Back to results
US 2014/0279477 A1Published application
Account provisioning authentication
AssigneeVisa International Service Association
InventorsJohn Sheets, James McCarthy
Life of this patent
Estimating the term…
Abstract
Embodiments of the present invention are directed to methods, systems, and apparatuses for providing a secure authentication scheme for authenticating users and accounts on behalf of a service provider server computer offering services to a user. Upon determining, by the secure authentication scheme, that the user and/or account identifier associated with the user is authenticate, the service provider server computer may be provided with assurance that the user is authenticate and thereafter provide a service requested by the user.
Claims20
A method comprising:
- receiving, at an access control server computer via a directory server, a service provider request message from a service provider server computer comprising an account identifier;
- determining, by the access control server computer, that the account identifier is enrolled in an authentication program;
- in response to determining that the account identifier is enrolled in the authentication program, transmitting an authentication request message requesting authentication data, to a mobile communication device used by a user associated with the account identifier;
- receiving an authentication response message from the mobile communication device comprising the requested authentication data;
- determining that the requested authentication data in the authentication response message matches authentication data stored in a database;
- and
- initiating an action relating to the mobile communication device and the account identifier.
4 more elements
An access control server computer comprising:
- a processor;
- and
- a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising:
- a service provider request message from a service provider server computer comprising an account identifier;
- determining that the account identifier is enrolled in an authentication program;
- in response to determining that the account identifier is enrolled in the authentication program, transmitting an authentication request message requesting authentication data, to a mobile communication device used by a user associated with the account identifier;
- receiving an authentication response message from the mobile communication device comprising the requested authentication data;
- determining that the requested authentication data in the authentication response message matches authentication data stored in a database;
- and
- initiating an action relating to the mobile communication device and the account identifier.
7 more elements
A method comprising:
- receiving, at a directory server, a service provider request message comprising an account identifier from a service provider server computer;
- determining, by the directory server, an access control server computer associated with the account identifier;
- transmitting the service provider request message to the access control server computer;
- receiving, by the directory server, a service provider response message from the access control server computer;
- and
- transmitting the service provider response message to the service provider server computer,
- wherein the service provider server computer or the access control server computer initiates an action relating to the account identifier and a mobile communication device used by a user associated with the account identifier.
4 more elements
A computer comprising:
- a processor;
- and
- a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor for implementing a method comprising:
- receiving a service provider request message comprising an account identifier from a service provider server computer;
- determining an access control server computer associated with the account identifier;
- transmitting the service provider request message to the access control server computer;
- receiving, by the directory server, a service provider response message from the access control server computer;
- and
- transmitting the service provider response message to the service provider server computer,
- wherein the service provider server computer or the access control server computer initiates an action relating to the account identifier and a mobile communication device used by a user associated with the account identifier.
7 more elements
Dependencies are inferred from the claim text.