US 10,762,181 B2Granted

System and method for user confirmation of online transactions

AssigneeNok Nok Labs, Inc.

InventorDavit Baghdasaryan

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system, apparatus, method, and machine readable medium are described for confirming a user transaction. For example, one embodiment of a method comprises: detecting at a relying party a transaction triggered by a first user over a network and performing one or more authentication techniques to authenticate the first user to the relying party over the network; identifying one or more other users who are required to confirm the transaction before allowing the transaction to be performed, the one or more other users being registered with the relying party; transmitting notifications to the one or more other users or a subset thereof indicating that a transaction has been triggered by the first user; and the one or more other users or subset thereof confirming the transaction by performing remote authentication with the relying party over the network.

Claims27

Dependent claims

A method for remote user confirmation of online transaction with a relying party, the method comprising:

detecting, via a secure transaction server of the relying party, a transaction between a first user and the relying party triggered by the first user of a first client device over a network, and performing one or more authentication techniques, via authentication engine circuitry on the first client device, to authenticate the first user to the relying party over the network;
identifying, via database querying circuitry, one or more other users who are required to confirm the transaction before allowing the transaction to be performed, the one or more other users previously registered with the relying party as approvers for the first user and are users other than the first user;
transmitting notifications, via notification generation logic circuitry, to the one or more other users or a subset thereof indicating that a transaction has been triggered by the first user, the notifications comprising a link which, upon selection by the one or more other users or subset thereof, provides details of the transaction being attempted by the first user;
the one or more other users or subset thereof confirming the transaction by performing remote authentication via secure transaction program code executed on a respective remote client device of the one or more other users or subset thereof with the relying party over the network, wherein the secure transaction program code executed on the respective remote client device of the one or more other users or subset thereof is to generate and transmit a token to the relying party responsive to a successful authentication, the token comprising a signature over the transaction details and a nonce provided by the relying party;
and
permitting the transaction between the first user and the relying party responsive to receiving the token from the remote client device of each of the one or more other users or subset thereof.

3 more elements

A system for remote user confirmation of online transaction with a relying party, the system comprising:

a secure transaction server of the relying party to detect a transaction triggered by a first user of a first client device over a network and to responsively perform one or more authentication techniques, via authentication engine circuitry on the first client device, to authenticate the first user over the network;
a database to store user data, wherein the relying party is to query the database to identify one or more other users who are required to confirm the transaction before allowing the transaction to be performed, the one or more other users previously registered with the relying party as approvers for the first user and are users other than the first user;
notification generation logic circuitry of the relying party to transmit notifications to the one or more other users or a subset thereof indicating that a transaction has been triggered by the first user, the notifications comprising a link which, upon selection by the one or more other users or subset thereof, provides details of the transaction being attempted by the first user;
and
secure transaction program code executed on a respective remote client device of the one or more other users or subset thereof to confirm the transaction by performing remote authentication with the relying party over the network, the secure transaction program code executed on the respective remote client device of the one or more other users or subset thereof further to generate and transmit a token to the relying party responsive to a successful authentication, the token comprising a signature over the transaction details and a nonce provided by the relying party;
wherein there relying party is to permit the transaction triggered by the first user responsive to receiving the token from the remote client device of each of the one or more other users or subset thereof.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/218,677Filed 18 Mar 2014 · us provisional application
Priority: 22 Mar 2013
Published: US 2014/0289117 A125 Sep 2014
Granted: 1 Sep 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification32 codes

G06F 21/32
User authentication: using biometric data, e.g. fingerprints, iris scans or voiceprints
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06Q 20/204
Point-of-sale [POS] network systems: comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
G06Q 20/3224
Aspects of commerce using mobile devices [M-devices]: transactions dependent on location of M-devices