# US 12,015,918 B2 · Identity authentication using mobile carrier account information and credit bureau information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,918 B2 - Document ID: US12015918B2 - Status: Granted - Kind: B2 - Application number: 17/458,078 - Filed: 2021-08-26 - Published: 2023-03-02 - Granted: 2024-06-18 - Earliest claimed: 2018-11-27 - Assignees: Zumigo, Inc. - Applicants: Zumigo, Inc. - Inventors: Harish Manepalli; Chirag C. Bakshi - Web page: https://patentgrep.com/patent/US12015918B2 ## CPC - H04L 63/067: {using one-time keys (cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863)} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - H04L 63/0838: {using one-time-passwords} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04W 48/08: Access restriction or access information delivery, e.g. discovery data delivery (signalling during connection H04W76/00) - G06Q 20/3221: {Access to banking information through M-devices} - G06Q 40/03: Credit; Loans; Processing thereof - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04W 12/043: using a trusted network node as an anchor - H04W 12/71: Hardware identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A mobile network based authentication system for authenticating a user's access to a restricted-access account includes an application server and an identification server. The application server is configured to authenticate the user's access to the restricted-access account by transmitting a one-time password to a mobile computing device of the user and confirming that the one-time password has been entered by the user. The identification server communicates with the application server after the application server receives a request from the user to access the restricted-access account and before the application transmits the one-time password to the mobile device, to verify that an attribute of the restricted-access account is linked to a network identification of the mobile computing device. ## Claims ### Claim 1 A mobile network based authentication system for authenticating an account holder's access to a restricted-access account, the mobile network based authentication system comprising: an application server running on a computing device including a processor and a memory, the application server being configured to authenticate the account holder's access to the restricted-access account based on a one-time password to be transmitted to a first device of the account holder and to be entered by the account holder using a second device; and an identification server running on a computing device including a processor and a memory, the identification server communicating with the application server after the application server receives a request from the account holder to access the restricted-access account and before the application server transmits the one-time password to the first device, to verify that a name of the account holder is linked to a network identifier associated with the restricted-access account, wherein upon receiving the request to access the restricted-access account, the application server transmits to the identification server, a request to verify the account holder's identity, the request to verify the account holder's identity including: (1) the name of the account holder and (2) the network identifier, wherein upon receiving the request to verify the account holder's identity, the identification server: identifies (1) a name of a primary user of a mobile service plan associated with the network identifier and (2) a physical address associated with the primary user of the mobile service plan, determines that the name of the account holder does not match the name of the primary user of the mobile service plan, in response to determining that the name of the account holder does not match the name of the primary user of the mobile service plan, transmits to a credit bureau server, a request for at least one name of a person associated with the physical address, upon receiving from the credit bureau server, a name associated with the physical address, determines that the name received from the credit bureau server matches the name of the account holder, and in response to determining that the name received from the credit bureau server matches the name of the account holder, transmits to the application server, verification of the account holder's identity, and wherein upon receiving the verification of the account holder's identity, the application server transmits the one-time password to the first device and then confirms that the second device returned the one-time password before allowing the account holder to access the restricted-access account using the second device. ### Claim 2 (depends on 1) The mobile network based authentication system of claim 1, wherein in response to determining that the name of the account holder does not match the name of the primary user of the mobile service plan, the identification server further transmits to the credit bureau server, personal identifying information associated with the restricted-access account, and wherein the name received from the credit bureau server is associated by the credit bureau server with both the physical address and the personal identifying information based on credit history information. ### Claim 3 (depends on 1) The mobile network based authentication system of claim 1, wherein upon allowing the account holder to access the restricted-access account, the application server authorizes the account holder to change a password associated with the restricted-access account. ### Claim 4 (depends on 1) The mobile network based authentication system of claim 1, wherein upon allowing the account holder to access the restricted-access account, the application server authorizes a financial transaction of the account holder. ### Claim 5 (depends on 1) The mobile network based authentication system of claim 1, wherein upon allowing the account holder to access the restricted-access account, the application server provides the account holder with sensitive information. ### Claim 6 (depends on 1) The mobile network based authentication system of claim 1, wherein identifying the name of the primary user of the mobile service plan and the