# US 11,907,946 B2 · Fraud deterrence for secure transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,907,946 B2
- Document ID: US11907946B2
- Status: Granted
- Kind: B2
- Application number: 18/095,237
- Filed: 2023-01-10
- Published: 2023-06-01
- Granted: 2024-02-20
- Earliest claimed: 2007-05-04
- Applicants: Michael Sasha John
- Inventors: Michael Sasha John
- Web page: https://patentgrep.com/patent/US11907946B2

## CPC

- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/35: communicating wirelessly
- G06F 21/606: {by securing the transmission between two devices or processes}
- G06F 21/6263: {during internet communication, e.g. revealing personal data from cookies}
- G06Q 20/123: {Shopping for digital content}
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/409: {Device specific authentication in transaction processing}
- G06Q 20/425: {using two different networks, one for transaction and one for security confirmation}
- G06Q 30/06: Buying, selling or leasing transactions
- G06Q 30/0601: Electronic shopping [e-shopping]
- G06Q 30/0613: {using intermediate agents}
- G06Q 40/00: Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An illustrative fraud deterrent method includes presenting an identity verification option for a first website displayed in a web-browser, the option including offering a login to a third-party website, unrelated to the first website. The method further includes receiving login information for a first user account on the third-party website and verifying the login information through a verification service associated with the third-party website, to verify that the login information is valid for the first user account, identified by the login information. The method additionally includes verifying an identity at the first website, responsive to the verification.

## Claims

### Claim 1

A method comprising:
receiving a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
receiving designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
obtaining at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the verification parameters to be met when the acceptable value matches a current value determined for the one of the verification parameters during execution of the identity verification process;
receiving a first request from the identified user for remote access to the first software program;
determining, based on the first request, the current values of the verification parameters;
comparing the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met;
determining whether sufficient instances of the verification parameters are met to automatically verify the user identity, wherein what constitutes the sufficient instances is defined by a modifiable aspect of the identity verification process;
in the absence of the sufficient instances of the verification parameters being met, sending a second request, that requests confirmation of validity of the first request, to a second program that includes at least one fraud prevention aspect, to trigger the fraud prevention aspect of the second program to request a user verification of the first request, the second program installed on an out-of-band device having a stored prior association with the user identity and validated for use in conjunction with the identity verification process;
receiving a transmitted response to the second request from the second program, the transmitted response generated by the second program based on user input to the second program and indicating validity of the first request; and
responsive to the received response indicating that the first request is valid, verifying the user identity of the identified user in conjunction with the received first request.

### Claim 2 (depends on 1)

The method of claim 1, wherein the stored prior association between the out-of-band device and the user identity is established at least in part based on registration of the second program on the out-of-band device in conjunction with a temporary validation code created for use in validation of at least the out-of-band device for use in conjunction with the identity verification process.

### Claim 3 (depends on 1)

The method of claim 1, wherein the plurality of verification parameters are designated for use in identity verification relating to at least one of: a single user specifically, as a basis for specifically verifying an identity of the single user, or a group of users, as a basis to verify an identity of any member of the group of users.

### Claim 4 (depends on 1)

The method of claim 1, wherein at least one of the verification parameters includes a network identifier of a network from which a request, for which user identity verification is required, originated.

### Claim 5 (depends on 4)

The method of claim 4, wherein the at least one acceptable value for the network identifier includes a value indicating at least a portion of the network identifier, obtained from a prior request, from the identified user, for which the user identity was successfully verified.

### Claim 6 (depends on 4)

The method of claim 4, wherein the at least one acceptable value for the network identifier includes a value indicating at least a portion of the network identifier, obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the network identifier or a response from the second program indicating that the prior request was valid.

### Claim 7 (depends on 1)

The method of claim 1, wherein the obtaining at least one acceptable value includes obtaining an expressly input value.

### Claim 8 (depends on 1)

The method of claim 1, wherein the at least one acceptable value for at least one verification parameter includes a value obtained from a prior request, from the identified user, for which the user identity was successfully verified.

