# US 12,603,883 B2 · Establishing authentication persistence > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,603,883 B2 - Document ID: US12603883B2 - Status: Granted - Kind: B2 - Application number: 18/124,868 - Filed: 2023-03-22 - Published: 2023-07-13 - Granted: 2026-04-14 - Earliest claimed: 2021-02-24 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Jeffrey Rule; Paul Moreton; Thomas Poole - Web page: https://patentgrep.com/patent/US12603883B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 9/0869: {involving random numbers or seeds} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/065: Continuous authentication - H04W 12/68: Gesture-dependent or behaviour-dependent - H04W 12/71: Hardware identity - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Various embodiments are generally directed to performing an authentication persistence check and, based on the check, allowing a previously successful authentication to persist on a user apparatus. The check may involve a stability check on the user apparatus. If the user apparatus is stable, device fingerprinting on the apparatus may be performed, the result of which may be compared to a snapshot of apparatus taken at the time of successful authentication. If the comparison reveals changes or drifts that are within a predetermined threshold, then the persistence of the authentication is allowed. ## Claims ### Claim 1 An apparatus comprising: memory configured to store instructions; one or more processors configured to execute the stored instructions that, when executed, cause the one or more processors to: perform multifactor authentication, wherein one factor includes the one or more processors to establish a short-range wireless communication with a contactless card, receive data from the contactless card, send the data to a system to authenticate, and receive an indication that the contactless card is authentic; determine a snapshot of the apparatus at a first time; perform a stability check on the apparatus to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification; perform device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable; compare the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement; allow the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement; and reauthenticate the user if the fingerprint does not meet the predetermined requirement. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the data is comprised in a message generated by the contactless card applying a first session key to a shared secret to generate a message access code (MAC) cryptogram and applying a second session key to the MAC cryptogram and a random number to generate the message. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein a second factor of the multifactor authentication comprises an identifier and a password for an application, a biometric input, a passcode, or a personal identification number (PIN). ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the snapshot comprises one or more device settings, one or more biometric inputs, or a combination thereof. ### Claim 5 (depends on 1) The apparatus of claim 1, wherein the fingerprint comprises one or more device settings, one or more biometric inputs, or a combination thereof. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the predetermined requirement is an allowed amount change between the snapshot and fingerprint. ### Claim 7 A computer-implemented method comprising: performing multifactor authentication by an apparatus comprising a memory and one or more processors configured to execute one or more instructions stored in the memory, wherein one factor includes: establishing, by the apparatus, a short-range wireless communication with a contactless card, receiving, by the apparatus, data from the contactless card, sending, by the apparatus, the data to a system to authenticate, and receive, by the apparatus, an indication that the contactless card is authentic; determining a snapshot of the apparatus at a first time; performing a stability check to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification; performing device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable; comparing the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement; allowing the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement; and reauthenticating the user if the fingerprint does not meet the predetermined requirement. ### Claim 8 (depends on 7) The computer-implemented method of claim 7, wherein the data is comprised in a message generated by the contactless card applying a first session key to a shared secret to generate a message access code (MAC) cryptogram and applying a second session key to the MAC cryptogram and a random number to generate the message. ### Claim 9 (depends on 7) The computer-implemented method of claim 7, wherein a second factor of the multifactor authentication comprises an identifier and a password for an application, a biometric input, a passcode, or a personal identification number (PIN). ### Claim 10 (depends on 7) The computer-implemented method of claim 7, wherein the snapshot comprises one or more device settings, one or more biometric inputs, or a combination thereof. ### Claim 11 (depends on 7) The computer-implemented method of claim 7, wherein the fingerprint comprises one or more device settings, one or more biometric inputs, or a combination thereof. ### Claim 12 (depends on 7) The computer-implemented method of claim 7, wherein the predetermined requirement is an allowed amount change between the snapshot and fingerprint. ### Claim 13 A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to: perform multifactor authentication, wherein one factor includes: establish a short-range wireless communication with a contactless card, receive data from the contactless card, send the data to a system to authenticate, and receive an indication that the contactless card is authentic; determine a snapshot of the apparatus at a first time; perform a stability check to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification; perform device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable; compare the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement; allow the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement; and reauthenticate the user if the fingerprint does not meet the predetermined requirement. ### Claim 14 (depends on 13) The computer-readable storage medium of claim 13, wherein the data is comprised in a message generated by the contactless card apply a first session key to a shared secret to generate a message access code (MAC) cryptogram and applying a second session key to the MAC cryptogram and a random number to generate the message.