Authentication and verification services for third party vendors using mobile devices
AssigneeLucent Technologies Inc.
InventorThyagarajan Nandagopal
Life of this patent
Estimating the term…
Abstract
A method to provide authentication services to third party vendors by a service provider hosting an authentication, authorization and accounting (AAA) server or a similar device that can authenticate users for some other service. This method enables easy and substantially error-free end-user authentication, which forms the basis for enabling electronic transactions (e.g., web-based) that are less vulnerable to fraud.
Claims25
A method, comprising:
- receiving a mobile device identifier from an inquirer;
- associating the mobile device identifier with at least one identity and other identifying data;
- and
- providing the identity for use in authenticating a transaction.
A method for performing authentication, comprising:
- receiving a name and a mobile device identifier from a vendor;
- verifying that an owner of a mobile device identified by the mobile device identifier is associated with the received name;
- and
- sending a data string to both the vendor and the mobile device identified by the mobile device identifier.
A method for performing authentication, comprising:
- receiving a name and a mobile device identifier from a vendor;
- verifying that an owner of a mobile device identified by the mobile device identifier has the received name;
- and
- sending a first data string to the mobile device identified by the mobile device identifier;
- receiving a second data string from the vendor;
- and
- verifying a user's identity by determining that the second data string received from the vendor is the same as the first data string sent to the mobile device.
A method for performing authentication, comprising:
- sending a first data string to a mobile device;
- receiving a name, a mobile device identifier, and a second data string from a vendor;
- verifying that an owner of the mobile device identified by the mobile device identifier has the received name;
- and
- verifying the user's identity by determining that the first data string is the same as the second data string.
A method for performing authentication, comprising:
- receiving a name, a mobile device identifier, and a set of transaction information from a vendor;
- verifying that an owner of a mobile device identified by the mobile device identifier has the received name;
- and
- sending the set of transaction information to the mobile device.
A method for performing authentication, comprising:
- storing a user name and an associated user mobile device identifier prior to any transaction;
- receiving a name, a mobile device identifier, and a set of transaction information from a vendor;
- and
- verifying that the stored user name and the stored, associated mobile device identifier are the same as the received name and the received mobile device identifier;
- wherein a service provider sends a data string to both a vendor and the mobile device identified by the mobile device identifier.
Dependencies are inferred from the claim text.