System and method of notifying mobile devices to complete transactions after additional agent verification

• US 9,532,222 B2
• Filed: 05/04/2016
• Issued: 12/27/2016
• Est. Priority Date: 03/03/2010
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Duo Security Incorporated (Cisco Systems, Inc.)
• Inventors: Oberheide, Jon, Abduljaber, Omar, Zhu, Boyang
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/146,223
• Publication Number:
  US 20160255505A1
• Time in Patent Office: 237 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A method of completing a transaction that requires authorization by an authority agent includes registering an authority device as associated with the authority agent, receiving a transaction request from a service provider; pushing an authentication notification to the authenticating application of the authority device; displaying the authentication notification, including a prompt to supply agent verification data, on the authority device; collecting and verifying the agent verification data; in response to verification of the agent verification data, transmitting an authority agent response from the authority device to the authentication platform, and, at the authentication platform, authenticating the authority agent response; and in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.

Claims

1. A method of completing a transaction that requires authorization by an authority agent, the method comprising:

registering, on an authentication platform, an authenticating application of an authority device as associated with the authority agent;

wherein the authority agent is recognized as an authorized user of the authority device by an operating system of the authority device;

receiving, at the authentication platform, an authentication policy from an administrator of a service provider;

wherein the authentication policy specifies that additional agent verification must be performed to complete the transaction;

receiving, at the authentication platform, a transaction request from the service provider;

wherein the transaction request is associated with the transaction;

in response to receiving the transaction request, pushing an authentication notification to the authenticating application of the authority device;

at the authentication application, displaying the authentication notification on the authority device;

wherein displaying the authentication notification comprises displaying a prompt directing the authority agent to perform a fingerprint scan at a fingerprint reader of the authority device;

at the authentication application, performing additional agent verification by verifying, locally and with the operating system, that the fingerprint scan is associated with the authorized user of the authority device;

in response to the additional agent verification, transmitting an authority agent response from the authentication application to the authentication platform, and, at the authentication platform, authenticating the authority agent response; and

in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.

2. The method of claim 1, wherein the authentication notification includes a selectable option that allows additional agent verification to be performed in absence of the fingerprint scan by verifying, locally and with the operating system, a numerical passcode submitted by the authority agent.

3. The method of claim 1, further comprising receiving approval of the transaction request from the authority agent;

wherein the authentication notification directs the authority agent to perform the fingerprint scan only after receiving approval of the transaction request from the authority agent;

wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of the additional agent verification and receiving approval of the transaction request from the authority agent.

4. The method of claim 1, further comprising prompting the authority agent to approve the transaction request after performing the additional agent verification;

wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of the additional agent verification and receiving approval of the transaction request from the authority agent.

5. A method of completing a transaction that requires authorization by an authority agent, the method comprising:

registering, on an authentication platform, an authority device as associated with the authority agent;

receiving, at the authentication platform, a transaction request from a service provider;

wherein the transaction request is associated with the transaction;

in response to receiving the transaction request, pushing an authentication notification to the authenticating application of the authority device;

at the authentication application, displaying the authentication notification on the authority device;

at the authentication application, receiving approval of the transaction request from the authority agent;

at the authentication application, directing the authority agent to perform a fingerprint scan only after receiving approval of the transaction request from the authority agent;

wherein the fingerprint scan is performed at a fingerprint reader of the authority device;

at the authentication application, collecting and verifying the fingerprint scan;

in response to verification of the fingerprint scan, transmitting an authority agent response from the authority device to the authentication platform, and, at the authentication platform, authenticating the authority agent response;

wherein transmitting the authority agent response comprises transmitting the authority agent response in response to both of performing the fingerprint scan and receiving approval of the transaction request from the authority agent; and

in response to authenticating the authority agent response, transmitting a transaction confirmation from the authentication platform to the service provider.

6. The method of claim 5, further comprising detecting, at the authentication platform, that the service provider is associated with a security-sensitive application;

and, in response to detecting that the service provider is associated with the security-sensitive application, automatically implementing an authentication policy that specifies that the fingerprint scan must be performed to complete the transaction.

7. The method of claim 6, wherein detecting, at the authentication platform, that the service provider is associated with a security-sensitive application comprises analyzing an identifier of the service provider with regard to a list of security-sensitive applications maintained at the authentication platform.

8. The method of claim 5, further comprising detecting, at the authentication platform, that the authority agent is a security-sensitive user;

and, in response to detecting that the authority agent is a security-sensitive user, automatically implementing an authentication policy that specifies that the fingerprint scan must be performed to complete the transaction.

9. The method of claim 8 wherein detecting, at the authentication platform, that the authority agent is a security-sensitive user comprises receiving identification of the authority agent as a security-sensitive user from the service provider.

10. The method of claim 5, further comprising detecting, at the authentication platform, that the authority device is a security-sensitive device;

and, in response to detecting that the authority device is a security-sensitive device, automatically implementing an authentication policy that specifies that the fingerprint scan must be performed to complete the transaction.

11. The method of claim 10, wherein detecting, at the authentication platform, that the authority device is a security-sensitive device comprises analyzing an identifier of the authority device with regard to a list of security-sensitive devices maintained at the authentication platform.

12. The method of claim 5, wherein verifying the fingerprint scan comprises verifying the fingerprint scan locally and without transmitting the fingerprint scan to the authentication platform.

13. The method of claim 5, wherein verifying the fingerprint scan comprises transmitting the fingerprint scan to the authentication platform and receiving verification of the fingerprint scan from the authentication platform.

14. The method of claim 13, further comprising encrypting the fingerprint scan prior to transmitting the fingerprint scan.

15. The method of claim 5, further comprising detecting, at the authentication platform, that the transaction request is a suspicious transaction request;

wherein directing the authority agent to perform the fingerprint scan comprises directing the authority agent to perform the fingerprint scan only in response to suspicious transaction requests.

16. The method of claim 15, wherein detecting that the transaction request is a suspicious transaction request comprises receiving indication from the service provider that the transaction request is a suspicious transaction request.

17. The method of claim 15, wherein detecting that the transaction request is a suspicious transaction request comprises detecting that the transaction request is a suspicious transaction request based on historical transaction request data stored at the authentication platform.