Remote authentication system

• US 8,918,637 B2
• Filed: 06/03/2013
• Issued: 12/23/2014
• Est. Priority Date: 04/17/2007
• Status: Active Grant

• Current Assignee: Visa USA, Inc. (Visa, Inc.)
• Original Assignee: Visa USA, Inc. (Visa, Inc.)
• Inventors: Wentker, David, Brand, Olivier, Dimmick, James, Singh Grewal, Tribhuwan A., Lindelsee, Michael
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US13/908,950
• Publication Number:
  US 20130269003A1
• Time in Patent Office: 568 Days
• Field of Search: 713/155
• US Class Current: 713/155
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

One embodiment of the invention is directed to a method including receiving an alias identifier associated with an account associated with a presenter, determining an associated trusted party using the alias identifier, sending a verification request message to the trusted party after determining the associated trusted party, and receiving a verification response message.

Claims

1. A method comprising:

a) providing, to a mobile device of a presenter by a server computer, an authentication request, wherein the authentication request is provided in response to a receipt of an alias identifier and a determination of (i) an account number associated with the alias identifier and (ii) an issuer that issued the account number, the issuer operating an issuer computer;

b) receiving, by the server computer, an authentication response comprising a PIN or password of the presenter;

c) transmitting, by the server computer, a request comprising transaction data comprising an account number and the PIN or password to the issuer computer; and

d) receiving, by the server computer, a response from the issuer computer validating the account number, and PIN or password of the presenter.

2. The method as recited in claim 1 further comprising:

receiving the alias identifier from the mobile device; and

determining the account number associated with the alias identifier.

3. The method of claim 1 wherein the mobile device is a mobile phone.

4. The method of claim 1 wherein the alias identifier was selected from among a plurality of alias identifiers.

5. The method of claim 1 wherein the alias identifier is a phone number associated with the mobile device.

6. The method of claim 1 wherein receiving, by the server computer, the authentication response comprising a PIN or password comprises receiving, by the server computer, the authentication response comprising the PIN.

7. The method of claim 1 wherein the authentication response is encrypted.

8. The method of claim 1 wherein the transaction data are encrypted.

9. A server computer comprising a processor and a computer readable medium, the computer readable medium comprising code, executable by the processor to implement a method comprising:

a) providing, to a mobile device of a presenter by the server computer, an authentication request, wherein the authentication request is provided in response to a receipt of an alias identifier and a determination of (i) an account number associated with the alias identifier and (ii) an issuer that issued the account number, the issuer operating an issuer computer;

b) receiving, by the server computer, an authentication response comprising a PIN or password of the presenter;

c) transmitting, by the server computer, a request comprising transaction data comprising an account number and the PIN or password to the issuer computer; and

d) receiving, by the server computer, a response from the issuer computer validating the account number, and PIN or password of the presenter.

10. The server computer of claim 9 wherein the method further comprises:

receiving the alias identifier from the mobile device; and

determining, the account number associated with the alias identifier.

11. The server computer of claim 9 wherein the mobile device is a mobile phone.

12. The server computer of claim 9 wherein the alias identifier was selected from among a plurality of alias identifiers.

13. The server computer of claim 9 wherein the alias identifier is a phone number associated with the mobile device.

14. The server computer of claim 9 wherein receiving, by the server computer, the authentication response comprising a PIN or password comprises receiving, by the server computer, the authentication response comprising the PIN.

15. The server computer of claim 9 wherein the authentication response is encrypted.

16. The server computer of claim 9 wherein the transaction data are encrypted.