# US 10,313,333 B2 · Expected response one-time password > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,333 B2 - Document ID: US10313333B2 - Status: Granted - Kind: B2 - Application number: 15/680,585 - Filed: 2017-08-18 - Published: 2017-11-30 - Granted: 2019-06-04 - Earliest claimed: 2015-09-21 - Assignees: American Express Travel Related Services Company, Inc. - Applicants: American Express Travel Related Services Company, Inc. - Inventors: Wael Ibrahim; Upendra Mardikar - Web page: https://patentgrep.com/patent/US10313333B2 ## CPC - H04L 63/0838: {using one-time-passwords} - G06Q 20/385: {using an alias or single-use codes} - G06Q 20/00: Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12) - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/10: {for controlling access to devices or network resources} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A system may generate a seed one-time password (OTP). The system may also perform steps including transmitting the seed OTP to a user device, receiving a response OTP from the user device, and calculating an expected response OTP by applying a function to the seed OTP. The system may then compare the response OTP to the expected response OTP and send a result in response to comparing the response OTP to the expected response OTP. ## Claims ### Claim 1 A method comprising: transmitting, by a processor, a seed one-time password (OTP) to a user device; receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device; calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device; determining, by the processor, that the response OTP satisfies the expected response OTP; and sending, by the processor, a result in response to the determining. ### Claim 2 (depends on 1) The method of claim 1, further comprising generating, by the processor, the seed OTP. ### Claim 3 (depends on 1) The method of claim 1, further comprising transmitting, by the processor, the seed OTP to an OTP validation server. ### Claim 4 (depends on 1) The method of claim 1, wherein the security utilities SDK is in communication with an OTP listening service. ### Claim 5 (depends on 1) The method of claim 1, wherein the response OTP is different from the seed OTP. ### Claim 6 (depends on 1) The method of claim 1, wherein the response OTP is generated using the function. ### Claim 7 (depends on 1) The method of claim 1, wherein in response to receiving the result from the processor, the user device requests confirmation. ### Claim 8 (depends on 1) The method of claim 1, further comprising receiving, by the processor, a request for the seed OTP, wherein the request includes a device identifier associated with the user device and a device fingerprint associated with the user device. ### Claim 9 (depends on 1) The method of claim 1, wherein in response to receiving the result from the processor, the user device displays a success notification screen, wherein the success notification screen is displayed along with at least one of a service name request, a purpose, a time, a merchant, a merchant locator, or an amount. ### Claim 10 (depends on 1) The method of claim 1, wherein the response OTP is transmitted by the user device to the processor in response to an authorization button being selected. ### Claim 11 (depends on 1) The method of claim 1, wherein the seed OTP is transmitted to the user device with an authorization payload including at least one of a service identifier, a purpose, a time, a date, a merchant identifier, or an amount of the seed OTP for display with an authorization button. ### Claim 12 (depends on 1) The method of claim 1, wherein the seed OTP is only valid for a predetermined time period. ### Claim 13 A computer-based system, comprising: a processor; and a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising: transmitting, by the processor, a seed OTP to a user device; receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device; calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device; determining, by the processor, that the response OTP satisfies the expected response OTP; and sending, by the processor, a result in response to the determining. ### Claim 14 (depends on 1) The method of claim 1, wherein the response OTP is received from the user device via text message. ### Claim 15 (depends on 1) The method of claim 1, further comprising transmitting, by the processor, the seed OTP to the user device via text message. ### Claim 16 (depends on 13) The system of claim 13, wherein the security utilities SDK is in communication with an OTP listening service. ### Claim 17 (depends on 13) The system of claim 13, wherein the response OTP is different from the seed OTP. ### Claim 18 (depends on 13) The system of claim 13, wherein the response OTP is generated using the function. ### Claim 19 (depends on 13) The system of claim 13, further comprising receiving, by the processor, a request for the seed OTP, wherein the request includes a device identifier associated with the user device and a device fingerprint associated with the user device. ### Claim 20 An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a processor, cause the processor to perform operations comprising: transmitting, by the processor, a seed OTP to a user device; receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device; calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device; determining, by the processor, that the response OTP satisfies the expected response OTP; and sending, by the processor, a result in response to the determining.