ONLINE TRANSACTION AUTHORIZATION VIA A MOBILE DEVICE APPLICATION

• US 20170206525A1
• Filed: 01/19/2016
• Published: 07/20/2017
• Est. Priority Date: 01/19/2016
• Status: Abandoned Application

• Current Assignee: Avctechnologies USA Incorporated (American Virtual Cloud Technologies, Inc.)
• Original Assignee: Genband US LLC (Ribbon Communications, Inc.)
• Inventors: Sylvain, Dany
• Application Number:
  US15/000,086
• Publication Number:
  US 20170206525A1
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules

Abstract

A method and system for providing a service node for authenticating online transactions. The authentication service node improves the ability to verify that an online transaction is made by an authenticated user. The authentication service node receives a request to authenticate a transaction, such as a purchase from an online merchant made by a purchaser using a first device and providing a user identifier such as a user name and password. The authentication service node identifies a second device associated with the provided user identifier, where the second device has been configured to validate inputs by a person associated with the provided user identifier. The service node sends the second device a request to confirm the online transaction and receives a determination specifying whether inputs providing by the user of second device match inputs provided previously by the user associated with the user identifier.

Claims

1. A method for providing an online transaction authentication service node, the method comprising:

receiving an external request to authenticate an online transaction initiated by a requesting user, wherein the requesting user making the online transaction is identified by a user identifier;

identifying at least one user authentication device associated with the user identifier, wherein the at least one user authentication device is configured to facilitate the authentication of the online transaction by collecting input from the requesting user associated with the user identifier;

sending an authentication request to authenticate the online transaction to the at least one user authentication device;

performing an online transaction authentication determination, wherein the online transaction authentication determination is made based on whether the input provided by the requesting user via the at least one user authentication device matches authentication inputs previously provided by the user associated with the user identifier;

responding to the external request with the online transaction authentication determination.

2. The method of claim 1, wherein the authentication determination is performed on the at least one authentication device using user input stored on the at least one authentication device.

3. The method of claim 1, wherein the authentication determination is performed on the service node using user input provided by the at least one authentication device.

4. The method of claim 1, wherein the input provided by the requesting user includes at least one of:

fingerprint input, iris scan input, facial recognition input, touchscreen input, motion sensor input, and voice input.

5. The method of claim 1, wherein the online transaction authentication is for a financial transaction performed via an online service.

6. The method of claim 1, wherein the online transaction authentication is for gaining authenticated access to an online service.

7. The method of claim 1, wherein the online transaction authentication consists of a two factor authentication, where the first factor is a user identifier and a password, and the second factor is provided by the online transaction authentication service node.

8. The method of claim 1, wherein the online transaction authentication consists of a one factor authentication, where the one factor is provided by the online transaction authentication service node.

9. The method of claim 1, wherein the authentication request includes transaction details associated with the online transaction authentication.

10. The method of claim 9, wherein the transaction details includes at least one of:

source of the external request, transaction type, transaction amount, transaction currency, merchandise description, merchandise picture, service description, contact information, address information, timestamp, validity time, and location of the transaction.

11. The method of claim 1, wherein the online transaction authentication determination further consists in obtaining the current location of the online transaction authentication device.

12. The method of claim 11, wherein the current location is compared against at least one authorized location for the transaction.

13. The method of claim 11, wherein the current location is provided to the external requester of the online transaction authentication.

14. The method of claim 12, wherein the at least one authorized locations is defined by the requesting user.

15. The method of claim 12, wherein the at least one authorized locations is defined by the external requester of the online transaction authentication.

16. The method of claim 1, wherein the sending by the service node of an authentication request is sent to at least two user authentication devices.

17. The method of claim 1, wherein the at least one user authentication device is one of:

smartphone, tablet, smartwatch, computer, gaming console, remote control, door entry system, smart TV, and camera.

18. A system for providing an online transaction authentication service node, the system comprising:

a processor; and

a memory coupled to the processor, the memory storing computer-readable instructions that, upon execution by the processor, cause the system to;

receive an external request to authenticate an online transaction initiated by a requesting user, wherein the requesting user making the online transaction is identified by a user identifier;

identify at least one user authentication device associated with the user identifier, wherein the at least one user authentication device is configured to facilitate the authentication of the online transaction by collecting input from the requesting user associated with the user identifier;

send an authentication request to authenticate the online transaction to the at least one user authentication device;

perform an online transaction authentication determination, wherein the online transaction authentication determination is made based on whether the input provided by the requesting user via the at least one user authentication device matches authentication inputs previously provided by the user associated with the user identifier;

respond to the external request with the online transaction authentication determination.

19. The system of claim 18, wherein the authentication determination is performed on the at least one authentication device using user input stored on the at least one authentication device.

20. The system of claim 18, wherein the authentication determination is performed on the service node using user input stored on the at least one authentication device.