SYSTEM AND METHOD OF NOTIFYING MOBILE DEVICES TO COMPLETE TRANSACTIONS

• US 20110219230A1
• Filed: 03/02/2011
• Published: 09/08/2011
• Est. Priority Date: 03/03/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Duo Security Incorporated (Cisco Systems, Inc.)
• Inventors: Song, Douglas, Oberheide, Jon, Goodman, Adam
• Granted Patent: US 9,544,143 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method including registering an authority device for an account on an auth platform; receiving transaction request from an initiator to the auth platform; messaging the authority device with the transaction request; receiving an authority agent response from the authority device to the auth platform; if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

Claims

1. A method of completing a transaction comprising the steps of:

registering an authority device for an account on an auth platform;

receiving transaction request from an initiator to the auth platform;

messaging the authority device with the transaction request wherein the message is pushed as a notification for an application of the authority device;

receiving an authority agent response from the authority device to the auth platform, and cryptographically authenticating the response from the authority device;

if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and

if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

2. A method of completing a transaction comprising the steps of:

registering an authority device for an account on an auth platform;

receiving transaction request from an initiator to the auth platform;

messaging the authority device with the transaction request;

receiving an authority agent response from the authority device to the auth platform;

if the authority agent response confirms the transaction, communicating a confirmed transaction to the initiator; and

if the authority agent response denies the transaction, communicating a denied transaction to the initiator.

3. The method of claim 2, wherein messaging the authority device includes pushing a notification to a mobile application.

4. The method of claim 3, wherein pushing a notification is performed over a channel with real-time alerts on the authority device.

5. The method of claim 4, wherein pushing a notification includes sending an SMS message to the authority device.

6. The method of claim 4, wherein messaging the authority device includes messaging a size limited message to the authority device with a unique identifier of a full message and wherein a response is received through the full message.

7. The method of claim 2, wherein the authority device is a mobile computing device for authentication of a user and wherein the authority agent response confirms or denies the identity of an agent of the transaction request.

8. The method of claim 7, wherein a plurality of authority devices are registered, and messaging the authority device includes messaging at least two authority devices and wherein a authority agent response is received by at least one of the two authority devices.

9. The method of claim 2, wherein the authority device is a mobile computing device for authorization of a transaction and wherein the authority agent response confirms or denies an action of a transaction by an agent.

10. The method of claim 9, wherein a plurality of authority devices are registered, and messaging the authority device includes messaging at least two authority devices and wherein a received authority agent response is received by at least one of the two authority devices.

11. The method of claim 2, wherein there is at least one authority device registered for authentication and a second authority device registered for authorization;

wherein the received authority agent response from the device for authentication is used in confirming or denying the identity of an agent of the transaction request; and

wherein the received authority agent response from the device for authorization is used in confirming or denying an action of an agent in a transaction.

12. The method of claim 2, wherein messaging the authority device includes tracking state and communication channels of the authority device.

13. The method of claim 12, wherein a persistent TCP/IP connection is used as a communication channel and messaging the authority device includes initiating a new persistent connection upon network changes of the authority device.

14. The method of claim 2, further comprising cryptographically authenticating a response from the authority device.

15. The method of claim 2, wherein the transaction request includes information on claimed identity of the agent of the transaction and an action associated with the transaction.

16. The method of claim 2, wherein the transaction is a request to access an account.

17. The method of claim 16, wherein the transaction is a request to access an account to complete an automatic teller machine (ATM) withdrawal.

18. The method of claim 16, wherein the transaction is a request to access an account of a website.

19. The method of claim 2, wherein the transaction is a permission request to perform an action on a computer system.

20. The method of claim 2, wherein the transaction is a permission request for an entity to access a physical site location.