Back to results
US 12,182,792 B2Granted
Systems and methods for using a transaction identifier to protect sensitive credentials
AssigneeVisa International Service Association
InventorsJalpesh Chitalia, Ansar Ansari, Samuel Shrauger
Life of this patent
Estimating the term…
Abstract
Embodiments of the invention are directed to systems and methods of securely transmitting account credentials, such as a token. A user device and application can initially select an account, and then obtain a transaction identifier associated with the account. The user device can provide the transaction identifier to a resource provider, which can then directly exchange the transaction identifier for the account credentials.
Claims15
A method comprising:
- receiving, by a communication application of a user device, a request to complete a transaction associated with a user;
- determining, by the communication application of the user device, a plurality of accounts associated with the user;
- receiving, by the communication application of the user device, a selection of an account from the plurality of accounts;
- sending, by the communication application of the user device, a request for a transaction identifier associated with the selected account to a server computer, the request including user identifier information and a facilitator application identifier, wherein the facilitator application identifier is one of a plurality of facilitator application identifiers that are respectively associated with a plurality of facilitator applications stored on the user device, wherein the received facilitator application identifier identifies a facilitator application capable of supporting the selected account;
- receiving, from the server computer by the facilitator application associated with the facilitator application identifier, instructions that cause execution of the facilitator application for authenticating the user to provide an authentication indicator based at least on the user identifier information;
- executing, by the user device, the facilitator application to authenticate the user using biometric information of the user and to generate the authentication indicator;
- transmitting, by the user device, the authentication indicator to the server computer based on authenticating the user;
- receiving, by the communication application of the user device, the transaction identifier from the server computer;
- accessing, by the communication application of the user device, a resource provider webpage being executed on the user device, the resource provider webpage being associated with a resource provider computer;
- and
- transmitting, by the communication application of the user device, the transaction identifier to the resource provider computer via the resource provider webpage, wherein the resource provider computer subsequently transmits the transaction identifier to the server computer, and wherein the server computer responds to the resource provider computer by transmitting account credentials associated with the selected account.
8 more elements
A user device comprising:
- a processor;
- and
- a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method including:
- receiving, by a communication application of the user device, a request to complete a transaction associated with a user;
- determining, by the communication application of the user device, a plurality of accounts associated with the user;
- receiving, by the communication application of the user device, a selection of an account from the plurality of accounts;
- sending, by the communication application of the user device, a request for a transaction identifier associated with the selected account to a server computer, the request including user identifier information and a facilitator application identifier, wherein the facilitator application identifier is one of a plurality of facilitator application identifiers that are respectively associated with a plurality of facilitator applications stored on the user device, wherein the received facilitator application identifier identifies a facilitator application capable of supporting the selected account;
- receiving, from the server computer by the facilitator application associated with the facilitator application identifier, instructions that cause execution of the facilitator application for authenticating the user to provide an authentication indicator based at least on the user identifier information;
- executing the facilitator application to authenticate the user using biometric information of the user and to generate the authentication indicator;
- transmitting the authentication indicator to the server computer based on authenticating the user;
- receiving, by the communication application of the user device, the transaction identifier from the server computer;
- accessing, by the communication application of the user device, a resource provider webpage being executed on the user device, the resource provider webpage being associated with a resource provider computer;
- and
- transmitting, by the communication application of the user device, the transaction identifier to the resource provider computer via the resource provider webpage, wherein the resource provider computer subsequently transmits the transaction identifier to the server computer, and wherein the server computer responds to the resource provider computer by transmitting account credentials associated with the selected account.
11 more elements
Dependencies are inferred from the claim text.