Systems and methods for user authentication via mobile device

• US 10,467,628 B1
• Filed: 10/28/2015
• Issued: 11/05/2019
• Est. Priority Date: 04/21/2009
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Courtright, Christopher Paul, Billman, Bradly Jay
• Primary Examiner(s): Nigh, James D
• Application Number:
  US14/925,783
• Time in Patent Office: 1,469 Days
• Field of Search: 705 64
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06T 11/60 Editing figures and text; Combining figures or text
• CPC Class Codes: G06T 7/30 Determination of transform parameters for the alignment of images, i.e. image registration
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]

Abstract

A user may provide a financial card to an automated teller machine (ATM) or point of sale (POS) terminal and may be authenticated by providing a gesture and/or an image selection via a mobile device to the ATM or the POS. The gesture and/or image selection may be provided using a touchscreen of the mobile device. The gesture and/or image provided by the user via the mobile device may be compared to a stored gesture and/or image provided by the user during an earlier registration of the financial card. If there is a match between the gesture and/or image provided by the user via the mobile device and the previously stored gesture and/or image, then the user is authenticated and may access an account associated with the financial card.

Claims

1. A non-transitory computer-readable medium comprising computer-readable instructions for user authentication, said computer-readable instructions comprising instructions executable by an Automatic Teller Machine (ATM) to cause the ATM to interact with a mobile device of a user to:

receive information of a financial card of the user;

transmit user interface data to the mobile device of the user that, when received by the mobile device, causes the mobile device to display on a display device of the mobile device a first image, the mobile device also being caused, by the user interface data, to display on the display device a prompt for the user to provide a first freeform gesture over the first image;

access, from memory of the ATM, encrypted aggregated image data that is generated from the mobile device in response to receipt of the transmitted user interface data and that includes an aggregation of a visual representation of the first freeform gesture overlayed on the first image;

decrypt the encrypted aggregated image data to read, from the decrypted image data, first freeform gesture data representing a combination of the first freeform gesture and the first image;

determine that the combination of the first freeform gesture and the first image match a combination of a second freeform gesture and a second image of the user, the combination of the second freeform gesture and the second image being previously stored at an institution system of the financial card; and

in response to a determination that the combination of the first freeform gesture and the first image match the combination of the second freeform gesture and the second image, authenticate the user to access an account of the financial card.

2. The non-transitory computer-readable medium of claim 1, further comprising instructions that receive the second freeform gesture and the second image from the user during registration of the financial card prior to receiving the information of the financial card.

3. The non-transitory computer-readable medium of claim 2, wherein the second freeform gesture and the second image are received during the registration via a website associated with the institution system of the financial card.

4. The non-transitory computer-readable medium of claim 1, wherein the second freeform gesture comprises a written communication made with an input device on a touchscreen of the mobile device.

5. The non-transitory computer-readable medium of claim 1, wherein the financial card is a credit card, a debit card, or an automated teller machine card.

6. An Automatic Teller Machine (ATM) comprising:

at least one processor; and

memory resources coupled to the at least one processor and configured to direct the at least one processor to;

receive a financial card from a user;

transmit user interface data to a mobile device of a user that, when received by the mobile device, causes the mobile device to display on a display of the mobile device, a first image, the mobile device also being caused, by the user interface data, to display on the display device a prompt for the user to provide a first freeform gesture over the first image;

access, from memory of the ATM, encrypted aggregated image data that is generated from the mobile device in response to receipt of the transmitted user interface data and that includes an aggregation of a visual representation of the first freeform gesture overlayed on the first image;

determine that the combination of the first freeform gesture and the first image match a combination of a second freeform gesture and a second image of the user, the combination of the second freeform gesture and the second image being previously stored at an institution system of the ATM; and

in response to a determination that the combination of the first freeform gesture and the first image match the combination of the second freeform gesture and the second image, authenticate the user to access the account of the financial card at the ATM.

7. The ATM of claim 6, wherein the display device is comprises a touchscreen of the mobile device.

8. The ATM of claim 6, wherein the first freeform gesture comprises an input on the touchscreen over the first image displayed on the touchscreen.