US 12,730,873 B2 · Dynamic access to service devices to facilitate secure operations

Abstract

A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.

A system comprising:

a processor;
and
a non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:
prior to generating a contactless authentication code, requiring a successful biometric authentication or multi-factor authentication of a user at a mobile computing device;
determining, based on geolocation data, that the mobile computing device is within a predetermined physical distance of an Internet of Things (IoT) service device;
receiving, in response to determining that the mobile computing device is within the predetermined physical distance of the IoT service device, a request to generate a contactless authentication code associated with a user account, the contactless authentication code used to access functions of the IoT service device associated with the user account, wherein the contactless authentication code comprises a dynamic Quick Response (QR) code configured to be displayed on the mobile computing device, wherein the dynamic QR code encodes (i) user account information (ii) an interaction type of an interaction associated with the request, (iii) an interaction amount of the interaction, and (iv) a unique identifier associated with the IoT service device such that the dynamic QR code is only valid for the interaction and the IoT service device;
generating a first mapping that maps the user account with a first version of the dynamic QR code, wherein the first mapping defines a one-to-one correspondence between the user account and the first version of the dynamic QR code;
generating the contactless authentication code used to access the functions of the IoT service device associated with the user account;
displaying the contactless authentication code in a graphical user interface of the mobile computing device, the contactless authentication code configured to be captured by an imaging device of the IoT service device to validate access by a user of the mobile computing device to the functions of the IoT service device associated with the user account to facilitate a secure transaction between the IoT service device and the user account, wherein, upon the imaging device of the IoT service device capturing the dynamic QR code, the IoT service device is configured to transmit the dynamic QR code to a remote server for real-time validation to invalidate the dynamic QR code after a single use or after a predetermined time interval;
and one of the following:
in response to determining that the access by the user of the mobile computing device to the functions of the IoT service device is valid based on the first mapping being valid, facilitating performance of the functions of the IoT service device;
or
in response to determining that the access by the user of the mobile computing device to the functions of the IoT service device is not valid based on the first mapping not being valid, preventing performance of the functions of the IoT service device.

10 more elements

Dynamic access to service devices to facilitate secure operations

Life of this patent

Dynamic access to service devices to facilitate secure operations

Life of this patent

Abstract

Claims19