SYSTEM AND METHOD FOR DIGITAL AUTHENTICATION

• US 20160048846A1
• Filed: 08/17/2015
• Published: 02/18/2016
• Est. Priority Date: 03/15/2013
• Status: Abandoned Application

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Financial Corporation
• Inventors: DOUGLAS, Lawrence, POOLE, Thomas, ASHFIELD, James
• Application Number:
  US14/827,608
• Publication Number:
  US 20160048846A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A system and method a method for digital authorization including a customer authentication system with at least one customer authentication device, where the customer authentication system is, for example, a customer authentication system that receives customer data from via a network associated with a customer authentication request, receives customer input associated with the authentication request, generates authentication data based on, for example, the customer data and the customer input, where the authentication data is randomly generated, generates a second authentication request comprising the authentication data, transmits the authentication request via a notification based on a customer preference, receives an authentication response based on the second authentication request, and provides access to the customer data based on the authentication response.

Claims

1. A computer-implemented method, comprising:

receiving from a customer, via a customer interaction channel associated with a customer interaction network, a request to perform a particular customer activity;

identifying, using a processor associated with the customer authentication system, the customer based on information provided by the customer via the customer interaction channel;

determining, using the processor associated with a customer authentication system, whether the particular customer activity requires digital authentication via a registered customer mobile device;

identifying, using the processor associated with a customer authentication system, a registered customer mobile device based on the identification of the customer and a determination that the particular customer activity requires digital authentication via the mobile device;

transmitting, via a push notification network using a communication interface associated with the customer authentication system, a push notification to the registered customer mobile device, the push notification indicating that the particular customer activity has been requested and providing instructions for generating an authentication response;

establishing, via a network, a secure connection between the registered customer mobile device and the customer authentication system;

receiving, via the network from a communication interface associated with the mobile device, the authentication response from the registered customer mobile device, the authentication response including information about the hardware characteristics of the registered customer mobile and information indicative of whether the customer complied with the provided instructions;

verifying, using the processor associated with the customer authentication system, that the customer complied with the provided instructions using the information indicative of whether the customer complied with the provided instructions;

authenticating, using the processor associated with a customer authentication system, the customer based on a verification that the customer complied with the provided instructions;

authorizing the particular customer activity within the customer interaction channel based on the customer being authenticated via push notification authentication.

2. The method of claim 1, further comprising enrolling the customer in push notification authentication.

3. The method of claim 2, wherein the enrolling comprises:

establishing, via the network, a secure connection between a mobile application executing on a mobile device and the customer authentication system;

transmitting, via the network using the communication interface associated with the customer authentication system, an invitation to enroll in push notification authentication to the mobile application executing on the mobile device;

receiving, via the network using the communication interface associated with the mobile device, registration information from the mobile device, the registration information including hardware characteristics of the mobile device; and

storing, in a database associated with the customer authentication system, the hardware characteristics of the mobile device to register the mobile device as the registered customer mobile device.

4. The method of claim 1, wherein the customer interaction channel is a customer service call center and the customer interaction network is a phone network.

6. The method of claim 1, wherein the authentication response is inputted into an interface associated with a mobile application, and wherein the mobile application is associated with the customer authentication system.

7. The method of claim 1, wherein the customer interaction channel is an automated teller machine and the customer interaction network is an automated teller machine network.

8. The method of claim 1, wherein the customer interaction channel is a mobile application and the customer interaction network is network to which the mobile application connects.

9. The method of claim 1, wherein the customer authentication system implements three factor authentication.

10. The method of claim 9, wherein the authenticating the customer based on a verification that the customer complied with the provided instructions satisfies a have requirement of the three factor authentication.

5. The method 4, wherein the phone network is a cellular phone network.

11. A system, comprising:

a customer interaction channel that receives, via an associated customer interaction network, a request to perform a particular customer activity;

a customer authentication system processor that identifies the customer based on information provided by the customer via the customer interaction channel, determines whether the particular customer activity requires digital authentication via a registered customer mobile device, and identifies a registered customer mobile device based on the identification of the customer and a determination that the particular customer activity requires digital authentication via the mobile device;

a communication interface associated with the customer authentication system that transmits, via a push notification network, a push notification to the registered customer mobile device, the push notification indicating that the particular customer activity has been requested and providing instructions for generating an authentication response and establishes, via a network, a secure connection between the registered customer mobile device and the customer authentication system and receives, via the network from a communication interface associated with the mobile device, the authentication response from the registered customer mobile device, the authentication response including information about the hardware characteristics of the registered customer mobile and information indicative of whether the customer complied with the provided instructions,

wherein, upon receipt of the authentication response, the customer authentication processor verifies that the customer complied with the provided instructions using the information indicative of whether the customer complied with the provided instructions and authenticates the customer based on a verification that the customer complied with the provided instructions, thereby authorizing the particular customer activity within the customer interaction channel based on the customer being authenticated via push notification authentication.

12. The system of claim 11, further comprising an enrollment processor that enrolls the customer in push notification authentication.

13. The system of claim 12, further comprising a database associated with the customer authentication system, wherein to enroll the customer, the enrollment processor establishes, via the network, a secure connection between a mobile application executing on a mobile device and the customer authentication system, transmits, via the network using the communication interface associated with the customer authentication system, an invitation to enroll in push notification authentication to the mobile application executing on the mobile device, receives, via the network using the communication interface associated with the mobile device, registration information from the mobile device, the registration information including hardware characteristics of the mobile device, and stores, in the database, the hardware characteristics of the mobile device to register the mobile device as the registered customer mobile device.

14. The system of claim 11, wherein the customer interaction channel is a customer service call center and the customer interaction network is a phone network.

15. The system of claim 14, wherein the phone network is a cellular phone network.

16. The system of claim 11, wherein the authentication response is inputted into an interface associated with a mobile application, and wherein the mobile application is associated with the customer authentication system.

17. The system of claim 11, wherein the customer interaction channel is an automated teller machine and the customer interaction network is an automated teller machine network.

18. The system of claim 11, wherein the customer interaction channel is a mobile application and the customer interaction network is network to which the mobile application connects.

19. The system of claim 11, wherein the customer authentication system implements three factor authentication.

20. The system of claim 19, wherein the authenticating the customer based on a verification that the customer complied with the provided instructions satisfies a have requirement of the three factor authentication.