System, method, and apparatus for authenticating a user device
AssigneeVisa International Service Association
InventorsVaibhav Prakash Gajre, Veerabhadraiah Lingadhalli Matadha, Akon Samir Dey
Life of this patent
Estimating the term…
Abstract
Provided is a method, system, and apparatus for authenticating a user device. The method includes registering a device identifier with at least one transformation rule, receiving a request for authentication comprising a device identifier associated with a user device, obtaining a one-time password (OTP) in response to receiving the request, communicating the OTP to the user device, receiving a transformed OTP from the user device, and authenticating the user device based on the OTP, the transformed OTP, and the at least one transformation rule.
Claims20
A computer-implemented method, comprising:
- registering, with at least one processor, a device identifier with at least one transformation rule;
- receiving, with at least one processor, a request for authentication comprising a device identifier associated with a user device;
- obtaining, with at least one processor, a one-time password (OTP) in response to receiving the request;
- communicating, with at least one processor, a message comprising the OTP to the user device;
- automatically parsing the message with an application executing on the user device;
- automatically extracting the OTP from the message with the application executing on the user device;
- automatically transforming the OTP with the application executing on the user device based on the at least one transformation rule to generate a transformed OTP, the at least one transformation rule configured to automatically expire within a predetermined time period;
- receiving, with at least one processor, the transformed OTP from the user device;
- and
- authenticating the user device, with at least one processor, based on the OTP, the transformed OTP, and the at least one transformation rule.
A system for authenticating a user device, comprising:
- a memory
- at least one processor programmed or configured to:
- register a user identifier with at least one transformation rule;
- receive, from a user device, a request for authentication comprising the user identifier;
- obtain a one-time password (OTP) in response to receiving the request;
- communicate a message comprising the OTP to the user device;
- automatically parse the message with an application executing on the user device;
- automatically extract the OTP from the message with the application executing on the user device;
- automatically transform the OTP with the application executing on the user device based on the at least one transformation rule to generate a transformed OTP, the at least one transformation rule configured to automatically expire within a predetermined time period;
- receive the transformed OTP from the user device;
- and
- authenticate the user device based on the OTP, the transformed OTP, and the at least one transformation rule.
A computer program product for authenticating a user device, comprising at least one non-transitory computer-readable medium comprising one or more instructions that, when executed by at least one processor, cause the at least one processor to:
- register a user identifier with at least one transformation rule;
- receive, from a user device, a request for authentication comprising the user identifier;
- obtain a one-time password (OTP) in response to receiving the request;
- communicate a message comprising the OTP to the user device;
- automatically parse the message with an application executing on the user device:
- automatically extract the OTP from the message with the application executing on the user device;
- automatically transform the OTP with the application executing on the user device based on the at least one transformation rule to generate a transformed OTP, the at least one transformation rule configured to automatically expire within a predetermined time period;
- receive the transformed OTP from the user device;
- and
- authenticate the user device based on the OTP, the transformed OTP, and the at least one transformation rule.
Dependencies are inferred from the claim text.