SYSTEM AND METHOD OF NOTIFYING MOBILE DEVICES TO COMPLETE TRANSACTIONS AFTER ADDITIONAL AGENT VERIFICATION

• US 20170068958A1
• Filed: 11/18/2016
• Published: 03/09/2017
• Est. Priority Date: 03/03/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Duo Security Incorporated (Cisco Systems, Inc.)
• Inventors: Oberheide, Jon, Abduljaber, Omar, Zhu, Boyang
• Granted Patent: US 10,445,732 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A method of completing a transaction that requires authorization by an authority agent includes registering an authority device as associated with the authority agent, receiving a transaction request from a service provider; pushing an authentication notification to the authenticating application of the authority device; displaying the authentication notification, including a prompt to supply agent verification data, on the authority device; collecting and verifying the agent verification data; in response to verification of the agent verification data, transmitting an authority agent response from the authority device to the authentication platform, and, at the authentication platform, authenticating the authority agent response; and in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.

Claims

1. A method of facilitating a transaction requiring authentication and authorization, separately, the method comprising:

at an auth platform;

receiving a transaction request from a remote interface;

wherein the transaction request includes login information used to successfully authenticate an initiator of the transaction request at a time prior to receiving the transaction request;

wherein, after receiving the transaction request, automatically;

(i) using the login information to identify a remote device that was previously registered at the auth platform and stored in association with the login information, and

(ii) in response to identifying the remote device, transmitting an authorization request to the remote device for authorizing the transaction request from the remote interface, wherein the authorization request includes a prompt requiring a performance of a fingerprint scan;

receiving a response to the authorization request from the remote device, wherein the response includes fingerprint scan image information obtained at a fingerprint reader associated with the remote device;

processing the response including the fingerprint scan image information from the remote device to identify whether to confirm or deny the transaction request, wherein the processing includes;

if the fingerprint scan image information matches a stored fingerprint image, confirming the transaction request, and

if the fingerprint scan image information does not match the stored fingerprint image, denying the transaction request.

5. The method of claim 1, further comprising prompting the authority agent to approve the transaction request after performing the additional agent verification;

wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of the additional agent verification and receiving approval of the transaction request from the authority agent.

14. The method of claim 1, wherein an initial authentication of the initiator is not performed by the auth platform and only a second authentication of the initiator is performed by the auth platform.

15. The method of claim 1, wherein the login information received by the auth platform is used only to identify the remote device and not used by the auth platform to authenticate the initiator.

2. A method of completing a transaction that requires authorization by an authority agent, the method comprising:

registering, on an authentication platform, an authenticating application of an authority device as associated with the authority agent, wherein the authority agent is recognized as an authorized user of the authority device by an operating system of the authority device;

receiving, at the authentication platform, an authentication policy from an administrator of a service provider, wherein the authentication policy specifies that additional agent verification must be performed to complete the transaction;

receiving, at the authentication platform, a transaction request from the service provider, wherein the transaction request is associated with the transaction;

in response to receiving the transaction request, pushing an authentication notification to the authenticating application of the authority device;

at the authentication application, displaying the authentication notification on the authority device, wherein displaying the authentication notification comprises displaying a prompt directing the authority agent to perform a fingerprint scan at a fingerprint reader of the authority device;

at the authentication application, performing additional agent verification by verifying that the fingerprint scan is associated with the authorized user of the authority device;

in response to the additional agent verification, transmitting an authority agent response from the authentication application to the authentication platform, and, at the authentication platform, authenticating the authority agent response; and

in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.

3. The method of claim 2, wherein the authentication notification includes a selectable option that allows additional agent verification to be performed in absence of the fingerprint scan by verifying, locally and with the operating system, a numerical passcode submitted by the authority agent.

4. The method of claim 2, further comprising:

receiving approval of the transaction request from the authority agent, wherein the authentication notification directs the authority agent to perform the fingerprint scan only after receiving approval of the transaction request from the authority agent, wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of the additional agent verification and receiving approval of the transaction request from the authority agent.

6. The method of claim 2, further comprising:

detecting, at the authentication platform, that the service provider is associated with a security-sensitive application; and

, in response to detecting that the service provider is associated with the security-sensitive application, automatically implementing an authentication policy that specifies that the fingerprint scan must be performed to complete the transaction.

7. The method of claim 6, wherein detecting, at the authentication platform, that the service provider is associated with a security-sensitive application comprises analyzing an identifier of the service provider with regard to a list of security-sensitive applications maintained at the authentication platform.

8. The method of claim 2, further comprising detecting, at the authentication platform, that the authority agent is a security-sensitive user;

and, in response to detecting that the authority agent is a security-sensitive user, automatically implementing an authentication policy that specifies that the fingerprint scan must be performed to complete the transaction.

9. The method of claim 2, further comprising detecting, at the authentication platform, that the transaction request is a suspicious transaction request;

wherein directing the authority agent to perform the fingerprint scan comprises directing the authority agent to perform the fingerprint scan only in response to suspicious transaction requests.

10. The method of claim 9, wherein detecting that the transaction request is a suspicious transaction request comprises receiving indication from the service provider that the transaction request is a suspicious transaction request.

11. The method of claim 9, wherein detecting that the transaction request is a suspicious transaction request comprises detecting that the transaction request is a suspicious transaction request based on historical transaction request data stored at the authentication platform.

12. The method of claim 2, wherein a plurality of authority devices are registered, and messaging the authority device includes messaging at least two of the plurality of authority devices, wherein a response from an authority agent is received from at least one of the at least two of the plurality of authority devices.

13. A method of completing a transaction that requires authorization by an authority agent, the method comprising:

registering, on an authentication platform, an authority device as associated with the authority agent;

receiving, at the authentication platform, a transaction request from a service provider, wherein the transaction request is associated with the transaction;

in response to receiving the transaction request, pushing an authentication notification to the authenticating application of the authority device;

at the authentication application, displaying the authentication notification on the authority device;

at the authentication application, receiving approval of the transaction request from the authority agent;

at the authentication application, directing the authority agent to perform a fingerprint scan only after receiving approval of the transaction request from the authority agent, wherein the fingerprint scan is performed at a fingerprint reader of the authority device;

at the authentication application, collecting and verifying the fingerprint scan;

in response to verification of the fingerprint scan, transmitting an authority agent response from the authority device to the authentication platform, and, at the authentication platform, authenticating the authority agent response, wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of performing the fingerprint scan and receiving approval of the transaction request from the authority agent; and

in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.