Methods and systems for validating mobile devices of customers via third parties

Patent metadata

Field	Value
Publication number	US-9888380-B2
Application number	US-201414528274-A
Country	US
Kind code	B2
Filing date	Oct 30, 2014
Priority date	Oct 30, 2014
Publication date	Feb 6, 2018
Grant date	Feb 6, 2018

Abstract

A method for authenticating a mobile device in real-time. The method includes detecting the mobile device, sending a text message containing a unique uniform resource locator (“URL”) to the mobile device, and detecting an access of the unique URL by the mobile device through a first communication path. In response to detecting the access of the unique URL, requesting and subsequently receiving, by the host system in real-time, a phone number and a subscriber identification ID associated with the mobile device through a second communication path distinct from the first communication path, and a device fingerprint of the mobile device through the first communication path. The method further includes initiating a risk analysis based on the phone number, the subscriber ID, and the device fingerprint and determining an authentication status of the mobile device based on the risk analysis.

First claim

What is claimed is:

1. A method for authenticating a mobile device in real-time prior to movement of any funds in an associated funds transfer, the method comprising:
detecting, by a host system, the mobile device in communication with the host system;
sending, by the host system, a text message comprising a unique uniform resource locator (“URL”) to the mobile device;
detecting, by the host system, an access of the unique URL by the mobile device through a first communication path;
requesting in real-time, by the host system, in response to detecting the access of the unique URL by the mobile device:
a phone number and a subscriber identification (“ID”) associated with the mobile device through a second communication path distinct from the first communication path, and
a device fingerprint of the mobile device through the first communication path to identify the mobile device;

receiving in real-time, by the host system, in response to requesting the phone number, the subscriber ID, and the device fingerprint by the host system:
the phone number and the subscriber ID through the second communication path, and
the device fingerprint through the first communication path;

initiating, by the host system, a risk analysis based on the phone number, the subscriber ID, and the device fingerprint;
comparing in real-time, by the host system, the phone number, the subscriber ID, and the device fingerprint with a stored phone number, a stored subscriber ID, and a stored device fingerprint, respectively, in response to initiating the risk analysis, wherein the stored device fingerprint is a previous device fingerprint obtained from a previous communication with the host system by the mobile device; and
determining, by the host system, an authentication status of the mobile device based on the risk analysis, wherein the authentication status comprises at least one of a verified or an unverified access.

2. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
sending, by the host system, the text message comprising the URL to the mobile device through the first communication path,
wherein the first communication path comprises a first communication channel between the mobile device and the host system through a cellular network, and
wherein the second communication path comprises a second communication channel between the host system and a third party through an internet protocol (“IP”) network.

3. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
sending, by the host system, user instructions to disable a WIFI connection prior to accessing the URL,
wherein the text message comprises the user instructions.

4. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
in response to detecting the access of the unique URL by the mobile device through the first communication path, transmitting, by the host system, a landing page to the mobile device in real-time through the first communication path,
wherein the landing page opens in a mobile browser of the mobile device.

5. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
requesting, by the host system, the phone number and the subscriber ID from a third party through the second communication path,
wherein the third party is distinct from the host system.

6. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
wherein at least one of the device fingerprint and the stored device fingerprint comprises at least one of a user location, device name, network name, capacity figure, available capacity figure, operating system name, operating system version, carrier identification, model identification, serial number, one or more mobile apps installed, contacts, cookies, flash objects, browser plugins, gyro status, Bluetooth adapter, and MAC address.

7. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
in response to the comparison, determining, by the host system in real-time, the authentication status is the verified access based on a match of at least the phone number and the subscriber ID with the stored phone number and the stored subscriber ID, respectively.

8. The method for authenticating the mobile device in real-time of claim 7 , further comprising:
based at least in part on the determined verified access, completing, by the host system, a funds transfer,
wherein the funds transfer comprises moving a monetary amount from one account to another account.

9. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
in response to the comparison, determining, by the host system in real-time, a mismatch of the device fingerprint and the stored device fingerprint;
in response to the mismatch, requiring, by the host system in real-time, a secondary verification with the mobile device; and
based at least in part on the secondary verification, determining, by the host system, the authentication status is the verified access having a different mobile device.

10. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
in response to detecting the mobile device in communication with the host system, generating, by the host system in real-time, the unique URL.

11. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
in response to detecting the mobile device in communication with the host system, establishing, by the host system, the second communication path with a third party system in real-time,
wherein the second communication path is an out-of-band path.

12. The method for authenticating the mobile device in real-time of claim 1 ,
wherein the first communication path and the second communication path utilize different communication channels in a same communication network.

13. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
wherein the first communication path and the second communication path utilize different communication channels in different communication networks.

14. The method for authenticating the mobile device in real-time of claim 1 , further comprising:
contacting, by the host system through the second communication path in real-time, a web service application programming interface (“API”) associated with a third party to request the phone number and the subscriber ID.

15. The method of for authenticating the mobile device in real-time of claim 1 , wherein the subscriber ID comprises an indentifier of the mobile phone line carrier account.

16. A host system for authenticating a mobile device in real-time prior to movement of any funds in an associated funds transfer, comprising:
one or more processors; and
a memory communicatively coupled with and readable by the one or more processors and having stored therein processor-readable instructions that, when executed by the one or more processors, cause the one or more processors to:
detect, by the host system, the mobile device in communication with the host system;
send, by the host system, a text message comprising a unique uniform resource locator (“URL”) to the mobile device;
detect, by the host system, an access of the unique URL by the mobile device through a first communication path;
request in real-time, by the host system in, response to detecting the access of the unique URL by the mobile device:
a phone number and a subscriber identific

Assignees

• Western Union Co

Inventors

• Gupta Abhinav
• Mcmanus Bernard
• Mcnelley Don

Classifications

• G06F21/552

  involving long-term monitoring or reporting · CPC title

• G06Q20/3223

  Realising banking transactions through M-devices · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title