CROSS-DOMAIN MESSAGE AUTHENTICATION

• US 20170187726A1
• Filed: 02/11/2016
• Published: 06/29/2017
• Est. Priority Date: 12/24/2015
• Status: Abandoned Application

• Current Assignee: Zeta (Better World Technology Pvt. Ltd.)
• Original Assignee: Zeta (Better World Technology Pvt. Ltd.)
• Inventors: Turakhia, Bhavin, Gadipatti, Ramki
• Application Number:
  US15/041,741
• Publication Number:
  US 20170187726A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

In example embodiments, a system and method performs cross-domain message authentication. Accordingly, a first message is received from a first domain comprising a value, a first user identification of a first user of the first domain, and a second user identification of a second user of the first domain. A second message is received from a second domain. The second message is transmitted from a second domain device associated with the second user. The second message is verified by matching one or more elements of the first message to the second message. Based on the verification of the second message, a value is transmitted to an intermediary server on the second domain.

Claims

1. A method comprising:

receiving, at a control server in a first domain, a first message from a first device, the first message comprising;

a value associated with a first user, a first user identification of the first user associated with the first domain, and a second user identification of a second user associated with the first domain;

receiving, at the control server, a second message from a second domain, the second message being transmitted from a second domain device in the second domain and associated with the second user;

validating, at the control server, the second message by matching one or more elements of the first message to the second message;

causing transmission of a confirmation message to the second domain device in the second domain, the causing of the transmission of the confirmation message being based on the validating of the second message; and

causing transmission of the value from the control server in the first domain to an intermediary server in the second domain.

2. The method of claim 1, wherein the validating of the second message comprises:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server, the confirmation code included within the second message; and

matching the first message to the second message based on the receiving of the confirmation code within the second message.

3. The method of claim 1, wherein the validating of the second message comprises:

receiving, at the control server from the second domain, the second user identification included within the second message; and

matching the first message to the second message based on the receiving of the second user identification within the second message.

4. The method of claim 1 further comprising:

registering the first user with the control server and the first domain.

5. The method of claim 1 further comprising:

registering the second user with the control server and the first domain; and

generating a identification token associated with the second user for the second domain, the identification token being configured to cause the second domain device to generate the second message.

6. The method of claim 5, wherein the second message includes the identification token, and the method further comprises:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server from the second domain, the confirmation code included within the second message; and

matching the first message to the second message based on determining, by the control server, that the second message includes the identification token and the confirmation code.

7. The method of claim 5, wherein the second message includes the identification token and the value, and the validating of the second message comprises:

matching the first message to the second message based on determining, by the control server, that the second message includes the identification token and the value.

8. A method comprising:

receiving, at a control server in a first domain, a first domain message from a first device, the first domain message comprising;

a value associated with a first user, a first user identification of the first user associated with the first domain, and a second user identification of a second user associated with the first domain;

receiving, at the control server, a second message from a communication domain separate from the first domain, the second message being transmitted from a communications device via a communications network;

validating, at the control server, the second message by matching one or more elements of the first message to the second message;

causing transmission of a confirmation message via the communications network; and

based on validation of the second message, causing transfer of the value from a first account associated with the first device to a second account associated with the second user, within the first domain.

9. The method of claim 8 further comprising:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server, the confirmation code to the first device;

wherein

the second message comprises an audio message that includes the confirmation code; and

method further comprises matching the first message to the second message based on receiving the confirmation code within the second message.

10. A system comprising:

one or more processors; and

a non-transitory processor-readable storage medium storing processor executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising;

receiving, at a control server in a first domain, a first message from a first device, the first message comprising;

a value associated with a first user, a first user identification of the first user associated with the first domain, and a second user identification of a second user associated with the first domain;

receiving, at the control server, a second message from a second domain, the second message being transmitted from a second domain device in the second domain and associated with the second user;

validating, at the control server, the second message by matching one or more elements of the first message to the second message;

causing transmission of a confirmation message to the second domain device in the second domain, the causing of the transmission being based on the validating of the second message; and

causing transmission of the value from the control server in the first domain to an intermediary server in the second domain.

11. The system of claim 10, wherein the validating of the second message comprises:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server, the confirmation code included within the second message; and

matching the first message to the second message based on the receiving of the confirmation code within the second message.

12. The system of claim 10, wherein the validating of the second message comprises:

receiving, at the control server from the second domain, the second user identification included within the second message; and

matching the first message to the second message based on the receiving of the second user identification within the second message.

13. The system of claim 10, wherein the operations further comprise:

registering the first user with the control server and the first domain.

14. The system of claim 10, wherein the operations further comprise:

registering the second user with the control server and the first domain; and

generating a identification token associated with the second user for the second domain, the identification token being configured to cause the second domain device to generate the second message.

15. The system of claim 14, wherein the second message includes the identification token, and the operations further comprise:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server from the second domain, the confirmation code included within the second message; and

matching the first message to the second message based on determining, by the control server, that the second message includes the identification token and the confirmation code.

16. The system of claim 14, wherein the second message includes the identification token and the value, and the validating of the second message comprises:

matching the first message to the second message based on determining, by the control server, that the second message includes the identification token and the value.

17. A non-transitory processor-readable storage medium storing processor executable instructions that, when executed by a processor, cause the processor to perform operations comprising:

receiving, at a control server in a first domain, a first message from a first device, the first message comprising;

a value associated with a first user, a first user identification of the first user associated with the first domain, and a second user identification of a second user associated with the first domain;

receiving, at the control server, a second message from a second domain, the second message being transmitted from a second domain device in the second domain and associated with the second user;

validating, at the control server, the second message by matching one or more elements of the first message to the second message;

causing transmission of a confirmation message to the second domain device in the second domain, the causing of the transmission of the confirmation message being based on the validating of the second message; and

causing transmission of the value from the control server in the first domain to an intermediary server in the second domain.

18. The non-transitory processor-readable storage medium of claim 17, wherein the validating of the second message further comprises:

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server, the confirmation code included within the second message; and

matching the first message to the second message based on the receiving of the confirmation code within the second message.

19. The non-transitory processor-readable storage medium of claim 17, wherein the validating of the second message further comprises:

receiving, at the control server from the second domain, the second user identification included within the second message; and

matching the first message to the second message based on the receiving of the second user identification within the second message.

20. The non-transitory processor-readable storage medium of claim 17, wherein the operations further comprise:

registering the second user with the control server and the first domain;

generating a identification token associated with the second user for the second domain, the identification token being configured to cause the second domain device to generate the second message;

in response to the first message, generating, by the control server, a confirmation code;

transmitting, by the control server in the first domain, the confirmation code to the first device;

receiving, at the control server from the second domain, the confirmation code and the identification token included within the second message; and

matching the first message to the second message based on determining, by the control server, that the second message includes the identification token and the confirmation code.