TWO DEVICE AUTHENTICATION

• US 20110246363A1
• Filed: 04/05/2010
• Published: 10/06/2011
• Est. Priority Date: 04/05/2010
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Stone, Carl
• Granted Patent: US 10,460,316 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

In one embodiment, a transaction is authenticated by a payment provider, as opposed to a merchant, using two user devices without the user having to enter information, such as an email or password. When the user is ready to make a purchase from a merchant site, a unique transaction ID is created by the payment provider. That transaction ID, along with data about the transaction, such as specific items and cost, is automatically sent to the payment provider through a second device linked to the purchasing device. The payment provider compares the identifier from the sending device, such as the phone number, and the transaction ID with information stored in its database. If there is a match, the transaction/user may be approved or authenticated.

Claims

1. A method of performing on-line transactions, comprising:

generating, by a processor of a payment provider, a transaction identifier (ID) based on information received from a first user device for a transaction;

receiving the transaction ID from a second user device;

receiving information about a user from the second user device;

determining whether the transaction ID and the information about the user correspond to information stored with the payment provider; and

processing the transaction if the transaction ID and the information is authenticated by the payment provider.

2. The method of claim 1, wherein the transaction ID is automatically communicated by the first user device to the second user device.

3. The method of claim 1, wherein the transaction ID and the information is automatically communicated to the payment provider.

4. The method of claim 1, wherein the information comprises a phone number of the second user device.

5. The method of claim 1, wherein the information comprises an identifier of the second user device.

6. The method of claim 1, wherein the transaction ID comprises information about a merchant, an item to be purchased, and a price.

7. The method of claim 1, wherein the transaction ID and the information are received on a same communication.

8. The method of claim 1, wherein the transaction ID is received via text.

9. The method of claim 1, wherein the transaction ID is received via voice or interactive voice response (IVR).

10. The method of claim 1, wherein the first user device is a laptop or personal computer and the second user device is a smart phone.

11. A machine-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:

generating a transaction identifier (ID) based on information received from a first user device for a transaction;

receiving the transaction ID from a second user device;

receiving information about a user from the second user device;

determining whether the transaction ID and the information about the user correspond to information stored with a payment provider; and

processing the transaction if the transaction ID and the information is authenticated by the payment provider.

12. The machine-readable medium of claim 11, wherein the transaction ID is automatically communicated by the first user device to the second user device.

13. The machine-readable medium of claim 11, wherein the transaction ID and the information is automatically communicated to the payment provider.

14. The machine-readable medium of claim 11, wherein the information comprises a phone number of the second user device.

15. The machine-readable medium of claim 11, wherein the transaction ID and the information are received on a same communication.

16. The machine-readable medium of claim 11, wherein the transaction ID is received via text.

17. The machine-readable medium of claim 11, wherein the transaction ID is received via voice or interactive voice response (IVR).

18. An on-line payment processing system comprising:

means for generating a transaction identifier (ID) based on information received from a first user device for a transaction;

means for receiving the transaction ID from a second user device;

means for receiving information about a user from the second user device;

means for determining whether the transaction ID and the information about the user correspond to information stored with a payment provider; and

means for processing the transaction if the transaction ID and the information is authenticated by the payment provider.

19. The system of claim 18, wherein the transaction ID is automatically communicated by the first user device to the second user device.

20. The system of claim 18, wherein the transaction ID and the information is automatically communicated to the payment provider.

21. The system of claim 18, wherein the information comprises a phone number of the second user device.

22. The system of claim 18, wherein the information comprises an identifier of the second user device.

23. The system of claim 18, wherein the transaction ID comprises information about a merchant, an item to be purchased, and a price.

24. The system of claim 18, wherein the transaction ID and the information are received on a same communication.