# US 12,003,643 B2 · Systems and methods for verifying or ensuring communication paths > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,643 B2 - Document ID: US12003643B2 - Status: Granted - Kind: B2 - Application number: 17/680,142 - Filed: 2022-02-24 - Published: 2022-09-01 - Granted: 2024-06-04 - Earliest claimed: 2021-02-26 - Assignees: Aetna Inc. - Applicants: Aetna Inc. - Inventors: Abbie Barbir; John Poirier; Alan Bachmann; Amy Ulrich; Cisa Kurian; Erick Verry - Web page: https://patentgrep.com/patent/US12003643B2 ## CPC - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - G06K 19/06056: {the marking comprising a further embedded marking, e.g. a 1D bar code with the black bars containing a smaller sized coding} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)} - H04L 67/146: Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding - H04W 12/77: Graphical identity - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In some instances, a method for verifying communication paths is provided. The method comprises: obtaining, from a first user device, a request to access content associated with a relying party system, wherein the request indicates user credentials and a first session identifier (ID); obtaining one or more quick response (QR) codes and a second session ID associated with a first QR code of the one or more QR codes, wherein the relying party system generates and provides the first QR code to the first user device; and verifying the first session ID and the second session ID, wherein the relying party system grants the first user device access to the requested content based on the verification. ## Claims ### Claim 1 A method, comprising: based on a request from a first user device to access content associated with a relying party system, obtaining, by a second user device, a first quick response (QR) code and a second QR code, wherein the request indicates user credentials and a first session identifier (ID), wherein the relying party system generates and provides the first QR code to the first user device, and wherein the second QR code is a dynamic QR code that is generated based on the first session ID indicated by the first QR code; verifying, based on the obtained first QR code and the obtained second QR code, the first session ID and a second session ID; and granting the first user device access to the requested content based on the verification. ### Claim 2 (depends on 1) The method of claim 1, wherein the first QR code comprises metadata indicating a digital address associated with the relying party system. ### Claim 3 (depends on 1) The method of claim 1, wherein the first user device and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain. ### Claim 4 (depends on 1) The method of claim 1, wherein the first QR code is a designer QR code that indicates a digital address associated with a mailbox system and indicates that the first QR code is secure. ### Claim 5 (depends on 1) The method of claim 1, wherein obtaining the first QR code and the second QR code comprises: scanning, by the second user device, the first QR code that is generated by the relying party system; and scanning, by the second user device, the second QR code associated with the second session ID, wherein the second QR code is generated by the first user device, wherein verifying the first session ID and the second session ID is based on the scanned first QR code and the scanned second QR code. ### Claim 6 (depends on 5) The method of claim 5, wherein obtaining the first QR code and the second QR code further comprises: determining, by the second user device, the first session ID based on scanning the first QR code; and determining, by the second user device, the second session ID based on scanning the second QR code, and wherein verifying the first session ID and the second session ID comprises providing, by the second user device, verification information indicating that the first user device is authorized to access the content on the relying party system based on comparing the first session ID and the second session ID, wherein granting the first user device access to the requested content is based on the verification information. ### Claim 7 (depends on 6) The method of claim 6, wherein the second session ID is embedded into the second QR code generated by the first user device. ### Claim 8 (depends on 6) The method of claim 6, wherein determining the second session ID comprises: determining a digital address associated with the relying party system based on scanning the second QR code; providing a request for a session ID to the relying party system; and obtaining the second session ID from the relying party system based on the request. ### Claim 9 (depends on 5) The method of claim 5, wherein verifying the first session ID and the second session ID comprises providing, by a mailbox system and to the relying party system, verification information indicating that the first user device is authorized to access the content on the relying party system based on comparing the first session ID and the second session ID, wherein granting the first user device access to the requested content is based on the verification information. ### Claim 10 (depends on 9) The method of claim 9, further comprising: receiving, by the mailbox system, the scanned first QR code and the scanned second QR code from the second user device; and determining, by the mailbox system, the first session ID and the second session ID based on the scanned first QR code and the scanned second QR code, and wherein verifying the first session ID and the second session ID further comprises comparing, by the mailbox system, the first session ID with the second session ID. ### Claim 11 A system, comprising: a first user device configured to: provide, to a relying party system via a mailbox system, a request to access content associated with the relying party system, wherein the request indicates user credentials and a first session identifier (ID); display a first quick response (QR) code generated by the relying party system, wherein the first QR code indicates the first session ID; generate a second QR code based on the first session ID indicated by the first QR code, wherein the second QR code is a dynamic QR code that is different from the first QR code; and display the second QR code; a second user device configured to: scan the first QR code and the second QR code displayed on the first user device; determine the first session ID from the first QR code; determine a second session ID from the second QR code; compare the first session ID and the second session ID; and provide, to the relying party system via the mailbox system, verification information indicating that the first user device is authorized to access the content on the relying party system based on the comparison; and the relying party system configured to: receive the verification information from the second user device; and grant access to the first user device for the requested content based on the verification information. ### Claim 12 (depends on 11) The system of claim 11, wherein the second session ID is embedded into the second QR code generated by the first user device. ### Claim 13 (depends on 11) The system of claim 11, wherein determining the second session ID comprises: determining a digital address associated with the relying party system based on scanning the second QR code; providing a request for a session ID to the relying party system; and obtaining the second session ID from the relying party system based on the request. ### Claim 14 (depends on 11) The system of claim 11, wherein the first user device, the mailbox system, and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain. ### Claim 15 A system, comprising: one or more processors; and a non-transitory computer-readable medium having processor-executable instructions stored thereon, wherein the processor-executable instructions, when executed by the one or more processors, facilitate: based on a request from a first user device to access content associated with a relying party system, obtaining a first quick response (QR) code and a second QR code, wherein the request indicates user credentials and a first session identifier (ID), wherein the relying party system generates and provides the first QR code to the first user device, and wherein the second QR code is a dynamic QR code that is generated based on the first session ID indicated by the first QR code; verifying, based on the obtained first QR code and the obtained second QR code, the first session ID and a second session ID; and granting the first user device access to the requested content based on the verification. ### Claim 16 (depends on 15) The system of claim 15, wherein the first QR code comprises metadata indicating a digital address associated with the relying party system. ### Claim 17 (depends on 15) The system of claim 15, wherein the first user device and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain. ### Claim 18 (depends on 15) The system of claim 15, wherein obtaining the first QR code and the second QR code comprises: scanning the first QR code that is generated by the relying party system; and scanning the second QR code associated with the second session ID, wherein the second QR code is generated by the first user device, wherein verifying the first session ID and the second session ID is based on the scanned first QR code and the scanned second QR code. ### Claim 19 (depends on 18) The system of claim 18, wherein obtaining the first QR code and the second QR code further comprises: determining the first session ID based on scanning the first QR code; and determining the second session ID based on scanning the second QR code, and wherein verifying the first session ID and the second session ID comprises providing verification information indicating that the first user device is authorized to access the content on the relying party system based on comparing the first session ID and the second session ID, wherein the relying party system grants the first user device access to the requested content based on the verification information. ### Claim 20 (depends on 18) The system of claim 18, wherein determining the second session ID comprises: determining a digital address associated with the relying party system based on scanning the second QR code; providing a request for a session ID to the relying party system; and obtaining the second session ID from the relying party system based on the request.