physical address comprises determining a mobile carrier that manages the mobile service plan and then transmitting, to a server of the determined mobile carrier, a request for the name of the primary user of the mobile service plan and the physical address. ### Claim 7 (depends on 4) The mobile network based authentication system of claim 4, wherein the personal identifying information includes at least one of the account holder's date of birth and digits of the account holder's social security number. ### Claim 8 (depends on 1) The mobile network based authentication system of claim 1, wherein the application server is configured to provide the account holder with one of e-mail, banking, and cloud storage services. ### Claim 9 A mobile network based authentication method for authenticating an account holder's access to a restricted-access account, the mobile network based authentication method comprising: authenticating, by an application server, the account holder's access to the restricted-access account based on a one-time password to be transmitted to a first device of the account holder and to be entered by the account holder using a second device; and communicating, by an identification server with the application server after the application server receives a request from the account holder to access the restricted-access account and before the application server transmits the one-time password to the first device, to verify that a name of the account holder is linked to a network identifier associated with the restricted-access account, wherein upon receiving the request to access the restricted-access account, the application server transmits to the identification server, a request to verify the account holder's identity, the request to verify the account holder's identity including: (1) the name of the account holder and (2) the network identifier, wherein upon receiving the request to verify the account holder's identity, the identification server performs the following steps: identifying (1) a name of a primary user of a mobile service plan associated with the network identifier and (2) a physical address associated with the primary user of the mobile service plan, determining that the name of the account holder does not match the name of the primary user of the mobile service plan, in response to determining that the name of the account holder does not match the name of the primary user of the mobile service plan, transmitting to a credit bureau server, a request for at least one name of a person associated with the physical address, upon receiving from the credit bureau server, a name associated with the physical address, determining that the name received from the credit bureau server matches the name of the account holder, and in response to determining that the name received from the credit bureau server matches the name of the account holder, transmitting to the application server, verification of the account holder's identity, and wherein upon receiving the verification of the account holder's identity, the application server performs the following steps: transmitting the one-time password to the first device and then confirming that the second device returned the one-time password before allowing the account holder to access the restricted-access account using the second device. ### Claim 10 (depends on 9) The mobile network based authentication method of claim 9, further comprising: in response to determining that the name of the account holder does not match the name of the primary user of the mobile service plan, transmitting, by the identification server to the credit bureau server, personal identifying information associated with the restricted-access account, wherein the name received from the credit bureau server is associated by the credit bureau server with both the physical address and the personal identifying information based on credit history information. ### Claim 11 (depends on 9) The mobile network based authentication method of claim 9, further comprising: upon allowing the account holder to access the restricted-access account, authorizing, by the application server, the account holder to change a password associated with the restricted-access account. ### Claim 12 (depends on 9) The mobile network based authentication method of claim 9, further comprising: upon allowing the account holder to access the restricted-access account, authorizing, by the application server, a financial transaction of the account holder. ### Claim 13 (depends on 9) The mobile network based authentication method of claim 9, further comprising: upon allowing the account holder to access the restricted-access account, providing, by the application server to the account holder, sensitive information. ### Claim 14 (depends on 9) The mobile network based authentication method of claim 9, wherein identifying the name of the primary user of the mobile service plan and the physical address comprises determining a mobile carrier that manages the mobile service plan and then transmitting, to a server of the determined mobile carrier, a request for the name of the primary user of the mobile service plan and the physical address. ### Claim 15 (depends on 10) The mobile network based authentication method of claim 10, wherein the personal identifying information includes at least one of the account holder's date of birth and digits of the account holder's social security number. ### Claim 16 (depends on 9) The mobile network based authentication method of claim 9, further comprising: providing, by the application server to the account holder, one of e-mail, banking, and cloud storage services. ### Claim 17 (depends on 1) The mobile network based authentication system of claim 1, wherein the first device is the same device as the second device. ### Claim 18 (depends on 1) The mobile network based authentication system of claim 1, wherein the first device and the second device are different devices. ### Claim 19 (depends on 9) The mobile network based authentication method of claim 9, wherein the first device is the same device as the second device. ### Claim 20 (depends on 9) The mobile network based authentication method of claim 9, wherein the first device and the second device are different devices.