System and method for providing merchant in-context checkout
AssigneePaypal, Inc.
InventorsDarshan Desai, Kishore Jaladi
Life of this patent
Estimating the term…
Abstract
Methods and systems for providing merchant in-context checkout are described. A user is authenticated based on credentials received from a first application running on a computing device. An authentication code is provided to the first application. A signed verifier and the authentication code is then received from a second application running on the computing device. The authentication code and the signed verifier received from the second application are then validated, and a device token is provided to the second application upon validation. The device token is exchangeable by the second application for an access token that is usable for making payment calls from the second application.
Claims20
A system comprising:
- a non-transitory memory;
- and
- one or more hardware processors coupled to the non-transitory memory, the non-transitory memory storing computer readable instructions, that when executed cause the one or more hardware processors to perform operations comprising:
- authenticating an access to a user account associated with a computing device based on credentials received from a first application running on the computing device;
- providing, in response to authenticating the access, an access token to the first application;
- receiving, from the first application, the access token and a public key associated with the user account from the first application;
- linking the public key and an authentication code to the user account;
- providing, to the first application, the authentication code;
- receiving, from a second application running on the computing device, the authentication code, a signature, and a verifier;
- and
- providing, upon validating the authentication code, the signature, and the verifier, a device token associated with the computing device to the second application based on the validating, wherein the device token comprises data exchangeable by the second application for making payment calls from the second application.
A method comprising:
- authenticating an access to a user account associated with a computing device based on credentials received from a first application running on the computing device;
- providing, in response to authenticating the access, an access token to the first application;
- receiving, from the first application, the access token and a public key associated with the user account from the first application;
- linking the public key and an authentication code to the user account;
- providing, to the first application, the authentication code;
- receiving, from a second application running on the computing device, the authentication code, a signature, and a verifier;
- and
- providing, upon validating the authentication code, the signature, and the verifier, a device token associated with the computing device to the second application based on the validating, wherein the device token comprises data exchangeable by the second application for making payment calls from the second application.
A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause performance of operations comprising:
- authenticating an access to a user account associated with a computing device based on credentials received from a first application running on the computing device;
- providing, in response to authenticating the access, an access token to the first application;
- receiving, from the first application, the access token and a public key associated with the user account from the first application;
- linking the public key and an authentication code to the user account;
- providing, to the first application, the authentication code;
- receiving, from a second application running on the computing device, the authentication code, a signature, and a verifier;
- and
- providing, upon validating the authentication code, the signature, and the verifier, a device token associated with the computing device to the second application based on the validating, wherein the device token comprises data exchangeable by the second application for making payment calls from the second application.
Dependencies are inferred from the claim text.