more valid web addresses associated with the virtual credential, which may be valid only for an entity associated with the one or more valid web addresses. The authentication device may transmit, to the client device, information to indicate whether the website browsing activity is authenticated based on a comparison of the web address for the current website where the information associated with the virtual credential was entered and the one or more valid web addresses associated with the virtual credential.

First claim

What is claimed is:

1 . A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
detect, in real-time, website browsing activity that includes entering information associated with a virtual credential on a current website without interacting with a user interface element to submit the virtual credential for authentication,
wherein the information is entered prior to a user submitting a transaction via the website browsing activity, and
wherein the virtual credential is associated with a merchant;

determine a web address associated with the current website based on the website browsing activity;
transmit information identifying the web address associated with the current website to an authentication device;
receive, from the authentication device, information indicating whether the virtual credential is valid at the current website based on the web address for the current website and one or more valid web addresses associated with the virtual credential,
wherein the virtual credential is valid at the current website when the web address is one of the one or more valid web addresses that are associated with the merchant; and

proceed with the transaction by sending the virtual credential to the current website, based on the information indicating that the virtual credential is valid at the current website.

2 . The non-transitory computer-readable medium of claim 1 , wherein the website browsing activity includes entering the information associated with the virtual credential on the current website.

3 . The non-transitory computer-readable medium of claim 1 , wherein the virtual credential is one of multiple virtual card numbers linked to a primary account number.

4 . The non-transitory computer-readable medium of claim 1 , wherein the information received from the authentication device indicates one or more discrepancies between the web address for the current website and the one or more valid web addresses associated with the virtual credential.

5 . The non-transitory computer-readable medium of claim 1 , wherein the web address associated with the virtual credential includes an original web address for which the virtual credential was created and one or more valid aliases for the web address.

6 . The non-transitory computer-readable medium of claim 1 , wherein the website browsing activity includes one or more user interactions to enter the information associated with the virtual credential on the current website or to activate a browser extension to automatically populate a user interface on the current website with the information associated with the virtual credential.

7 . The non-transitory computer-readable medium of claim 1 , wherein the information identifying the web address is received in a message communicated from a browser extension installed in a web browser executing on a client device.

8 . A device, comprising:
a memory; and one or more processors, communicatively coupled to the memory, configured to:
detect, in real-time, website browsing activity that includes entering information associated with a virtual credential on a current website without interacting with a user interface element to submit the virtual credential for authentication,
wherein the information is entered prior to a user submitting a transaction via the website browsing activity, and
wherein the virtual credential is associated with a merchant;

determine a web address associated with the current website based on the website browsing activity;
transmit information identifying the web address associated with the current website to an authentication device;
receive, from the authentication device, information indicating whether the virtual credential is valid at the current website based on the web address for the current website and one or more valid web addresses associated with the virtual credential,
wherein the virtual credential is valid at the current website when the web address is one of the one or more valid web addresses that are associated with the merchant; and

proceed with the transaction by sending the virtual credential to the current website based on the information indicating that the virtual credential is valid at the current website.

9 . The device of claim 8 , wherein the web address is a uniform resource locator associated with the current website.

10 . The device of claim 8 , wherein the information transmitted indicates that the website browsing activity is not authenticated based on a comparison indicating that the web address for the current website does not match any of the one or more valid web addresses associated with the virtual credential.

11 . The device of claim 8 , wherein the website browsing activity includes one or more user interactions to enter the information associated with the virtual credential on the current website.

12 . The device of claim 8 , wherein the website browsing activity includes one or more user interactions to activate a browser extension to automatically populate a user interface on the current website with the information associated with the virtual credential.

13 . The device of claim 8 , wherein the information identifying the web address is received in a message communicated from a browser extension installed in a web browser executing on a client device.

14 . The device of claim 8 , wherein the virtual credential is one of multiple virtual card numbers linked to a primary account number.

15 . A method, comprising:
detecting, by a device and in real-time, website browsing activity that includes entering information associated with a virtual credential on a current website without interacting with a user interface element to submit the virtual credential for authentication,
wherein the information is entered prior to a user submitting a transaction via the website browsing activity, and
wherein the virtual credential is associated with a merchant;
determining, by the device, a web address associated with the current website based on the website browsing activity; transmitting, by the device, information identifying the web address associated with the current website to an authentication device; receiving, by the device and from an authentication device, information indicating whether the virtual credential is valid at the current website based on the web address for the current website and one or more valid web addresses associated with the virtual credential,
wherein the virtual credential is valid at the current website when the web address is one of the one or more valid web addresses that are associated with the merchant; and
proceeding, by the device, with the transaction by sending the virtual credential to the current website based on the information indicating that the virtual credential is valid at the current website.

16 . The method of claim 15 , further comprising:
transmitting, by the device, information identifying the web address associated with the current website to the authentication device.

17 . The method of claim 15 , wherein the virtual credential is one of multiple virtual card numbers linked to a credit card number.

18 . The method of claim 15 , wherein the web address includes one or more of a host name, a domain name, or a Uniform Resource Locator associated with the current website.

19 . The method of claim 15 , wherein the virtual credent

Assignees

• Capital One Services Llc

Inventors

• Gupta Varun
• Fenichel Allison
• Sneider Amanda

Classifications

• G06Q40/02

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• G06Q30/018

  Certifying business or products · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• G06Q20/351

  Virtual cards · CPC title