Method and system for multifactor mutual authentication

• US 10,511,597 B1
• Filed: 07/23/2019
• Issued: 12/17/2019
• Est. Priority Date: 07/23/2019
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Phillips, Jeremy, Grossman, Andrew, Collins, Rachel
• Primary Examiner(s): Lesniewski, Victor
• Application Number:
  US16/519,274
• Time in Patent Office: 147 Days
• CPC Class Codes: G01S 19/13 Receivers
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 3/1454 involving copying of the display data of a local workstation or window to a remote workstation or window so that an actual copy of the data is displayed simultaneously on two or more displays, e.g. teledisplay
• CPC Class Codes: G06K 19/06018 one-dimensional coding
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06K 7/1413 1D bar codes
• CPC Class Codes: G06K 7/1417 2D bar codes
• CPC Class Codes: G06V 10/56 relating to colour
• CPC Class Codes: G06V 10/75 Organisation of the matching processes, e.g. simultaneous or sequential comparisons of image or video features; Coarse-fine approaches, e.g. multi-scale approaches; using context analysis; Selection of dictionaries
• CPC Class Codes: G09G 2354/00 Aspects of interface with display user
• CPC Class Codes: G09G 5/02 characterised by the way in which colour is displayed details of colour display specific for CRTs G09G1/28; specific for flat matrix panels other than liquid crystal displays G09G3/2003; specific for liquid crystal displays G09G3/3607
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

Method and systems described herein may provide multifactor mutual authentication. A first server may provide a first party and a second party with at least two authentication components in order for the first party to authenticate the identity of the second party, and vice versa. The first authentication component may include a color-based authentication component, while the second authentication component may include a code-based authentication component. Both factors need to be validated in order for the authentication to be successful. The color-based authentication component, in combination with the code-based authentication component, may improve the speed with which the mutual authentication is performed.

Claims

1. A computer-implemented method comprising:

receiving, by a first computing device, mutual authentication information from a first server, wherein the mutual authentication information includes a color-based authentication component;

tracking a first location of the first computing device;

providing navigation from the first location to a second location, wherein tracking the first location of the first computing device is part of the navigation;

causing a first color from the color-based authentication component to be displayed on the first computing device, wherein the first color indicates that the first location is distant from the second location;

determining, by the first computing device, that the first computing device is at the second location, wherein the second location is a destination of the first computing device;

causing a second color from the color-based authentication component to be displayed on the first computing device based on the determination that the first computing device is at the second location;

reading a third color presented by a second computing device, wherein the third color is read by an image capture device;

comparing, by the first computing device, the third color to the second color to verify an identity of the second computing device;

based on the third color matching the second color, causing a first machine-readable code to be displayed on the first computing device, wherein the first machine-readable code is at least one of a bar code or a QR code;

reading a second machine-readable code presented by the second computing device, wherein the second machine-readable code is at least one of a bar code or a QR code;

comparing the second machine-readable code to the first machine-readable code as part of a multifactor authentication of the second computing device;

verifying the identity of the second computing device when the second machine-readable code matches the first machine-readable code.

2. The computer-implemented method of claim 1, wherein the first location of the first computing device is determined using one or more of GPS, location services, or an indoor location tracking service.

3. The computer-implemented method of claim 1, wherein the first color is determined based on a first time and the first location of the first computing device.

4. The computer-implemented method of claim 1, comprising:

receiving the mutual authentication information from the first server based on an order submitted by the first computing device.

5. The computer-implemented method of claim 4, comprising:

releasing the order to a second user when the identity of the second computing device has been verified.

6. The computer-implemented method of claim 1, wherein a first time is obtained from the first server.

7. The computer-implemented method of claim 1, wherein a color temperature of the first color changes to a warmer variant of the first color as the first computing device approaches the second location.

8. The computer-implemented method of claim 1, wherein a color temperature of the first color changes to a warmer variant of the first color based on time elapsing.

