MOBILE AUTHENTICATION FOR WEB PAYMENTS USING SINGLE SIGN ON CREDENTIALS

• US 20150120549A1
• Filed: 10/31/2013
• Published: 04/30/2015
• Est. Priority Date: 10/31/2013
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: KHALID, Mohammad Raheel, KIM, Ji Hoon, BRUNO, Corey Michael, BERMAN, Paul, CALDEIRA DE ANDRADA, Mauricio Pati, VAIDYA, Samir
• Granted Patent: US 10,181,122 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/16 Payments settled via telecommunication systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions

Abstract

Systems and methods for mobile authentication for web payments are disclosed. In some implementations, a proxy server receives, from a computing device different from a mobile device, a request from a user to process a web payment via a payment account associated with the mobile device, the web payment being associated with an online merchant. The proxy server verifies that the mobile device is associated with the user. The proxy server transmits, to a commerce server of the online merchant, payment information for the web payment in response to verifying that the mobile device is associated with the user.

Claims

1. A method comprising:

receiving, at a proxy server and from a merchant website, a request for authenticating a mobile directory number (MDN) for payment information;

responsive to the request for authentication, sending a challenge for authentication from the proxy server to the mobile device associated with the MDN;

receiving, at the proxy server and from the mobile device, a response to the challenge for authentication;

verifying, at the proxy server, that the response is a valid response to the challenge for authentication; and

upon verifying the validity of the response, transmitting the payment information from the proxy server to the merchant web site.

2. The method of claim 1, wherein:

the challenge includes a screen image, and

the valid response to the challenge includes a photograph of the screen image taken via a camera of the mobile device.

3. The method of claim 1, wherein:

the challenge includes an audio output, and

the valid response to the challenge includes a recording of the audio output taken via a microphone of the mobile device.

4. The method of claim 1, wherein the payment information comprises a payment by a cellular carrier associated with the MDN and a charge billed to an account with the cellular carrier associated with the MDN.

5. The method of claim 1, wherein the request for authenticating the MDN comprises a geographic location of a computing device accessing the merchant website, and wherein the request for authenticating the MDN lacks the MDN, the method further comprising:

identifying the MDN based on a geographic proximity of a device having the MDN and running a mobile payment application to the geographic location of a computing device accessing the merchant website, the geographic location of the device having the MDN being received from the device and the geographic location of the computing device being received from the computing device.

6. A method comprising:

receiving, at a website integrated with a mobile communication network payment application interface, a checkout request from a user having a mobile account with a mobile communication network;

providing the user a mechanism by which to enter the user'"'"'s mobile directory number (MDN) via the website to leverage the user'"'"'s mobile account with the mobile communication network upon user selection of the mobile communication network payment application interface;

sending, in response to the user selection and from the website to a mobile communication network server, the MDN for presenting on the MDN a challenge for authentication;

receiving, at the website and from the mobile communication network server, a response to the challenge for authentication; and

upon receiving an indication of a response reflecting successful authentication, enabling the user to finalize the checkout and pay for purchased items using the user'"'"'s mobile account.

7. The method of claim 6, further comprising finalizing checkout and paying for purchased items using the user'"'"'s mobile account by:

receiving, at the website and from the mobile communication network server, a payment account number and a shipping address of the user.

8. The method of claim 6, wherein:

the challenge includes a numeric or textual pin, and

the response to the challenge includes a user input of the numeric or textual pin.

9. The method of claim 6, wherein:

the challenge includes a request for a biometric scan at the MDN, and

the response to the challenge includes a verification that the biometric scan at the MDN is associated with the user.

10. The method of claim 6, wherein the indication of the response reflecting successful authentication is received from the mobile communication network server.

11. A method comprising:

receiving, at a proxy server and from a computing device different from a mobile device, a request from a user to process a web payment via a payment account associated with the mobile device, the web payment being associated with an online merchant;

verifying, at the proxy server, that the mobile device is associated with the user; and

transmitting, to a commerce server of the online merchant, payment information for the web payment in response to verifying that the mobile device is associated with the user.

12. The method of claim 11, wherein verifying that the mobile device is associated with the user comprises:

transmitting a message to the mobile device; and

receiving, from the mobile device and in response to the message, a confirmation of the request to process the web payment.

13. The method of claim 11, wherein verifying that the mobile device is associated with the user comprises:

transmitting, from the proxy server, a challenge to one of the mobile device or the computing device;

receiving, at the proxy server and from another one of the mobile phone or the computing device, an indication of a user input corresponding a valid response to the challenge at the other one of the mobile phone or the computing device.

14. The method of claim 11, wherein receiving the request from the user to process the web payment and verifying that the mobile device is associated with the user comprises:

receiving, from the computing device, an indication of a button on the computing device being selected, the button corresponding to the request for processing the web payment via the payment account associated with the mobile device; and

receiving, from the mobile device, an indication of an acceleration of the mobile device being within an acceleration range corresponding to selecting the button on the computing device with the mobile device.

15. The method of claim 11, wherein the mobile device is a mobile phone, and wherein the request from the user to process the web payment via the payment account associated with the mobile device includes a mobile directory number (MDN) of the mobile device, the method further comprising:

storing, in a data repository associated with the proxy server, the payment information in association with the MDN of the mobile device.

16. The method of claim 11, further comprising:

receiving, at the commerce server of the online merchant and from the computing device different from the mobile device, the request from the user to process the web payment via the payment account associated with the mobile device;

requesting from the proxy server payment information associated with the mobile device; and

receiving, at the commerce server and from the proxy server, the payment information for the web payment in response to verification that the mobile device is associated with the user; and

processing, at the commerce server, the web payment using the payment information.

17. The method of claim 16, wherein the payment information comprises a payment account number and a shipping address.

18. The method of claim 16, wherein the request from the user to process the web payment via the payment account associated with the mobile device comprises an indication of a button on the computing device being hit, the button corresponding to the request for processing the web payment via the payment account associated with the mobile device.

19. The method of claim 18, wherein the button on the computing device is a spacebar on the keyboard of the computing device, and wherein the button on the computing device is hit with the mobile device.

20. The method of claim 16, wherein receiving the request from the user to process the web payment via the payment account associated with the mobile device comprises:

receiving a user input of a mobile directory number (MDN) of the mobile device;

transmitting to the computing device a challenge for the mobile device having the MDN; and

receiving an indication of a valid response to the challenge at the mobile device having the MDN.