SYSTEMS AND METHODS FOR INTELLIGENT STEP-UP FOR ACCESS CONTROL SYSTEMS

• US 20200134626A1
• Filed: 10/29/2019
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Abouelenin, Mohamed
• Granted Patent: US 11,494,768 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Some embodiments may provide systems, methods and computer program code to method to facilitate an interaction involving a user which include determining that a user authentication is required to complete the interaction, identifying at least a first verified device associated with the user, and transmitting an authentication message to the at least first verified device.

Claims

1. A computerized method to facilitate an interaction involving a user, the method comprising:

determining that a user authentication is required to complete the interaction;

identifying at least a first verified device associated with the user; and

transmitting an authentication message to the at least first verified device.

2. The computerized method of claim 1, further comprising:

identifying at least a second verified device associated with the user;

presenting information associated with the at least first and second verified devices to the user; and

receiving a selection from the user of the at least first verified device.

3. The computerized method of claim 2, wherein the interaction is a payment transaction involving the user and a merchant, the method further comprising:

receiving a payment authorization request from the merchant, the payment authorization request including information usable to identify a payment account associated with the user;

wherein the identifying at least a first and a second verified device associated with the user includes identifying at least a first and a second verified device associated with the payment account associated with the user.

4. The computerized method of claim 3, wherein determining that a user authentication is required further comprises:

determining that an increased authentication is required for the transaction.

5. The computerized method of claim 3, further comprising:

receiving an authentication response from the at least first verified device; and

transmitting an authorization response to the merchant to complete the payment transaction.

6. The computerized method of claim 1, wherein the interaction is an interaction to perform expedited verification of a user device, the method further comprising:

receiving a request from the user to register the user device as an at least second verified device associated with the user.

7. The computerized method of claim 6, further comprising:

receiving an authentication response message from the at least first verified device;

generating a token for association with the user device; and

providing the token to the user device to register the user device as an at least second verified device associated with the user.

8. The computerized method of claim 7, wherein the token is usable to identify the at least second verified device and a payment account of the user.

9. The computerized method of claim 1, wherein the interaction is a transaction involving the user and a service provider.

10. A system to facilitate interactions, comprising:

a first communication port to exchange information associated with at least one of a merchant device and a user device;

an issuer system, coupled to the first communication port, including a computer processor a memory storing instructions to cause the computer processor to;

determine that a user authentication is required to complete the interaction;

identify at least a first verified device associated with the user; and

transmit an authentication message to the at least first verified device.

11. The system of claim 10, wherein the memory further stores instructions to cause the computer processor to:

identify at least a second verified device associated with the user;

present information associated with the at least first and second verified devices to the user; and

receive a selection from the user of the at least first verified device.

12. The system of claim 11, wherein the interaction is a payment transaction involving the user and a merchant, and the memory further stores instructions to cause the computer processor to:

receive a payment authorization request from the merchant, the payment authorization request including information usable to identify a payment account associated with the user;

wherein the identifying at least a first and a second verified device associated with the user includes identifying at least a first and a second verified device associated with the payment account associated with the user.

13. The system of claim 12, wherein the instructions to determine that a user authentication is required further comprises instructions to:

determine that an increased authentication is required for the transaction.

14. The system of claim 12, further comprising instructions to:

receive an authentication response from the at least first verified device; and

transmit an authorization response to the merchant to complete the payment transaction.

15. The system of claim 10, wherein the interaction is an interaction to perform expedited verification of a user device, and the memory further stores instructions to cause the computer processor to:

receive a request from the user to register the user device as an at least second verified device associated with the user.

16. The system of claim 15, further comprising instructions to:

receive an authentication response message from the at least first verified device;

generate a token for association with the user device; and

provide the token to the user device to register the user device as an at least second verified device associated with the user.

17. The system of claim 16, wherein the token is usable to identify the at least second verified device and a payment account of the user.

18. The system of claim 10, wherein the interaction is between the user and a service provider.

19. A non-tangible, computer-readable medium storing instructions, that, when executed by a processor, cause the processor to perform a method to conduct an interaction, the method comprising:

determining that a user authentication is required to complete the interaction;

identifying at least a first verified device associated with the user; and

transmitting an authentication message to the at least first verified device.