# US 12,764,110 B2 · Peer-to-peer authentication with a secure channel communication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,764,110 B2 - Document ID: US12764110B2 - Status: Granted - Kind: B2 - Application number: 19/054,763 - Filed: 2025-02-14 - Published: 2025-06-12 - Granted: 2026-10-13 - Earliest claimed: 2021-04-29 - Assignees: Citibank, N.A. - Applicants: Citibank, N.A. - Inventors: Elroi Luria; Shay Davidpur; Dina Vaingolts; Yaniv Bouhadana; Oded Margalit - Web page: https://patentgrep.com/patent/US12764110B2 ## CPC - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/104: Peer-to-peer [P2P] networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An identity verification system enables peer-to-peer authentication in a potentially insecure channel by leveraging a secure channel communication. The system authenticates a user via an identity verification application. The system provides a validation code to the user. The user communicates the validation code to a counterparty of the peer-to-peer communication. The system receives a request to authenticate the counterparty with the validation code and counterparty authentication data. The system authenticates the counterparty and sends the user the authentication of the counterparty. Alternatively, the user device communicates a request to generate a secure code for participants in a first insecure group application session. The user device selects an authenticated counterparty to receive the secure code from a list of authenticated counterparties. The user creates a second application session using the secure code as a password. Unauthenticated counterparties would not receive the secure code and are restricted from the new session. ## Claims ### Claim 1 A system to allow counterparties to verify one another, the system comprising: one or more processors; and one or more storage devices storing application code instructions that when executed by the one or more processors cause the one or more processors to: determine that a new user has accessed a first communications channel associated with a first application, wherein a user using a user computing device is in communications with a counterparty using a counterparty computing device; in response to determining that the new user has accessed the first communications channel, transmit, using a second application on the user computing device, to an identity verification network server, a request to authenticate the user and the counterparty, wherein the request is transmitted over a communications channel that is separate from the first communications channel; receive, from the identity verification network server, a validation code upon authenticating the user, wherein the identity verification network server authenticates the counterparty and, based on authenticating the counterparty, transmits the validation code to the counterparty computing device; in response to receiving the validation code, generate a new secure communication session that is accessed using a passcode that is generated based on the validation code having been received by both the user computing device and the counterparty computing device; and communicate, to the counterparty computing device, an indication of the new secure communication session. ### Claim 2 (depends on 1) The system of claim 1, wherein the application code instructions further cause the system to communicate an indicator of authentication of the user to the counterparty computing device. ### Claim 3 (depends on 1) The system of claim 1, wherein the application code instructions further cause the system to associate the counterparty with the user based on the validation code. ### Claim 4 (depends on 1) The system of claim 1, wherein the first communications channel is associated with the first application. ### Claim 5 (depends on 1) The system of claim 1, wherein authentication of the counterparty comprises one or more of a picture and a name of the counterparty. ### Claim 6 (depends on 1) The system of claim 1, wherein the request is transmitted using the first communications channel and each user is authenticated using user authentication data. ### Claim 7 (depends on 6) The system of claim 6, wherein the user authentication data is a biometric data entry. ### Claim 8 (depends on 1) The system of claim 1, wherein the application code instructions for generating the new secure communication session between the user computing device and the counterparty computing device, cause: generating a new video conference session having a secure passcode for accessing the new video conference session, wherein the secure passcode is generated based on the validation code received by both the user computing device and the counterparty computing device. ### Claim 9 (depends on 1) The system of claim 1, wherein the application code instructions for generating the new secure communication session between the user computing device and the counterparty computing device, cause: generating a new video conference session having a secure passcode for accessing the new video conference session; and setting the secure passcode to the validation code received by both the user computing device and the counterparty computing device. ### Claim 10 (depends on 1) The system of claim 1, wherein the user communicates the validation code to the counterparty. ### Claim 11 (depends on 10) The system of claim 10, wherein the user communicates the validation code verbally. ### Claim 12 (depends on 1) The system of claim 1, wherein the user computing device automatically communicates the validation code to the counterparty computing device upon receiving the validation code. ### Claim 13 A method comprising: determining that a new user has accessed a first communications channel associated with a first application, wherein a user using a user computing device is in communications with a counterparty using a counterparty computing device; in response to determining that the new user has accessed the first communications channel, transmitting, using a second application on the user computing device, to an identity verification network server, a request to authenticate the user and the counterparty, wherein the request is transmitted over a communications channel that is separate from the first communications channel; receiving, from the identity verification network server, a validation code upon authenticating the user, wherein the identity verification network server authenticates the counterparty and, based on authenticating the counterparty, transmits the validation code to the counterparty computing device; in response to receiving the validation code, generating a new secure communication session that is accessed using a passcode that is generated based on the validation code having been received by both the user computing device and the counterparty computing device; and communicating, to the counterparty computing device, an indication of the new secure communication session. ### Claim 14 A method, comprising: joining, by a user computing device, a first group application session of a first application; determining that a new user has accessed the first group application session of the first application; in response to determining that the new user has accessed the first group application session of the first application, communicating, to an identity verification system device, a request to generate an authentication code and to communicate the authentication code to a counterparty computing device, the counterparty computing device being associated with a counterparty; receiving, from the identity verification system device, the authentication code, wherein the authentication code is received by the counterparty computing device; and in response to receiving the authentication code, generating, a second group application session, the second group application session being accessed using a passcode that is generated based on the authentication code having been received by both the user computing device and the counterparty computing device. ### Claim 15 (depends on 14) The method of claim 14, further comprising authenticating, by the identity verification system device, the user computing device and one or more counterparties in the first group application session. ### Claim 16 (depends on 14) The method of claim 14, wherein the authentication code is withheld from the new user. ### Claim 17 (depends on 14) The method of claim 14, further comprising joining, by the user computing device and the counterparty computing device, the second group application session by signing in with the authentication code. ### Claim 18 (depends on 14) The method of claim 14, wherein the user computing device communicates the request to generate the authentication code based on a determination that a suspicious party is participating in the first group application session. ### Claim 19 (depends on 14) The method of claim 14, wherein the counterparty computing device is associated with the counterparty on a list of one or more authenticated counterparties in the first group application session, and wherein the user computing device selects the counterparty computing device to which the identity verification system device is to send the authentication code from the list of one or more authenticated counterparties. ### Claim 20 (depends on 14) The method of claim 14, wherein generating the second group application session comprises: generating a new video conference session having a secure passcode for accessing the new video conference session; and setting the secure passcode to the authentication code received by both the user computing device and the counterparty computing device.