Systems and methods for accessing a secure electronic environment with a mobile device

• US 7,788,151 B2
• Filed: 06/25/2007
• Issued: 08/31/2010
• Est. Priority Date: 06/25/2007
• Status: Active Grant

• Current Assignee: Fidelity Information Services, LLC (Fidelity National Information Services Incorporated)
• Original Assignee: mFoundry Incorporated (Fidelity National Information Services Incorporated)
• Inventors: Pizzi, John E., Aigistorfer, Rodney
• Primary Examiner(s): Trammell; James P
• Assistant Examiner(s): Basit; Abdul
• Application Number:
  US11/768,139
• Publication Number:
  US 20080319887A1
• Time in Patent Office: 1,163 Days
• Field of Search: 705/35
• US Class Current: 705/35
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

The invention provides a system and methods for multifactor authentication of a mobile device for access to an electronic account. The mobile device may serve as one factor of a multifactor authentication process. A time based activation code may be generated in order to enroll an electronic account for mobile access.

Claims

1. A computer implemented method, comprising:

receiving, at a computing system, an indication that a customer seeks to access, using a mobile device of the customer, a banking account of the customer;

associating, at the computing system, a first mobile user identification (MUID) code with the banking account;

verifying, at the computing system, a customer verification code, the customer verification code being sent by the mobile device;

verifying, at the computing system, a second MUID code which uniquely identifies the mobile device, by comparing the second MUID code with the first MUID code previously associated with the banking account;

associating, at the computing system, a first customer number with the mobile device;

upon verification of the customer verification code and the second MUID code, (i) sending the first customer number from the computing system to the mobile device, and (ii) activating, at the computing system, the first customer number associated with the banking account;

registering, at the computing system, a first customer personal identification number, the first customer personal identification number entered by the customer; and

allowing, at the computing system, the mobile device to access the banking account.

2. The computer implemented method as in claim 1, wherein the customer verification code is assigned to the banking account within a specified period of time before verifying the customer verification code.

3. The computer implemented method as in claim 2, wherein the customer verification code expires if the specified period of time has elapsed.

4. The computer implemented method as in claim 1, wherein the mobile device sends the customer verification code through a mobile or data related network.

5. The computer implemented method of claim 1 wherein the second MUID code is at least one of, or a combination of a mobile identification code, an electronic serial number, an international mobile equipment identity, a network access identifier, and a phone number.

14. The computer implemented method as in claim 1, further comprising:

verifying, at the computing system, a second customer number by comparing the second customer number with the first customer number previously associated with the mobile device and the banking account, the second customer number sent by the mobile device when the customer signs on to the banking account with the mobile device;

verifying, at the computing system, a second customer personal identification number by comparing the second customer personal identification number with the first customer personal identification number registered at the computing system, the second customer personal identification number entered onto the mobile device when the customer signs on to the banking account with the mobile device.

15. The computer implemented method as in claim 14 wherein the second customer number is a factor of multifactor authorization.

16. The computer implemented method as in claim 14 wherein the second customer personal identification number is a factor of multifactor authorization.

17. The computer implemented method as in claim 14 wherein the second customer number is stored on the mobile device and automatically sent by the mobile device.

6. A machine readable storage medium containing instructions that, when executed by a data processing system, will cause the system to perform a computer implemented method, the method comprising:

receiving, at a data processing system, an indication that a customer seeks to access, using a mobile device of the customer, a banking account of the customer;

associating, at the data processing system, a first mobile user identification (MUID) code with the banking account;

verifying, at the data processing system, a customer verification code, the customer verification code being sent by the mobile device;

verifying, at the data processing system, a second MUID code which uniquely identifies the mobile device, by comparing the second MUID code with the first MUID code previously associated with the banking account;

associating, at the data processing system, a first customer number with the mobile device;

upon verification of the customer verification code and the second MUID code, (i) sending the first customer number from the data processing system to the mobile device, and (ii) activating, at the data processing system, the first customer number associated with the banking account;

registering, at the data processing system, a first customer personal identification number, the first customer personal identification number entered by the customer; and

allowing, at the data processing system, the mobile device to access the banking account.

7. The machine readable storage medium as in claim 6, wherein the customer verification code is assigned to the banking account within a specified period of time before verifying the customer verification code.

8. The machine readable storage medium as in claim 7, wherein the customer verification code expires if the specified period of time has elapsed.

18. The machine readable storage medium as in claim 6, further comprising:

verifying, at the data processing system, a second customer number by comparing the second customer number with the first customer number previously associated with the mobile device and the banking account, the second customer number sent by the mobile device when the customer signs on to the banking account with the mobile device;

verifying, at the data processing system, a second customer personal identification number by comparing the second customer personal identification number with the first customer personal identification number registered at the data processing system, the second customer personal identification number entered onto the mobile device when the user customer signs on to the banking account with the mobile device.

19. The machine readable storage medium as in claim 18 wherein the second customer number is a factor of multifactor authorization.

20. The machine readable storage medium as in claim 18 wherein the second customer personal identification number is a factor of multifactor authorization.

9. A computer implemented method, comprising:

sending an indication that a customer seeks to access, using a mobile device of the customer, a banking account of the customer;

sending a customer verification code, the customer verification code being sent by the mobile device to a secure electronic environment, wherein the banking account is protected within the secure electronic environment;

sending a first mobile user identification (MUID) code, the first MUID code uniquely identifying the mobile device and sent by the mobile device to the secure electronic environment so as to allow verification of the first MUID code in the secure electronic environment, the verification by comparing the first MUID code with a second MUID code associated with the banking account;

upon verifying the customer verification code and the first MUID code in the secure electronic environment, receiving, at the mobile device, (i) confirmation of an activation of a customer number at the mobile device and (ii) the customer number, wherein the customer number is associated with the banking account;

storing the customer number at the mobile device; and

sending a customer personal identification number from the mobile device to the secure electronic environment, the customer personal identification number entered by a the customer to access the banking account.

10. The computer implemented method as in claim 9 wherein the customer verification code is verified if the customer verification code has been created within a specific amount of time.

11. The computer implemented method of claim 9 wherein the first MUID code is at least one of or a combination of a mobile identification code, an electronic serial number, an international mobile equipment identity, a network access identifier, and a phone number.

12. A machine readable storage medium containing instructions that, when executed by a data processing system, will cause the system to perform a computer implemented method, the method comprising:

sending an indication that a customer seeks to access, using a mobile device of the customer, a banking account of the customer;

sending a customer verification code, the customer verification code being sent by the mobile device to a secure electronic environment, wherein the banking account is protected within the secure electronic environment;

sending a first mobile user identification (MUID) code, the first MUID code uniquely identifying the mobile device and sent by the mobile device to the secure electronic environment so as to allow verification of the first MUID code in the secure electronic environment, the verification by comparing the first MUID code with a second MUID code associated with the banking account;

upon verifying the customer verification code and the first MUID code in the secure electronic environment, receiving, at the mobile device, (i) confirmation of an activation of a customer number at the mobile device and (ii) the customer number, wherein the customer number is associated with the banking account;

storing the customer number at the mobile device; and

sending a customer personal identification number from the mobile device to the secure electronic environment, the customer personal identification number entered by the customer to access the banking account.

13. The machine readable storage medium as in claim 12 wherein the customer verification code is verified if the customer verification code has been created within a specific amount of time.