TECHNIQUES FOR CALL-BASED USER VERIFICATION

• US 20160381018A1
• Filed: 09/12/2016
• Published: 12/29/2016
• Est. Priority Date: 10/31/2014
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Hettervik, Bradley Edward, Gadodia, Surendra, Liang, Xiao, Fu, Antony T., Fowler, Molly Jane
• Granted Patent: US 9,948,645 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/01 Protocols

Abstract

Techniques for call-based user verification are described. In one embodiment, for example, an apparatus may comprise a processor circuit and a storage component. The apparatus may further comprise a session component, an identification (ID) component, a mapping component, and a verification component. The session component may be operative on the processor circuit and configured to receive session data from a client device and store the session data in the storage component. The ID component may be operative on the processor circuit and configured to request ID data from a server, receive ID data from the server, and send the ID data to the client device. The mapping component may be operative on the processor circuit and configured to map the session data with the ID data. The verification component may be operative on the processor circuit and configured to receive a confirmation from the client device, request verification from the server, and upon receiving verification from the server, verify the client device. Other embodiments are described and claimed.

Claims

1. An apparatus comprising:

a processor circuit;

a storage component communicatively coupled to the processor circuit, the storage component to store a generation component and a verification component;

the generation component operative on the processor circuit to receive a first request for identification (ID) data from a server, retrieve the ID data in response to the first request, and return the ID data to the server, the ID data for use by a client device with the verification component; and

the verification component operative on the processor circuit to receive a communication from a client device with the ID data, receive a second request from the server to confirm the communication of the client device, and communicate a verification message to the server in response to the second request, the verification message indicating that the ID data was used by the client device.

2. The apparatus of claim 1, the generation component to generate the ID data and store the ID data in a database component.

3. The apparatus of claim 1, the generation component to retrieve the ID data from a database component, mark the retrieved ID data as used in the database component, and to set an expiration period for the retrieved ID data.

4. The apparatus of claim 1, wherein the ID data is a direct inward dial (DID) telephone number.

5. The apparatus of claim 1, wherein the second request comprises the ID data.

6. The apparatus of claim 1, wherein the verification message indicates that the ID data used to communicate with the apparatus was used within a defined time period.

7. The apparatus of claim 1, the verification component to disconnect the communication from the client device prior to the communication from the client device incurring a communication charge.

8. A computer-implemented method, comprising:

receiving, at a first server, a first request for identification (ID) data from a second server;

generating, at the first server, the ID data, the ID data for use by a client device to communicate with the first server;

returning the ID data to the second server;

receiving, at the first server, a communication from a client device with the ID data;

receiving, at the first server, a second request from the second server to confirm the communication of the client device; and

communicating, in response to the second request, a verification message to the second server, the verification message indicating that the ID data was used by the client device to communicate with the first server.

9. The computer-implemented method of claim 8, comprising:

recording that the ID data was used within a defined period of time, when the communication from the client device is received.

10. The computer-implemented method of claim 9, wherein the verification message comprises an indication that the ID data was used within the defined period of time.

11. The computer-implemented method of claim 8, wherein the ID data is a direct inward dial (DID) telephone number.

12. The computer-implemented method of claim 8, wherein the second request comprises the ID data.

13. The computer-implemented method of claim 8, comprising disconnecting the communication from the client device prior to the communication from the client device incurring a communication charge.

14. An article comprising a non-transitory computer-readable storage medium including instructions that, when executed by a processor circuit, cause a system to:

receive a first request for identification (ID) data, from a server;

retrieve the ID data from a database component, wherein the ID data comprises data for use to verify a client device;

return the ID data to the server;

receive a communication from a client device with the ID data;

receive a second request from the server to confirm the communication of the client device; and

communicate a verification message to the server, in response to the second request, the verification message indicating that the ID data was used by the client device.

15. The article of claim 14, further comprising instructions that when executed by the processor circuit, cause system to mark the retrieved ID data as used in the database component and to set an expiration period for the retrieved ID data.

16. The article of claim 14, wherein the ID data is a direct inward dial (DID) telephone number.

17. The article of claim 14, wherein the second request comprises the ID data.

18. The article of claim 14, further comprising instructions that when executed by the processor circuit, cause the system to record that the ID data was used within a defined period of time, when the communication from the client device is received.

19. The article of claim 18, wherein the verification message indicates that the ID data used by the client was used within a defined time period.

20. The article of claim 14, further comprising instructions that when executed by the processor circuit, cause the system to disconnect the communication from the client device prior to the communication from the client device incurring a communication charge.