### Claim 9 (depends on 1)

The method of claim 1, wherein the at least one acceptable value for at least one verification parameter includes a value obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the at least one verification parameter for which the value was obtained or a response from the second program indicating that the prior request was valid.

### Claim 10 (depends on 1)

The method of claim 1, wherein at least one of the verification parameters include a geographic region of request origin determinable based on a request, for which user identity verification is required, and the acceptable value is generated based on a historical geographic region obtained based on a prior request, from the identified user, for which the user identity was successfully verified.

### Claim 11 (depends on 1)

The method of claim 1, wherein at least one of the verification parameters includes a device identifier identifying a device from which a request, for which user identity verification is required, originated.

### Claim 12 (depends on 11)

The method of claim 11, wherein the at least one acceptable value for the device identifier includes a device identifier obtained from a prior request, from the identified user, for which the user identity was successfully verified.

### Claim 13 (depends on 1)

The method of claim 1, further comprising storing, in conjunction with the paradigm, a defined threshold number of the plurality of verification parameters to be met for the sufficient instances.

### Claim 14 (depends on 1)

The method of claim 1, further comprising storing, in conjunction with the paradigm, a defined selection of one or more specific ones of the verification parameters to be met for the sufficient instances.

### Claim 15 (depends on 1)

The method of claim 1, wherein the out-of-band device includes a mobile phone.

### Claim 16 (depends on 1)

The method of claim 1, wherein the match between at least one current value and one or more acceptable values is determined based on a correlation between the at least one current value and the one or more acceptable values, wherein what constitutes the correlation is defined by the identity verification process.

### Claim 17

A non-transitory storage medium storing instructions that, when executed, cause one or more processors to perform a method comprising:
receiving a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
receiving designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
obtaining at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the plurality of verification parameter to be met when the acceptable value correlates to a current value determined for the one of the verification parameters during execution of the identity verification process;
storing a modifiable paradigm, usable as part of the identity verification process, including at least a threshold number of the verification parameters to be met to constitute automatic verification of the user identity, based on correlation between current values of respective ones of the verification parameters, the current values obtained based on a request from the identified user, when compared to the acceptable values for the corresponding respective ones of the verification parameters, the paradigm further defining what constitutes correlation for at least one of the verification parameters;
determining, based on the first request, the current values of the verification parameters;
comparing the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met based on the paradigm;
determining whether the threshold number of the verification parameters are met to automatically verify the user identity;
in the absence of the threshold number of the verification parameters being met, sending a second request, that requests confirmation of validity of the first request, to a second program that includes at least one designated fraud prevention aspect, to trigger the fraud prevention aspect to request a user response to the second request to verify the first request, the second program installed on an out-of-band device, having a stored prior association with the user identity, and validated for use in conjunction with the identity verification process;
receiving a transmitted response from the second program, the transmitted response generated by the second program based on the user response and indicating validity of the first request; and
responsive to the transmitted response indicating that the first request is valid, verifying the user identity of the identified user in conjunction with the received first request.

### Claim 18 (depends on 17)

The storage medium of claim 17, wherein the stored prior association between the second program and the user identity is established at least in part based on registration of the second program on the out-of-band device in conjunction with a temporary validation code created for use in the validation of at least the second program for use in conjunction with the identity verification process.

### Claim 19 (depends on 17)

The storage medium of claim 17, wherein at least one of the verification parameters includes a network identifier a of network from which a request, for which user identity verification is required, originated, and
wherein the at least one acceptable value for the network identifier includes a value indicating at least a portion of the network identifier, obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the network identifier or a response from the second program indicating that the prior request was valid.

### Claim 20 (depends on 17)

The storage medium of claim 17, wherein the at least one acceptable value for at least one of the verification parameters includes a value obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the at least one of the verification parameters or a response from the second program indicating that the prior request was valid.

### Claim 21 (depends on 17)

The storage medium of claim 17, wherein at least one of the verification parameters includes a device identifier identifying a device from which a request, for which user identity verification is required, originated, wherein the at least one acceptable value for the device identifier includes a predefined value generated based on a device identifier obtained from a prior request, from the identified user, for which the user identity was successfully verified.

