Back to results
US 11,770,369 B2Granted
System and method for identity verification across mobile applications
AssigneeVisa International Service Association
InventorsVishwanath Shastry, Shalini Mayor
Life of this patent
Estimating the term…
Abstract
Embodiments are directed to methods, apparatuses, computer readable media and systems for authenticating a user on a user device across multiple mobile applications. The identity of the user is validated by encoding and subsequently validating cryptographically encrypted data in a shared data store accessible by the mobile applications tied to the same entity. Specifically, the application leverages the authentication process of a trusted mobile application (e.g. a banking mobile application) to authenticate the same user on a untrusted mobile application (e.g. a merchant mobile application).
Claims20
A method comprising:
- receiving, by a server computer, user data associated with a user from a first mobile application;
- determining, by the server computer, that the first mobile application is a trusted application provisioned in a secure execution environment of a user device of the user by a trusted entity;
- authenticating, by the server computer, the user based on the user data using an authentication process;
- sending, by the server computer, a first cryptographic key to the first mobile application;
- receiving, by the server computer, an identity verification cryptogram generated by the first mobile application using the first cryptographic key from a second mobile application, wherein the first mobile application and the second mobile application are associated with the user;
- validating, by the server computer, that the identity verification cryptogram was generated using the first cryptographic key previously sent by the server computer to the first mobile application;
- and
- sending, by the server computer, a second cryptographic key to the second mobile application upon validating the identity verification cryptogram, wherein the second mobile application is programmed to complete a transaction using a transaction cryptogram generated by the second mobile application using the second cryptographic key.
5 more elements
A system comprising:
- a server computer including:
- a processor;
- and
- a server-side computer readable medium coupled to the processor, the server-side computer readable medium comprising code which, when executed by the processor, causes the processor to:
- receive user data associated with a user from a first mobile application;
- determine that the first mobile application is a trusted application provisioned in a secure execution environment of a user device of the user by a trusted entity;
- authenticate the user based on the user data;
- send a first cryptographic key to the first mobile application;
- receive an identity verification cryptogram generated by the first mobile application using the first cryptographic key from a second mobile application, wherein the first mobile application and the second mobile application are associated with the user;
- validate that the identity verification cryptogram was generated using the first cryptographic key previously sent by the server computer to the first mobile application;
- and
- send a second cryptographic key to the second mobile application upon validating the identity verification cryptogram;
- and
- a computer readable medium storing the second mobile application, wherein the second mobile application is programmed to complete a transaction using a transaction cryptogram generated by the second mobile application using the second cryptographic key.
11 more elements
A method comprising:
- transmitting, by a first mobile application at a user device, a first set of user data associated with a user to a server computer, wherein the first mobile application is a trusted application provisioned in a secure execution environment of the user device by a trusted entity;
- receiving, by the first mobile application, a first cryptographic key from the server computer;
- generating, by the first mobile application, an identity verification cryptogram using the first cryptographic key;
- providing, by the first mobile application, the identity verification cryptogram to a second mobile application associated with the user;
- transmitting, by the second mobile application, the identity verification cryptogram and a second set of user data associated with the user to the server computer;
- and
- receiving, by the second mobile application, a second cryptographic key from the server computer upon the server computer validating the identity verification cryptogram;
- generating, by the second mobile application, a transaction cryptogram using the second cryptographic key;
- and
- completing, by the second mobile application a transaction using the transaction cryptogram.
7 more elements
Dependencies are inferred from the claim text.