Systems and methods for authentication, verification, and payments

• US 9,015,813 B2
• Filed: 03/10/2014
• Issued: 04/21/2015
• Est. Priority Date: 11/21/2012
• Status: Active Grant

• Current Assignee: Series 111 of Allied Security Trust I (Allied Security Trust)
• Original Assignee: Jack Bicer
• Inventors: Bicer, Jack
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): LEUNG, ROBERT B
• Application Number:
  US14/203,380
• Publication Number:
  US 20150032578A1
• Time in Patent Office: 407 Days
• Field of Search: None
• US Class Current: 726/4
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0637 Approvals
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Computer systems and methods are provided for authenticating a user seeking to conduct at least one interaction with a secured capability provided by a computer. The method includes providing a first identifier to at least one verification server and providing a second identifier to an electronic device being used by the user. The first identifier and the second identifier each corresponds to the secured capability. The method further includes providing the electronic device with a user-selectable link configured to, upon being selected by the user, initiate a program to run on the electronic device. The program is configured to transmit a third identifier to the at least one verification server. The third identifier corresponds to the secured capability. The method further includes receiving authorization information from at least one of the electronic device and the at least one verification server. The method further includes using a processor (e.g., a processor of the computer) to provide the user with access to conduct the at least one interaction with the secured capability in response at least to the authorization information.

Claims

1. A method of authenticating a user seeking to conduct at least one interaction with a secured capability provided by a computer system, the method comprising:

using the computer system to provide a first identifier to at least one verification server, the first identifier corresponding to the secured capability;

using the computer system to provide, to an electronic device being used by the user, a user-selectable application-specific resource identifier with a second identifier corresponding to the secured capability, the user-selectable application-specific resource identifier configured to, upon being selected by the user, initiate an app to run on the electronic device, the app configured to access the second identifier, to access user verification information, and to transmit a third identifier and the user verification information to the at least one verification server, the third identifier corresponding to the secured capability;

using the computer system to receive authorization information from at least one of the electronic device and the at least one verification server, the authorization information indicative of the user being authorized to conduct the at least one interaction with the secured capability; and

using a processor of the computer system to provide the user with access to conduct the at least one interaction with the secured capability in response at least to the authorization information.

2. The method of claim 1, wherein at least two of the first identifier, the second identifier, and the third identifier match one another.

3. The method of claim 1, wherein at least two of the first identifier, the second identifier, and the third identifier are related to one another with a predetermined relationship.

4. The method of claim 1, wherein the user-selectable application-specific resource identifier comprises a specially-formatted uniform resource identifier (URI) compatible with a custom URI scheme.

5. The method of claim 1, wherein the user-selectable application-specific resource identifier is selectable by clicking one button.

6. The method of claim 1, wherein the authorization information is received from the at least one verification server.

7. The method of claim 1, wherein the at least one interaction comprises a purchase.

8. The method of claim 7, further comprising providing information regarding a company providing the secured capability, price, and shopping cart details to the at least one verification server.

9. The method of claim 8, further comprising providing the information to the electronic device.

10. The method of claim 7, wherein the authorization information comprises information regarding at least one of:

a company providing the secured capability, a shopping cart, and an amount that is to be paid.

11. The method of claim 7, further comprising sending a receipt signal to the electronic device.

12. The method of claim 1, wherein the at least one interaction comprises retrieval of information from or access to a secured internet portal.

13. The method of claim 12, further comprising providing information regarding a company providing the secured capability and regarding the secured internet portal to the at least one verification server.

14. The method of claim 13, further comprising providing the information to the electronic device.

15. The method of claim 1, wherein the computer and the at least one verification server are integrated with one another.

16. A non-transitory computer storage having stored thereon a computer program that instructs a computer system to authenticate a user seeking to conduct at least one interaction with a secured capability provided by the computer system by at least:

using the computer system to provide a first identifier to at least one verification server, the first identifier corresponding to the secured capability;

using the computer system to provide, to an electronic device being used by the user, a user-selectable application-specific resource identifier with a second identifier corresponding to the secured capability, the user-selectable application-specific resource identifier configured to, upon being selected by the user, initiate an app to run on the electronic device, the app configured to access the second identifier, to access user verification information, and to transmit a third identifier and the user verification information to the at least one verification server, the third identifier corresponding to the secured capability;

using the computer system to receive authorization information from at least one of the electronic device and the at least one verification server, the authorization information indicative of the user being authorized to conduct the at least one interaction with the secured capability; and

using a processor of the computer system to provide the user with access to conduct the at least one interaction with the secured capability in response at least to the authorization information.

17. The non-transitory computer storage of claim 16, wherein the user-selectable application-specific resource identifier comprises a specially-formatted uniform resource identifier (URI) compatible with a custom URI scheme.

18. The non-transitory computer storage of claim 16, wherein the at least one interaction comprises a purchase or retrieval of information from or access to a secured internet portal.

19. The non-transitory computer storage of claim 16, wherein at least two of the first identifier, the second identifier, and the third identifier match one another or are related to one another with a predetermined relationship.

20. A computer system hosting a secured capability with which a user is seeking to conduct at least one interaction, the computer system comprising:

a memory; and

a processor configured to;

provide a first identifier to at least one verification server, the first identifier corresponding to the secured capability;

provide, to an electronic device being used by the user, a user-selectable application-specific resource identifier with a second identifier corresponding to the secured capability, the user-selectable application-specific resource identifier configured to, upon being selected by the user, initiate an app to run on the electronic device, the app configured to access the second identifier, to access user verification information, and to transmit a third identifier and the user verification information to the at least one verification server, the third identifier corresponding to the secured capability;

receive authorization information from at least one of the electronic device and the at least one verification server, the authorization information indicative of the user being authorized to conduct the at least one interaction with the secured capability; and

provide the user with access to conduct the at least one interaction with the secured capability in response at least to the authorization information.

21. The computer system of claim 20, wherein the computer system and the at least one verification server are integrated with one another.

22. The computer system of claim 20, wherein the at least one interaction comprises a purchase.

23. The computer system of claim 22, wherein the processor is further configured to provide information regarding a company providing the secured capability, price, and shopping cart details to the at least one verification server.

24. The computer system of claim 23, wherein the processor is further configured to provide the information to the electronic device.

25. The computer system of claim 22, wherein the authorization information comprises information regarding at least one of:

a company providing the secured capability, a shopping cart, and an amount that is to be paid.

26. The computer system of claim 22, wherein the processor is further configured to send a receipt signal to the electronic device.