### Claim 22 (depends on 17)

The storage medium of claim 17, wherein the out-of-band device includes a mobile phone.

### Claim 23

A system comprising:
one or more processors that are configured, based on execution of instructions stored in a memory accessible to the one or more processors, to:
receive a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
receive designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
obtain at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the verification parameters to be met when the acceptable value correlates to a current value determined for the one of the verification parameters during execution of the identity verification process;
store a modifiable a paradigm, usable as part of the identity verification process, including at least a definition of sufficient instances of verification parameters being met to constitute automatic verification of the user identity, based on correlation between current values of respective ones of the plurality of verification parameters the current values obtained based on a request from the identified user for which identity verification is performed, when compared to the acceptable values for the corresponding respective ones of the verification parameters, the paradigm further defining what constitutes correlation for at least one of the verification parameters, wherein
the definition of sufficient instances of verification parameters being met includes at least one of: a predefined threshold number of the verification parameters being met, predefined specific ones of the verification parameters being met, or a combination of both;
receive a first request from the identified user for remote access to the first software program;
determine, based on the first request, the current values of the verification parameters;
compare the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met based on the paradigm;
determining whether the sufficient instances of the verification parameters are met to automatically verify a the user identity;
in the absence of sufficient instances of the verification parameters being met, send a second request, that requests confirmation of validity of the first request, to a second program that includes at least one designated fraud prevention aspect, to trigger the fraud prevention aspect to present identification of the first request and, in conjunction with the presentation, to request a user response to verify the first request, the second program installed on an out-of-band mobile phone, having a stored prior association with the requesting-user identity, and validated for use in conjunction with the identity verification process;
receive a transmitted response from the second program, the transmitted response generated by the second program based on the user response and indicating validity of the first request; and
responsive to the transmitted response indicating that the request is valid, verify the user identity of the identified user in conjunction with the received first request.

### Claim 24 (depends on 23)

The system of claim 23, wherein the stored prior association between the second program and the user identity is established at least in part based on registration of the second program on the out-of-band mobile phone in conjunction with a temporary validation code created for use in the validation of at least the second program for use in conjunction with the identity verification process.

### Claim 25 (depends on 23)

The system of claim 23, wherein at least one of the verification parameters includes at least one of:
a network identifier indicating at least a portion of a of network from which a request, for which identity verification is required, originated, or
a device identifier identifying a device from which the request, for which identity verification is required, originated, and
wherein a respective acceptable value for either the network identifier or the device identifier was obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the obtained respective identifier or a response from the second program indicating that the prior request was valid.

### Claim 26 (depends on 23)

The system of claim 23, wherein the at least one acceptable value for at least one verification parameter includes a value obtained from a prior request, from the identified user, for which the user identity was successfully verified based on either: ones of the verification parameters other than the at least one verification parameter for which the value was obtained or a response from the second program indicating that the prior request was valid.

### Claim 27 (depends on 23)

The system of claim 23, wherein the one or more processors are further configured to:
obtain an unacceptable value for one or more of the verification parameters, the unacceptable value representing a basis for the given verification parameter to be unacceptably met when the unacceptable value correlates to the current value determined for the given verification parameter during the execution of the verification process, and wherein
the second request is alternatively sent responsive to a threshold number of the verification parameters or specific ones of the verification parameters, for which the at least one unacceptable value was set, being unacceptably met.

### Claim 28 (depends on 27)

The system of claim 27, wherein the paradigm identifies at least one of:
the threshold number of the verification parameters, for which the at least one unacceptable value was set, or
the specific ones of the verification parameters, for which the at least one unacceptable value was set.

### Claim 29 (depends on 27)

The system of claim 27, wherein the paradigm includes a priority for use in a circumstance when predefined predicates for both the unacceptably met verification parameters and the sufficient instances of verification parameters being met, are fulfilled, the priority defining whether the second request to the second program and the second response from the second program is required for identity verification under the circumstance.

### Claim 30 (depends on 27)

The system of claim 27, wherein at least one of the one or more verification parameters for which an unacceptable value is obtained also has an acceptable value obtained therefor.