9. An apparatus comprising:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the apparatus to;

receive authentication information, wherein the authentication information includes a color-based authentication component;

determine a first location of the apparatus;

cause a first color of the color-based authentication component to be displayed on the apparatus based on the first location, wherein the first color indicates that the first location is distant from a destination;

determine a second location of the apparatus, wherein the second location is closer to the destination;

cause a second color of the color-based authentication component to be displayed on the apparatus based on the second location, wherein the second color indicates that the second location is closer to the destination;

determine a third location of the apparatus, wherein the third location is the destination;

cause a third color from the color-based authentication component to be displayed on the apparatus based on the determination that the apparatus is at the third location;

read a fourth color presented by a second computing device, wherein the fourth color is read by an image capture device;

compare the fourth color to the third color to verify an identity of the second computing device;

based on the fourth color matching the third color, cause a first machine-readable code to be displayed on the apparatus, wherein the machine readable code is one of a bar code or a QR code;

scan a second machine-readable code displayed on a second computing device; and

authenticate the second computing device as part of a multifactor authentication process when the second machine-readable code matches the first machine-readable code.

10. The apparatus of claim 9, wherein the first location of the apparatus is determined using one or more of GPS, location services, or an indoor location tracking service.

11. The apparatus of claim 9, wherein the instructions cause the apparatus to:

provide navigation from the first location to the destination, wherein determining the first location, the second location, and the third location is part of the navigation.

12. The apparatus of claim 9, wherein the instructions cause the apparatus to:

receive the authentication information from the first server based on an order submitted by the apparatus.

13. One or more non-transitory media storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising:

receiving authentication information from a first server, wherein the authentication information includes a color-based authentication component;

tracking a first location of a first computing device;

providing navigation from the first location to a second location, wherein tracking the first location of the first computing device is part of the navigation;

causing a first color from the color-based authentication component to be displayed on the first computing device, wherein the first color indicates that the first location is distant from the second location;

determining, by the first computing device, whether the first computing device is at a second location, wherein the second location is a destination of the first computing device;

causing a second color from the color-based authentication component to be displayed on the first computing device based on the determination that the first computing device is at the second location;

reading a third color presented by a second computing device, wherein the third color is read by an image capture device; and

comparing, by the first computing device, the third color to the second color to determine if the third color matches the second color;

causing a first machine-readable code to be displayed on the first computing device in response to the third color matching the second color, wherein the first machine-readable code is at least one of a bar code or a QR code; and

reading a second machine-readable code presented by the second computing device, wherein the second machine-readable code is at least one of a bar code or a QR code;

comparing the second machine-readable code to the first machine-readable code to verify an identity of the second computing device; and

verifying the identity of the second computing device in response to the second machine-readable code matching the first machine-readable code.

14. The one or more non-transitory media of claim 13, wherein the first location of the first computing device is determined using one or more of GPS, location services, or an indoor location tracking service.

15. The one or more non-transitory media of claim 13, wherein the first color is determined based on a first time and the first location of the first computing device.

16. The one or more non-transitory media of claim 13, wherein the instructions, when executed, further cause the one or more processors to perform steps comprising:

receiving the mutual authentication information from the first server based on an order submitted by the first computing device.

17. The one or more non-transitory media of claim 16, wherein the instructions, when executed, further cause the one or more processors to perform steps comprising:

releasing the order when the identity of the second computing device has been verified.

18. The one or more non-transitory media of claim 13, wherein the instructions, when executed, further cause the one or more processors to perform steps comprising:

request a first time from the first server; and

receiving the first time from the first server in response to the request.

19. The one or more non-transitory media of claim 13, wherein a color temperature of the first color changes to a warmer variant of the first color as the first computing device approaches the second location.

20. The one or more non-transitory media of claim 13, wherein a color temperature of the first color changes to a warmer variant of the first color based on time elapsing.