Secure two-way authentication using encoded mobile image

• US 9,825,947 B2
• Filed: 10/13/2015
• Issued: 11/21/2017
• Est. Priority Date: 10/13/2014
• Status: Active Grant

• Current Assignee: Thryv, Inc. (Mudrick Capital Management LP)
• Original Assignee: Vivial Mobile LLC
• Inventors: Jass, Nicole, Brown, Matthew
• Primary Examiner(s): Lee, Jason
• Application Number:
  US14/882,321
• Publication Number:
  US 20160105434A1
• Time in Patent Office: 770 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

A digital authentication method, system, and related devices/media, the authentication method comprising displaying a web page comprising one or more website features on a first computing device, scanning the one or more website features with a second computing device, and sending information related to the one or more scanned website features from the second computing device to a processing system. The processing system uses the information to authenticate the web page on the first computing device and enable one or more web page components, with the information being related to the one or more scanned website feature.

Claims

1. A method of digital authentication comprising,

providing a scanning application on a second computing device prior to scanning one or more website features;

displaying a web page comprising the one or more website features on a first computing device;

scanning the one or more website features with a second computing device;

providing user profile information to at least one of the second computing device and the processing system prior to scanning the one or more website features;

sending information related to the one or more scanned website features from the second computing device to a processing system; and

using the information related to the one or more scanned website features to;

authenticate the web page on the first computing device, and

enable one or more web page components of the web page, the one or more web page components comprising at least one of (a) automatically setting up a new account on the web page with the user profile information, (b) completing a purchase on the web page, and (c) automatically logging the user into the website.

2. The method of claim 1 wherein:

the second computing device comprises a camera and a scanning application;

scanning the one or more website features with a second computing device comprises scanning the one or more website features with the scanning application; and

the scanning application utilizes the camera.

3. The method of claim 1 wherein, the user profile information comprises login information related to the web page.

4. The method of claim 1 wherein, using the information related to the one or more scanned website features to authenticate the web page on the first computing device comprises:

displaying a first image in the one or more website features;

displaying a second image in the scanning application; and

confirming that the first image and the second image are the same image.

5. The method of claim 4, further comprising, providing additional authentication information to the processing system, wherein the additional authentication comprises at least one of biometric information and password information.

6. A plurality of non-transitory, tangible, computer-readable storage medium across a plurality of devices, wherein the plurality of non-transitory, tangible, computer-readable storage medium are encoded with processor-readable instructions which, together, perform a method of authenticating a device comprising:

providing a scanning application on a second computing device prior to scanning one or more website features;

displaying a web page comprising the one or more website features on a first computing device;

scanning the one or more website features with the second computing device;

providing user profile information to at least one of the second computing device and the processing system prior to scanning the one or more website features;

sending information related to the one or more scanned website features from the second computing device to a processing system; and

using the information related to the one or more scanned website features to;

authenticate the web page on the first computing device, and

enable one or more web page components of the web page, the one or more web page components comprising at least one of (a) automatically setting up a new account on the web page with the user profile information, (b) completing a purchase on the web page, and (c) automatically logging the user into the website.

7. The non-transitory tangible computer-readable storage medium of claim 6 wherein, scanning the one or more website features comprises obtaining an image of the one or more website features with a second computing device imaging mechanism.

8. The non-transitory tangible computer-readable storage medium of claim 6 wherein:

the one or more website features comprise one website feature; and

the second computing device imaging mechanism comprises an on-board camera.

9. The non-transitory, tangible computer-readable storage medium of claim 8 wherein, sending information related to the one or more scanned website features from the second computing device to a processing system comprises sending information related to an image of the one or more website features to the processing system.

10. The non-transitory, tangible computer-readable storage medium of claim 6 further comprising:

sending additional information from the second computing device to a processing system one of before, after, or generally at the same time as when the information related to the one or more scanned website features is sent from the second computing device to a processing system; and

initiating a confirmation for display on the second computing device, wherein, the confirmation informs the user that at least one of the user and the website has been authenticated.

11. The non-transitory, tangible computer-readable storage medium of claim 10 wherein, the additional information comprises at least one of:

a token;

a previously-saved token;

a mobile barcode, a session ID;

user login information;

biometric information;

or password information.

12. A computing system comprising:

a first computing device for accessing a web page, wherein the web page comprises a single-use encoded image;

a second computing device comprising a scanning application for;

scanning the single-use encoded image,

providing user profile information to at least one of the second computing device and the processing system prior to scanning the one or more website features, and

creating a digital file associated with the single-use encoded image;

a processing device for;

receiving the digital file,

using the digital file to authenticate the web page on the first computing device, and sending information for engagement on the first computing device and the second computing device, and

responsive to receiving input that a user has determined that the information for engagement on the first computing device is the same as the information for engagement on the second computing device, enabling web page components, the web page components comprising at least one of (a) automatically setting up a new account on the web page with the user profile information, (b) completing a purchase on the web page, and (c) automatically logging the user into the website.

13. The computing system of claim 12 wherein, the information for engagement comprises at least one of:

one or more images;

or

one or more audio files.

14. A method of providing digital authentication comprising:

accessing a website from a mobile computing device, wherein the website comprises at least one website feature;

providing a scanning application on a second computing device prior to scanning the at least one or website feature;

displaying the at least one website feature on the mobile computing device;

selecting the at least one website feature;

launching a scanning application on the mobile computing device;

providing user profile information to the scanning application;

displaying first new information on the website;

displaying second new information in the scanning application;

selecting a scanning application feature when the first new information is the same as the second new information;

authenticating the website;

accessing one or more website features; and

enabling web page components, the web page components comprising at least one of (a) automatically setting up a new account on the web page with the user profile information, (b) completing a purchase on the web page, and (c) automatically logging the user into the website.

15. The method of claim 14 wherein,

the mobile computing device comprises a touch screen;

and

selecting the at least one website feature comprises tapping the at least one website feature on the touch screen.

16. The method of claim 14 further comprising, downloading the scanning application on the mobile computing device prior to launching the scanning application on the mobile computing device.

17. The method of claim 14 wherein, the initial information comprises at least one of:

a pin number;

a password; and

biometric information.

18. The method of claim 14, wherein the second information comprises an image related to the website.