System for user authentication based on linking a randomly generated number to the user and a physical item

• US 10,460,367 B2
• Filed: 04/29/2016
• Issued: 10/29/2019
• Est. Priority Date: 04/29/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kurian, Manu Jacob
• Primary Examiner(s): Fadok, Mark A
• Application Number:
  US15/142,931
• Publication Number:
  US 20170316479A1
• Time in Patent Office: 1,278 Days
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06Q 10/0833 Tracking
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system for authenticating recipients of a physical item based on generating a random number and linking the random number to the physical item and the intended recipient. Once the intended recipient is in possession of the physical item and the generated random number, the intended recipient is authorized for the purpose of using/processing the physical item by presenting the random number for recipient authentication. In other specific embodiments of the invention, the physical item is generated with the random number included in place of personal information associated with the provider.

Claims

1. A system for authenticating a recipient of a physical item, the system comprising:

a mobile device including a memory and one or more processors in communication with the memory;

a mobile application stored in the memory, executable by the one or more processors and including;

a random number generator configured to generate a random number;

a linking application configured to;

link the random number with a physical item, a presenter of the physical item, a recipient of the physical item, and a period of time for conducting an event using the physical item, and

store the random number and a physical item identifier, a presenter identifier, a recipient identifier and a period of time identifier in an authentication database; and

a physical item-generator configured to generate the physical item that includes the random number in place of information associated with the presenter,

wherein (i) generating the random number, (ii) linking the random number with the physical item, the presenter, the recipient and the period of time, and (iii) generating the physical item are all conducted in unison in response to receiving an input request via the mobile application; and

an authentication module stored in second memory, executable by one or more second processors and configured to;

in response to receiving (i) an input of a number and (ii) an a recipient identifier from the recipient or a source associated with the recipient, access the authentication database to compare (i) the inputted number to the random number, and (ii) the inputted recipient identifier to the stored recipient identifier, and

in response to determining a match between the inputted number and the random number and between the inputted recipient identifier and the stored recipient identifier, authenticate the recipient.

2. The system of claim 1, further comprising a processing module stored in third memory, executable by one or more third processors and configured to, in response to authenticating the recipient, process the physical item.

3. The system of claim 2, wherein the linking application is further configured to link the random number to at least one of a quantity of processing transactions, and a processing transaction limit.

4. The system of claim 3 wherein the processing module is further configured to verify, prior to processing the physical item, based on the random number, at least one of (i) the processing of the physical item is within the linked quantity of processing transactions, and (ii) the processing of the physical item is within the processing transaction limit.

5. The system of claim 1, wherein the physical item is further defined as a payment instrument.

6. The system of claim 1, wherein the payment instrument is one of a personal check or a credit card.

7. The system of claim 6, wherein the payment instrument is a series of personal checks, each of the personal checks designated for payment to the receiver.

8. The system of claim 1, wherein the physical-item generator application is further defined as a check-generator application configured to generate a personal check that includes the random number in place of at least a portion of one or more of a routing number, an account number and a check number.

9. The system of claim 8, wherein the check-generator application is further configured to generate the personal check that includes the random number in place of a routing number, an account number and a check number.

10. The system of claim 9, wherein the linking application is further configured to link the random number to the routing number, the account number and the check number.

11. The system of claim 8, wherein the check-generator application is further configured to generate the personal check that includes no personal identifying information associated with a holder of the account associated with the personal check.

12. The system of claim 2, wherein the processing module is further defined as a transaction module configured to, in response to authenticating the recipient, conduct a payment transaction in which the presenter is a payor and the recipient is a payee.

13. A system for authenticating a payee during a transaction, the system comprising:

a mobile device including a memory and one or more processors in communication with the memory;

a mobile application stored in the memory, executable by the one or more processors and including;

a random number generator configured to generate a random number;

a linking application configured to;

link the random number with a physical payment instrument, a payor, a payee, and a period of time for conducting a transaction using the physical payment instrument, and

store the random number and a payment instrument identifier, a payor identifier, a payee identifier and a period of time identifier in an authentication database;

a payment instrument-generator configured to generate a payment instrument that includes the random number in place of at least a portion of at least one of a routing number, an account number and a check number,

wherein (i) generating the random number, (ii) linking the random number with the physical payment instrument, the payor, the payee and the period of time, and (iii) generating the physical payment instrument are all conducted in unison in response to receiving an input request via the mobile application; and

an authentication module stored in second memory, executable by one or more second processors and configured to;

in response to receiving an input of (i) a number and (ii) a payee identifier from the payee or a payee source, access the authentication database to compare (i) the inputted number to the random number, and (ii) the inputted payee identifier to the stored payee identifier, and

in response to determining a match between the inputted number and the random number and between the inputted payee identifier and the stored payee identifier, authenticate the payee.