SYSTEMS AND METHODS FOR AUTHENTICATING USER IDENTITIES IN NETWORKED COMPUTER SYSTEMS

• US 20160027009A1
• Filed: 06/23/2015
• Published: 01/28/2016
• Est. Priority Date: 06/23/2014
• Status: Active Grant

• Current Assignee: Toronto-Dominion Bank
• Original Assignee: Toronto-Dominion Bank
• Inventors: SIVASHANMUGAM, Prabaharan, VAN HEERDEN, Lauren, CUMMINS, Michael D., DEL VECCHIO, Orin, NADARAJAH, Gunalan, LOUNSBURY, Edward, CHAN, Paul Mon-Wah, BARNETT, Jonathan K., METWALLI, Ashraf, DANIELAK, Jakub
• Granted Patent: US 10,496,988 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

The disclosed embodiments include methods and point-of-sale terminals for authenticating a user. The disclosed embodiments include, for example, a method for receiving, by one or more processors, authentication data from an authentication network, the authentication data including an authentication code identifying an authentication transaction associated with an authenticating partner system. The method may also include validating, by the one or more processors, the authentication data, the validating comprising comparing the authentication data with validation data corresponding to a prior authentication event associated with the user. The method may also include generating, by the one or more processors, validation information based on the validating, the validation information comprising a determination whether to validate the user for the authentication transaction. The method may also include providing, by the one or more processors, the validation information to the authentication network.

Claims

1. A point-of-sale terminal, comprising:

a memory storing software instructions; and

one or more processors coupled to the memory, the one or more processors configured to execute the software instructions to perform one or more operations, the operations comprising;

receiving a first set of authentication data associated with the user, the first set of authentication data comprising an authentication code corresponding to a pending authentication transaction with a first authentication partner system,

receiving transaction information specifying whether the first set of authentication data corresponds to an authentication transaction,

determining a destination system based on the first set of authentication data and the transaction information, and

providing the first set of authentication data to the destination system.

2. The point-of-sale terminal of claim 1, wherein the operations further comprise receiving an authentication confirmation reflecting an approval of the authentication transaction.

3. The point-of-sale terminal of claim 2, wherein the operations further comprise providing the authentication confirmation to a client device.

4. The point-of-sale terminal of claim 1, wherein the operations further comprise:

receiving a second set of authentication data associated with a user, the second set of authentication data corresponding to the pending authentication transaction;

determining the destination system based in part on the second set of authentication data; and

providing the second set of authentication data to the destination system.

5. The point-of-sale terminal of claim 4, wherein at least one of the first set of authentication data or the second set of authentication data include at least one of:

a personal identification number associated with the user;

account information corresponding to an account associated with a user;

time data reflecting a time of a transaction event, wherein the transaction event relates to one of receiving the first set authentication data, receiving the second set of authentication data, receiving the transaction information, providing the first set of authentication data, providing the second set of authentication data, or providing the transaction information to the destination system;

location data reflecting a location of the transaction event;

entity data reflecting a particular entity associated with the terminal;

or

entity type data reflecting the type of entity associated with the terminal.

6. The point-of-sale terminal of claim 1, wherein the transaction information is included in the authentication data.

7. The point-of-sale terminal of claim 1, wherein the transaction information is encoded in the authentication code.

8. The point-of-sale terminal of claim 1, wherein the first set of authentication data is received from a user device.

9. The point-of-sale terminal of claim 4, wherein the operations further include:

modifying at least one of the first set of authentication data or the second set of authentication data based on the transaction information to create modified transaction data; and

providing the modified transaction data to the destination system.

10. A computer-implemented method for authenticating a user, comprising,

receiving, by one or more processors, a first set of authentication data associated with the user, the first set of authentication data comprising an authentication code corresponding to a pending authentication transaction with a first authentication partner system,

receiving, by the one or more processors, transaction information specifying whether the first set of authentication data corresponds to an authentication transaction,

determining, by the one or more processors, a destination system based on the first set of authentication data and the transaction information, and

providing, by the one or more processors, the first set of authentication data to the destination system.

11. (canceled)

12. A point-of-sale terminal for authenticating a user, comprising:

a memory storing software instructions; and

one or more processors coupled to the memory, the one or more processors configured to execute the software instructions to perform one or more operations, the operations comprising;

receiving a first set of authentication data associated with the user, the first set of authentication data comprising an authentication code corresponding to a pending authentication transaction with a first authentication partner system,

receiving transaction information specifying whether the first set of authentication data corresponds to an authentication transaction, and

providing the first set of authentication data and the transaction information to a third party system, the third party system configured to;

determine a destination system based on the first set of authentication data and the transaction information, and

provide the first set of authentication data to the destination system.

13. (canceled)