# US 10,311,435 B2 · System and method for transaction authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,311,435 B2 - Document ID: US10311435B2 - Status: Granted - Kind: B2 - Application number: 14/220,547 - Filed: 2014-03-20 - Published: 2014-10-02 - Granted: 2019-06-04 - Earliest claimed: 2013-03-28 - Assignees: MorphoTrust USA, LLC - Applicants: MorphoTrust USA Inc. - Inventors: Robert Andrew Eckel; Mohamed Lazzouni - Web page: https://patentgrep.com/patent/US10311435B2 ## CPC - G06Q 20/4014: {Identity check for transactions} - G06Q 20/3226: {Use of secure elements separate from M-devices} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Some implementations provide a method that includes: generating an association, at a mobile device, between a government-issued identification document of a user and a mode of payment; receiving, at the mobile device, a presentation of the government-issued identification document of the user to support a request for payment; validating whether the presented government-issued identification document is a valid identification of the user; and in response to validating the presented government-issued identification document, proceeding with payment by using the mode of payment. ## Claims ### Claim 1 A method, comprising: generating, at a mobile device, an association between a government-issued identification document of a user and an account of the user, wherein the association enables use of the government-issued identification document as a credential to process a transaction using the account of the user; receiving, at the mobile device and using a sensing detector of the mobile device, a presentation of the government-issued identification document of the user for processing the transaction; obtaining, by the mobile device and using the sensing detector, encoded information from a machine-readable zone (MRZ) on the government-issued identification document, the encoded information including one of a digital watermark or personal identification information (PII) corresponding to the user of the government-issued identification document; validating authenticity of the government-issued identification document based on the encoded information obtained using the sensing detector of the mobile device, wherein validating authenticity includes at least: extracting, using a processor of the mobile device, encoded spectrum or spatial information for one of the digital watermark or the PII; and identifying a pattern that is compared with a known pattern to validate authenticity of the government-issued identification document based on analysis of the encoded spectrum or spatial information; and in response to validating the authenticity of the government-issued identification document, processing the transaction using the account of the user. ### Claim 2 (depends on 1) The method of claim 1, wherein generating the association further comprises: registering, on the mobile device, the account of the user to support processing the transaction; and authenticating that the user owns the account. ### Claim 3 (depends on 2) The method of claim 2, wherein generating the association further comprises: associating, on the mobile device, the authenticated account with the government-issued identification document. ### Claim 4 (depends on 3) The method of claim 3, wherein the associating further comprises: linking the authenticated account owned by a first user to a government-issued identification document held by a second user, the second user being different from the first user. ### Claim 5 (depends on 2) The method of claim 2, wherein registering the account further comprises: registering a bank account, an intermediary account, or a credit card account. ### Claim 6 (depends on 1) The method of claim 1, further comprising: comparing, at the mobile device, portions of identity information obtained from the MRZ to one another as part of validating the authenticity of the government-issued identification document. ### Claim 7 (depends on 6) The method of claim 6, wherein the validating authenticity further comprises: checking the digital watermark or the PII obtained from the MRZ against a system of record. ### Claim 8 (depends on 7) The method of claim 7, wherein the validating authenticity further comprises: transmitting, by the mobile device, the digital watermark or the PII obtained from the MRZ to a server hosting the system of record; and receiving, at the mobile device and from the server, validation results of checking the digital watermark or the PII against the system of record. ### Claim 9 (depends on 2) The method of claim 2, wherein processing the transaction comprises drawing funds from the registered account to fulfill the request for compensation using the account of the user without additional authentication that the user owns the registered account. ### Claim 10 (depends on 9) The method of claim 9, wherein processing the transaction comprises drawing funds from the registered account of a first user to fulfill the request for compensation using the account of the first user, wherein the request is from a second user that is different from the first user. ### Claim 11 (depends on 1) The method of claim 1, wherein processing the transaction comprises paying through a debit card without presenting the debit card, paying through an intermediary account without authentication for the intermediary account, or paying through a credit card without presenting the credit card. ### Claim 12 (depends on 1) The method of claim 1, wherein the PII includes at least one of name, address, social security number, date and place of birth, occupation, marital status, gender, eye color, hair color, height, weight, blood type, nationality, mother's maiden name, biometric records, medical information, educational information, financial information, or employment information. ### Claim 13 (depends on 1) The method of claim 1, wherein obtaining the encoded information from the MRZ on the government-issued identification document comprises obtaining, using the sensing detector, the digital watermark that is embedded in the government-issued identification document, and wherein validating the authenticity of the government-issued identification document based on the encoded information obtained by the mobile device further comprises: extracting frequency domain information from the digital watermark or the PII; identifying a pattern encoded in the frequency domain information; comparing the identified pattern to a known pattern; based on the comparison, determining whether there is a match between the identified pattern and the known pattern; and in response to determining that there is a match between the identified pattern and the known pattern, validating the government-issued identification document as authentic. ### Claim 14 (depends on 13) The method of claim 13, wherein the frequency domain information is encrypted in the digital watermark or encrypted in the PII. ### Claim 15 A mobile device, comprising a sensing detector and at least one processor configured to: generate an association between a government-issued identification document of a user and an account of the user, wherein the association enables use of the government-issued identification document as a credential to process a transaction using the account of the user; receive, using the sensing detector, a presentation of the government-issued identification document of the user for processing the transaction; obtain, using the sensing detector and the at least one processor, encoded information from a machine-readable zone (MRZ) on the government-issued identification document, the encoded information including one of a digital watermark or personal identification information (PII) corresponding to the user of the government-issued identification document; validate authenticity of the government-issued identification document based on the encoded information obtained by the mobile device, wherein validating authenticity includes at least: extracting, using the at least one processor, encoded spectrum or spatial information for one of the digital watermark