# US 12,008,574 B2 · Authentication and authorization with physical cards > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,574 B2 - Document ID: US12008574B2 - Status: Granted - Kind: B2 - Application number: 17/410,239 - Filed: 2021-08-24 - Published: 2021-12-09 - Granted: 2024-06-11 - Earliest claimed: 2019-06-04 - Applicants: Paypal, Inc. - Inventors: Jigar Rajnikant Gosalia - Web page: https://patentgrep.com/patent/US12008574B2 ## CPC - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards - G06Q 20/4014: {Identity check for transactions} - G06Q 20/40145: {Biometric identity checks} - G06Q 20/4015: {using location information} - G07C 9/257: {electronically (G07C9/26 takes precedence)} - G07C 9/27: with central registration - G07C 9/29: the pass containing active electronic elements, e.g. smartcards - H04L 9/3236: {using cryptographic hash functions} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/06: Authentication - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods for authentication and authorization using physical computing cards include receiving from the physical computing card an authorization request, where the request includes a card identifier and an entity location. Authorized users associated with the card identifier are determined. Identifications of users with pending transactions at the entity location are obtained. Verification is performed by determining that there is a match between an identification of a user to an identification of one of the authorized users. The user is then authorized to access resources associated with the physical computing card. ## Claims ### Claim 1 A system comprising: a non-transitory memory; and one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising: receiving, from an entity device by a computing card associated with a first user, a request, wherein the request includes an authentication input of a second user, and wherein the request is associated with a pending transaction; transmitting, to a service provider, an authorization request for authorized users associated with a card identifier in response to determining that a location of the first user is different from a location of the second user, wherein the authorization request includes the card identifier; receiving, from the service provider, authorized users associated with the card identifier; verifying an identification of the second user based in part on an identification profile received from the entity device and the authentication input of the second user; determining that the second user is one of the authorized users based in part on the identification profile and the authentication input of the second user; and processing the request to conduct the pending transaction. ### Claim 2 (depends on 1) The system of claim 1, wherein the authorization request is encrypted by a proxy device for the computing card. ### Claim 3 (depends on 1) The system of claim 1, wherein the card identifier is provided to an Application Programming Interface (API) associated with a card issuer server associated with the computing card for determining the authorized users. ### Claim 4 (depends on 1) The system of claim 1, wherein the operations further comprise: in response to the transmitting the request for identification, receiving the identification profile from the entity device. ### Claim 5 (depends on 4) The system of claim 4, wherein the identification profile is a hashed identity token for the first user. ### Claim 6 (depends on 5) The system of claim 5, wherein the identification profile is received from one of a biometric input of the second user or a dynamic readable code. ### Claim 7 (depends on 1) The system of claim 1, wherein the processing the request includes sending, to the entity device, an authorization to complete the pending transaction. ### Claim 8 (depends on 1) The system of claim 1, wherein the verifying the identification of the second user includes a verification of the second user included in the identification profile. ### Claim 9 A method, comprising: receiving, from an entity device by a computing card associated with a first user, a request, wherein the request includes an authentication input of a second user, and wherein the request is associated with a pending transaction; transmitting, to a service provider, an authorization request for authorized users associated with a card identifier in response to determining that a location of the first user is different from a location of the second user, wherein the authorization request includes the card identifier; receiving, from the service provider, authorized users associated with the card identifier; verifying an identification of the second user based in part on an identification profile received from the entity device and the authentication input of the second user; determining that the second user is one of the authorized users based in part on the identification profile and the authentication input of the second user; and processing the request to conduct the pending transaction. ### Claim 10 (depends on 9) The method of claim 9, wherein the card identifier is provided to an Application Programming Interface (API) associated with a card issuer server associated with the computing card for determining the authorized users. ### Claim 11 (depends on 9) The method of claim 9, further comprising: in response to the transmitting the request for identification, receiving the identification profile from the entity device. ### Claim 12 (depends on 11) The method of claim 11, wherein the identification profile is a hashed identity token for the first user. ### Claim 13 (depends on 12) The method of claim 12, wherein the identification profile is received from one of a biometric input of the second user or a dynamic readable code. ### Claim 14 (depends on 9) The method of claim 9, wherein the processing the request includes sending, to the entity device, an authorization to complete the pending transaction. ### Claim 15 (depends on 9) The method of claim 9, wherein the verifying the identification of the second user includes a verification of the second user included in the identification profile. ### Claim 16 A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising: receiving, from an entity device by a computing card associated with a first user, a request, wherein the request includes an authentication input of a second user, and wherein the request is associated with a pending transaction; transmitting, to a service provider, an authorization request for authorized users associated with a card identifier in response to determining that a location of the first user is different from a location of the second user, wherein the authorization request includes the card identifier; receiving, from the service provider, authorized users associated with the card identifier; verifying an identification of the second user based in part on an identification profile received from the entity device and the authentication input of the second user; determining that the second user is one of the authorized users based in part on the identification profile and the authentication input of the second user; and processing the request to conduct the pending transaction. ### Claim 17 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the card identifier is provided to an Application Programming Interface (API) associated with a card issuer server associated with the computing card for determining the authorized users. ### Claim 18 (depends on 16) The non-transitory machine-readable medium of claim 16, wherein the operations further comprise: in response to the transmitting the request for identification, receiving the identification profile from the entity device. ### Claim 19 (depends on 18) The non-transitory machine-readable medium of claim 18, wherein the identification profile is a hashed identity token for the first user. ### Claim 20 (depends on 19) The non-transitory machine-readable medium of claim 19, wherein the identification profile is received from one of a biometric input of the second user or a dynamic readable code.