Techniques for call-based user verification

• US 9,461,998 B2
• Filed: 10/31/2014
• Issued: 10/04/2016
• Est. Priority Date: 10/31/2014
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Hettervik, Bradley Edward, Gadodia, Surendra, Liang, Xiao, Fu, Antony T., Fowler, Molly Jane
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US14/530,190
• Publication Number:
  US 20160127370A1
• Time in Patent Office: 704 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/01 Protocols

Abstract

Techniques for call-based user verification are described. In one embodiment, for example, an apparatus may comprise a processor circuit and a storage component. The apparatus may further comprise a session component, an identification (ID) component, a mapping component, and a verification component. The session component may be operative on the processor circuit and configured to receive session data from a client device and store the session data in the storage component. The ID component may be operative on the processor circuit and configured to request ID data from a server, receive ID data from the server, and send the ID data to the client device. The mapping component may be operative on the processor circuit and configured to map the session data with the ID data. The verification component may be operative on the processor circuit and configured to receive a confirmation from the client device, request verification from the server, and upon receiving verification from the server, verify the client device. Other embodiments are described and claimed.

Claims

1. A first server apparatus comprising:

a processor circuit;

a storage component;

a session component operative on the processor circuit and configured to receive session data from a client device and store the session data in the storage component;

an identification (ID) component operative on the processor circuit and configured to request ID data from a second server, receive ID data from the second server, and send the ID data to the client device, wherein the ID data comprises data that may be used by the client device to communicate with the second server;

a mapping component operative on the processor circuit and configured to map the session data with the ID data; and

a verification component operative on the processor circuit and configured to receive a confirmation message from the client device comprising an indication that the client device contacted the second server, request verification from the second server, the request comprising the ID data, and upon receiving a verification message from the second server, the verification message comprising an indication that the ID data was used to communicate with the second server, send a verification confirmation message to the client device when the indicated ID data maps to the session data of the client device.

2. The apparatus of claim 1, wherein verification from the second server is received when the client device contacts the second server using the ID data.

3. The apparatus of claim 2, wherein the ID data is a direct inward dial (DID) telephone number.

4. The apparatus of claim 2, wherein the verification from the second server is received when the client device contacts the second server using the ID data within a defined time period.

5. The apparatus of claim 4, wherein the ID data expires after the defined time period.

6. The apparatus of claim 2, wherein the verification from the second server is received after a communication between the client device and the second server is disconnected by the second server before the client device incurs a communication charge.

7. The apparatus of claim 2, wherein the verification from the second server is received after an originating telephone number associated with the client device is matched with a carrier associated with a communication between the client device and the second server.

8. A computer-implemented method executed on a first server, comprising:

at a session component operative on a processor circuit, receiving session data from a client device;

at the session component, storing the session data in a storage component;

at an identification (ID) component operative on the processor circuit, requesting ID data from a second server, wherein the ID data comprises data that may be used by the client device to communicate with the second server;

at the ID component, receiving the ID data from the second server;

at the ID component, sending the ID data to the client device;

at a mapping component operative on the processor circuit, mapping the session data with the ID data;

at a verification component operative on the processor circuit, receiving a confirmation message from the client device comprising an indication that the client device contacted the second server;

at the verification component, requesting verification from the second server, the request comprising the ID data; and

at the verification component, upon receiving a verification message from the second server, the verification message indicating that the ID data was used to communicate with the second server, sending a verification confirmation message to the client device when the indicated ID data maps to the session data of the client device.

9. The computer-implemented method of claim 8, wherein verification from the second server is received when the client device contacts the second server using the ID data.

10. The computer-implemented method of claim 9, wherein the ID data is a direct inward dial (DID) telephone number.

11. The computer-implemented method of claim 9, wherein the verification from the second server is received when the client device contacts the second server using the ID data within a defined time period.

12. The computer-implemented method of claim 11, wherein the ID data expires after the defined time period.

13. The computer-implemented method of claim 9, wherein the verification from the second server is received after a communication between the client device and the second server is disconnected by the second server before the client device incurs a communication charge.

14. The computer-implemented method of claim 9, wherein the verification from the second server is received after an originating telephone number associated with the client device is matched with a carrier associated with a communication between the client device and the second server.

15. An article comprising a non-transitory computer-readable storage medium including instructions that, when executed by a processor circuit, cause a first server system to:

at a session component operative on the processor circuit, receive session data from a client device;

at the session component, store the session data in a storage component;

at the ID component, receive ID data from a second server, wherein the ID data comprises data that may be used by the client device to communicate with the second server;

at the ID component, send the ID data to the client device;

at a mapping component operative on the processor circuit, map the session data with the ID data;

at a verification component operative on the processor circuit, receive a confirmation message from the client device comprising an indication that the client device contacted the second server;

at the verification component, request verification from the second server, the request comprising the ID data; and

at the verification component, upon receiving a verification message from the second server, the verification message comprising an indication that the ID data was used to communicate with the second server, send a verification confirmation message to the client device when the indicated ID data maps to the session data of the client device.

16. The article of claim 15, wherein verification from the second server is received when the client device contacts the second server using the ID data.

17. The article of claim 16, wherein the ID data is a direct inward dial (DID) telephone number.

18. The article of claim 16, wherein the verification from the second server is received when the client device contacts the second server using the ID data within a defined time period.

19. The article of claim 18, wherein the ID data expires after the defined time period.

20. The article of claim 16, wherein the verification from the second server is received after a communication between the client device and the second server is disconnected by the second server before the client device incurs a communication charge.

21. The article of claim 16, wherein the verification from the second server is received after an originating telephone number associated with the client device is matched with a carrier associated with a communication between the client device and the second server.