Back to results
US 11,108,558 B2Granted
Authentication and fraud prevention architecture
AssigneeVisa International Service Association
InventorEric Vortriede
Life of this patent
Estimating the term…
Abstract
Embodiments of the invention are directed to authentication and authorization methods. The authentication process can involve a user device interacting with an access device that is within a proximity of the user device to help ensure that the user device is near a location of the access device. The access device can assist with the authentication, either at the access device or via a communications network to an authentication computer. For example, embodiments can provide mechanisms for authentication of a user device at an access device before the user device is authenticated and authorized access to a building.
Claims14
A method comprising:
- receiving, at an authentication computer, an authentication request message, wherein the authentication request message includes a user device identifier that uniquely identifies a user device to the authentication computer, authentication data associated with an access device, and a received cryptogram, wherein the authentication data includes a timestamp, an access device identifier corresponding to the access device and uniquely identifies the access device to the authentication computer, wherein the received cryptogram is generated from the access device identifier and a user device credential;
- selecting the user device credential from a set of user device credentials using the user device identifier and based on a portion of the timestamp, the user device credential selected to correspond to the user device, wherein the user device credential is registered with the authentication computer in association with the user device, wherein the selecting the user device credential comprises dividing the portion of the timestamp by a number of user device credentials in the set of user device credentials and using a remainder from the dividing;
- in response to the selecting the user device credential, generating a generated cryptogram using the access device identifier and the user device credential, wherein the generating the generated cryptogram includes:
- generating a user device cryptogram using the access device identifier and the user device credential, selecting an access device credential stored at the authentication computer using the user device identifier, and generating the generated cryptogram using the user device cryptogram and the access device credential, wherein the access device credential comprises a user credential provided to the access device;
- comparing the received cryptogram and the generated cryptogram;
- and
- based on the received cryptogram and the generated cryptogram matching, transmitting an authentication response message to the access device to instruct the access device that the user device is authenticated, thereby causing the access device to proceed with a process for granting access to the user device.
4 more elements
An authentication computer comprising:
- a memory;
- one or more processors;
- and
- a non-transitory computer readable medium storing a plurality of instructions for controlling the one or more processors to perform operations comprising:
- receiving an authentication request message, wherein the authentication request message includes a user device identifier that uniquely identifies a user device to the authentication computer, authentication data associated with an access device, and a received cryptogram, wherein the authentication data includes a timestamp, an access device identifier corresponding to the access device and uniquely identifies the access device to the authentication computer, wherein the received cryptogram is generated from the access device identifier and a user device credential;
- selecting the user device credential from a set of user device credentials using the user device identifier and based on a portion of the timestamp, the user device credential selected to correspond to the user device, wherein the user device credential is registered with the authentication computer in association with the user device, wherein the selecting the user device credential comprises dividing the portion of the timestamp by a number of user device credentials in the set of user device credentials and using a remainder from the dividing;
- in response to the selecting the user device credential, generating a generated cryptogram using the access device identifier and the user device credential, wherein the generating the generated cryptogram includes:
- generating a user device cryptogram using the access device identifier and the user device credential, selecting an access device credential stored at the authentication computer using the user device identifier, and generating the generated cryptogram using the user device cryptogram and the access device credential, wherein the access device credential comprises a user credential provided to the access device;
- comparing the received cryptogram and the generated cryptogram;
- and
- based on the received cryptogram and the generated cryptogram matching, transmitting an authentication response message to the access device to instruct the access device that the user device is authenticated, thereby causing the access device to proceed with a process for granting access to the user device.
8 more elements
Dependencies are inferred from the claim text.