System and Method for Mobile or Web-Based Payment/Credential Process

• US 20150235215A1
• Filed: 08/13/2013
• Published: 08/20/2015
• Est. Priority Date: 08/16/2012
• Status: Active Application

• Current Assignee: Cort Co.
• Original Assignee: Tango Mobile LLC
• Inventors: Kumar, Himalesh Cherukuvada
• Application Number:
  US14/421,013
• Publication Number:
  US 20150235215A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The present disclosure describes systems and methods directed towards a highly secure and intelligent, end to end provisioning, authentication, and transaction system which creates and/or consolidates user data for a unified profile for the user (e.g., a person, place, organization, object, etc.) to allow for the safe, secure, and verifiable exchange of information.

Claims

1. A method comprising:

receiving credential data at a web server hosting a website, the credential data including a user identifier and a password of a user;

transmitting, from the web server to an authentication server, the credential data, a payment source identifier, a third party identifier of an entity, a web portal identifier associated with the website, and a transaction type identifier corresponding to a requested transaction type;

at the authentication server, authenticating the password and the web portal identifier based on the user identifier and the third party identifier;

transmitting a confirmation request from the authentication server to a device used by the user;

receiving a confirmation message from the user; and

performing a transaction corresponding to the requested transaction type for the user using a payment source corresponding to the payment source identifier.

2. The method of claim 1, further comprising:

transmitting a transaction identifier from the web server to the authentication server; and

authenticating the transaction identifier at the authentication server.

3. The method of claim 1, wherein the confirmation message includes a personal identification code of the user, the method further including authenticating the personal identification code at the authentication server.

4. The method of claim 1, wherein the user is prompted to enter the personal identification code responsive to a determination that a transaction amount for the requested transaction exceeds a predetermined threshold.

5. The method of claim 1, wherein the user is prompted to enter the personal identification code responsive to a determination that the device is currently in one of a predetermined set of locations.

6. The method of claim 1, further comprising:

transmitting an electronic message from the authentication server to an entity computer of an entity, wherein the electronic message includes a request for data;

at the authentication server, receiving the requested data from the entity computer;

wherein the transaction is performed for the user based on the received data.

7. The method of claim 1, further comprising:

transmitting an electronic message from the authentication server to an entity computer of the entity, wherein the electronic message includes a request for authorization of the requested transaction;

at the authentication server, receiving an electronic authorization from the entity computer;

wherein the transaction is performed for the user responsive to the received authorization from the entity computer.

8. The method of claim 1, further comprising:

transmitting an electronic message from the authentication server to an entity computer of the entity, wherein the electronic message includes updated transaction data for storage at the entity computer.

9. The method of claim 1, further comprising:

transmitting a first electronic message from the authentication server to an entity computer of the entity, wherein the first electronic message includes a notification of the requested transaction;

at the authentication server, receiving a second electronic message from the entity computer, wherein the second electronic message includes update data; and

transmitting the update data to the device used by the user.

10. A method comprising:

receiving credential data at an application executing on a mobile device of a user, the credential data including a user identifier and a password of the user;

transmitting, from the mobile device to an authentication server, the credential data, a payment source identifier, a third party identifier of an entity, a device identifier associated with the device, and a transaction type identifier corresponding to a requested transaction type;

at the authentication server, authenticating the password and the device identifier based on the user identifier and the third party identifier;

transmitting a confirmation request from the authentication server to the mobile device;

receiving a confirmation from the user; and

performing a transaction for the user corresponding to the requested transaction type.

11. The method of claim 10, further comprising:

transmitting a transaction identifier from the mobile device to the authentication server; and

authenticating the transaction identifier at the authentication server.

12. The method of claim 10, wherein the confirmation message includes a personal identification code of the user, the method further including authenticating the personal identification code at the authentication server.

13. The method of claim 10, wherein the user is prompted to enter the personal identification code responsive to a determination that a transaction amount for the requested transaction exceeds a predetermined threshold.

14. The method of claim 10, wherein the user is prompted to enter the personal identification code responsive to a determination that the device is currently in one of a predetermined set of locations.

15. The method of claim 10, further comprising:

transmitting an electronic message from the authentication server to an entity computer of an entity, wherein the electronic message includes a request for data;

at the authentication server, receiving the requested data from the entity computer;

wherein the transaction is performed for the user based on the received data.

16. The method of claim 10, further comprising:

transmitting an electronic message from the authentication server to an entity computer of an entity, wherein the electronic message includes a request for authorization of the requested transaction;

at the authentication server, receiving an electronic authorization from the entity computer;

wherein the transaction is performed for the user responsive to the received authorization from the entity computer.

17. The method of claim 10, further comprising:

transmitting an electronic message from the authentication server to an entity computer of an entity, wherein the electronic message includes updated transaction data for storage at the entity computer.

18. The method of claim 10, further comprising:

transmitting a first electronic message from the authentication server to an entity computer of an entity, wherein the first electronic message includes a notification of the requested transaction;

at the authentication server, receiving a second electronic message from the entity computer, wherein the second electronic message includes update data; and

transmitting the update data to the mobile device.

19. A method comprising:

receiving, at an authentication server, a user identifier, a password of a user, a payment source identifier, a third party identifier of an entity, a login source identifier, and a transaction type identifier corresponding to a requested transaction type;

authenticating the password and the login source identifier based on the user identifier and the third party identifier;

transmitting a confirmation request from the authentication server to a device used by the user;

receiving from the user a confirmation message including a personal identification code;

authenticating the personal identification code at the authentication server; and

performing a transaction corresponding to the requested transaction type for the user using a payment source corresponding to the payment source identifier.

20. The method of claim 19, further comprising:

receiving the user identifier and the password at a web server hosting a website; and

transmitting the user identifier and the password from the web server to the authentication server;

wherein the login source identifier is associated with the website.

21. The method of claim 19, wherein the device used by the user is a mobile device, the method further comprising:

receiving the user identifier and the password at an application executing on the mobile device; and

transmitting the user identifier and the password from the mobile device to the authentication server;

wherein the login source identifier is associated with the mobile device.