# US 12,182,793 B2 · User authentication and transaction staging

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,182,793 B2
- Document ID: US12182793B2
- Status: Granted
- Kind: B2
- Application number: 16/156,560
- Filed: 2018-10-10
- Published: 2019-04-18
- Granted: 2024-12-31
- Earliest claimed: 2017-10-13
- Assignees: Mastercard International Incorporated Purchase
- Applicants: Mastercard International Incorporated
- Inventors: Florent Hay; Kuan Hua Chen; David Anthony Roberts
- Web page: https://patentgrep.com/patent/US12182793B2

## CPC

- G06Q 20/3274: {using a pictured code, e.g. barcode or QR-code, being displayed on the M-device}
- G06F 21/36: by graphic or iconic representation
- G06K 7/1417: {2D bar codes}
- G06Q 20/36: using electronic wallets or electronic money safes
- G06Q 20/3674: {involving authentication}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/40145: {Biometric identity checks}
- H04W 12/06: Authentication
- G06Q 2220/00: Business processing using cryptography
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

There is presented a method and a computing device for user authentication and transaction staging on a user device. The method comprises authenticating a user of the user device by a first device verification method and generating transaction credentials at the user device. The method further comprises generating at least one optical code data corresponding to the transaction credentials and displaying the at least one optical code on the user device in a form suitable for scanning by a second device to progress a transaction with the second device.

## Claims

### Claim 1

A computer-implemented method at a user device comprising a main operating environment and a protected operating environment, the main operating environment comprising a processor and memories, the protected operating environment is at least one of a Subscriber Identity Module (SIM), Universal Integrated Circuit Card (UICC), a Secure Element, or a Trusted Execution Environment, the method comprising:
executing, by the protected operating environment of the user device, a wallet application; authenticating, by the protected operating environment of the user device, a user of the user device by a consumer device cardholder verification method (CDCVM);
receiving, by a user interface of the executing wallet application and from the user, transaction details of a transaction comprising at least a transaction amount;
displaying, by the executing wallet application, one or more payment cards on a display of the user device;
receiving, by the executing wallet application and from the user, a selection of a payment card of the one or more payment cards for the transaction;
generating, by the processor in the main operating environment, a time stamp of when the transaction details are received;
based on the authenticating of the user and the selection of the payment card, generating, by the executing wallet application and using the time stamp, a cryptogram and Europay, Mastercard, and Visa (EMV) data;
generating, by the executing wallet application, a 1-D barcode using the cryptogram and a 2-D barcode using the cryptogram and the EMV data, wherein the 1-D barcode and the 2-D barcode comprise the transaction amount;
simultaneously displaying, by the user interface of the executing wallet application at the user device, the 1-D barcode and the 2-D barcode on the display and to a merchant device;
receiving, by the processor in the main operating environment, a transaction delivery notification from a service provider computer; and
displaying, by the processor in the main operating environment, the notification on the display.

### Claim 2 (depends on 1)

The method of claim 1, wherein the 1-D barcode is a Code 128 barcode.

### Claim 3 (depends on 1)

The method of claim 1, wherein the 2-D barcode is an EMV Quick Response Code.

### Claim 4 (depends on 3)

The method of claim 3, wherein the time stamp comprises an unpredictable number.

### Claim 5 (depends on 1)

The method of claim 1, wherein authenticating the user of the user device by the consumer device cardholder verification method comprises authenticating the user of the user device using a method selected from a group comprising:
A personal identification number (PIN), a password, and a biometric authentication mechanism.

### Claim 6

A user computing device comprising:
a display;
a main operating environment;
a protected operating environment;
wherein the main operating environment and protected operating environment are separate environments;
at least one processor;
at least one memory storing a wallet application and executable instructions that when executed by the at least one processor causes the at least one processor to perform the operations of:
executing the wallet application in the protected operating environment;
authenticating, via the executing wallet application, a user by a consumer device cardholder verification method (CDCVM);
receiving, via a user interface of the executing wallet application, and from the user, transaction details of a transaction comprising at least a transaction amount;
displaying, via the executing wallet application, one or more payment cards on the display;
receiving, via the executing wallet application, a selection of a payment card of the one or more payment cards for the transaction;
generating, via the executing wallet application and using a time stamp of when the transaction details are received, transaction information comprising a cryptogram and Europay, Mastercard, and Visa (EMV) data;
based on the authenticating of the user and the selection of the payment card, generating, via the executing wallet application and using the time stamp, a cryptogram and EMV data;
generating, via the executing wallet application, a 1-D barcode using the cryptogram and a 2-D barcode using the cryptogram and the EMV data, wherein the 1-D barcode and the 2-D barcode comprise the transaction amount; and
simultaneously displaying, via the user interface of the executing wallet application, the 1-D barcode and the 2-D barcode on the display and to a merchant device; and
generating, in the main operating environment, the time stamp of when the transaction details are received; and
receiving, in the main operating environment, a transaction delivery notification from a service provider computer; and
displaying, in the main operating environment, the transaction delivery notification on the display.