or the PII; and identifying a pattern that is compared with a known pattern to validate authenticity of the government-issued identification document based on analysis of the encoded spectrum or spatial information; and in response to validating the authenticity of the government-issued identification document, process the transaction using the account of the user. ### Claim 16 (depends on 15) The mobile device of claim 15, wherein the at least one processor is further configured to: register the account of the user on the mobile device to support processing the transaction; and authenticate that the user owns the account. ### Claim 17 (depends on 16) The mobile device of claim 16, wherein the at least one processor is further configured to: associate the authenticated account with the government-issued identification document. ### Claim 18 (depends on 17) The mobile device of claim 17, wherein the at least one processor is further configured to associate the authenticated account with the government-issued identification document by linking the authenticated account owned by a first user to a government-issued identification document held by a second user that is different from the first user. ### Claim 19 (depends on 16) The mobile device of claim 16, wherein the at least one processor is further configured to register the account by registering a bank account, an intermediary account, or a credit card account. ### Claim 20 (depends on 15) The mobile device of claim 15, wherein the at least one processor is further configured to: compare portions of identity information obtained from the MRZ to one another as part of validating the authenticity of the government-issued identification document. ### Claim 21 (depends on 20) The mobile device of claim 20, wherein the at least one processor is further configured to: check the digital watermark or the PII obtained from the MRZ against a system of record. ### Claim 22 (depends on 21) The mobile device of claim 21, wherein the at least one processor is further configured to: transmit the digital watermark or the PII obtained from the MRZ to a server hosting the system of record; and receive, from the server, validation results of checking the PII against the system of record. ### Claim 23 (depends on 16) The mobile device of claim 16, wherein the at least one processor is further configured to process the transaction by drawing funds from the registered account to fulfill the request for compensation using the account of the user without additional authentication that the user owns the registered account. ### Claim 24 (depends on 23) The mobile device of claim 23, wherein the at least one processor is further configured to process the transaction by drawing funds from the registered account of a first user to fulfill the request for compensation using the account of the first user, wherein the request is from a second user, different from the first user. ### Claim 25 (depends on 15) The mobile device of claim 15, wherein the at least one processor is further configured to process the transaction by paying through a debit card without presenting the debit card, paying through an intermediary account without authentication for the intermediary account, or paying through a credit card without presenting the credit card. ### Claim 26 (depends on 15) The device of claim 15, wherein the PII includes at least one of name, address, social security number, date and place of birth, occupation, marital status, gender, eye color, hair color, height, weight, blood type, nationality, mother's maiden name, biometric records, medical information, educational information, financial information, or employment information. ### Claim 27 A computer-implemented method, comprising: generating, at a mobile device, an association between a government-issued identification document of a user and an account of the user, wherein the association enables use of the government-issued identification document as a credential to process a transaction using the account of the user; receiving, at a server and from the mobile device, correlated information obtained by the mobile device when the mobile device optically scans, using a sensing detector of the mobile device, a machine-readable zone (MRZ) of the government-issued identification document of the user, the government-issued identification document being presented at the mobile device, wherein the correlated information are encoded in the MRZ and include one of a digital watermark or personal identification information (PII) corresponding to the user of the government-issued identification document; validating, by the server, the correlated information against a system of record hosted by the server, wherein validating the correlated information includes at least: extracting, using a processor of the server, encoded spectrum or spatial information of the digital watermark or the PII; and identifying, using the processor of the server, a pattern that is compared with a known pattern to validate the correlated information and authenticity of the government-issued identification document based on analysis of the encoded spectrum or spatial information; generating, by the server, result data indicating whether the government-issued identification document is valid based on the validating; and transmitting, by the server and to the mobile device, an indication that the government-issued identification document is valid, wherein the mobile device processes the transaction based on the indication generated by the server and with no additional checking. ### Claim 28 (depends on 27) The computer implemented method of claim 27, wherein validating the correlated information comprises checking the correlated information against the system of record administered by a government entity. ### Claim 29 (depends on 28) The computer implemented method of claim 28, wherein validating the correlated information comprises: transmitting, by the server and to the government entity, the correlated information; and receiving, by the server and from the government entity, results of checking the correlated information against the system of record. ### Claim 30 (depends on 27) The method of claim 27, wherein the PII includes at least one of name, address, social security number, date and place of birth, occupation, marital status, gender, eye color, hair color, height, weight, blood type, nationality, mother's maiden name, biometric records, medical information, educational information, financial information, or employment information. ### Claim 31 A non-transitory computer-readable medium comprising software instructions that when executed by one or more processors, cause the one or more processors to: receive, from a mobile device of a user, a request for a mobile transaction; generate an association between a government-issued identification document of the user and an account of the user, the association enables use of the government-issued identification document as a credential for processing a transaction using the account of the user; obtain, by the mobile device and using a sensing detector of the mobile device, a digital watermark that is embedded in the government-issued identification document presented by the user and that documents an identify of a subject; analyze information encoded in the digital watermark, the information indicating authenticity of the government-issued identification document, wherein analyzing the information includes at least: extracting spectrum or spatial information encoded in the digital watermark; and identifying a pattern that is compared with a known pattern to validate authenticity of the government-issued identification document using the extracted spectrum or spatial information; validate the authenticity of the government-issued identification document based on analysis of the extracted spectrum or spatial information encoded in the digital watermark; and in response to validating the authenticity of the government-issued identification document, authenticate the user as authorized to request the mobile transaction being requested from the mobile device.