Back to results
US 2017/0324762 A1Published application
Authentication and risk assessment through header injections
AssigneePaypal, Inc.
InventorsScott Chow, Alex Gong
Life of this patent
Estimating the term…
Abstract
A system for implementing header enrichment or header injections in proprietary networks for authenticating users, conducting user risk assessments, and obtaining user information.
Claims20
A system, comprising:
- a non-transitory memory storing instructions;
- and
- one or more hardware processors coupled to the non-transitory memory and configured to read the instructions from the non-transitory memory to cause the system to perform operations comprising:
- receiving, from an application interacting with a user device over a carrier network, a first request for user information, wherein the first request comprises a header enrichment injected into the first request by the carrier network;
- receiving authentication information from the application;
- extracting an identity of the carrier network from the first request for user information;
- extracting a carrier-provided user identifier from the header enrichment;
- determining the application that sent the first request;
- calculating a risk value based on information in the first request;
- determining a risk threshold based on the application;
- determining that the risk value passes the risk threshold by comparing the risk value to the risk threshold;
- in response to determining that the risk value passes the risk threshold sending, to a system of the carrier network, a second request for user information, the carrier-provided user identifier, and the authentication information;
- receiving, from the system of the carrier network, the user information in response to the second request for user information;
- and
- responding to the first request for user information with the user information.
12 more elements
A computer implemented method comprising:
- receiving, from an application interacting with a user device over a carrier network, a first request for user information, wherein the first request comprises a header enrichment injected into the first request by the carrier network;
- receiving authentication information from the application;
- extracting an identity of the carrier network from the first request for user information;
- extracting a carrier-provided user identifier from the header enrichment;
- identifying the application that sent the first request based on information in the first request;
- sending, to a system of the carrier network, a second request for user information, the carrier-provided user identifier, and the authentication information;
- receiving, from the system of the carrier network, the user information in response to the second request for user information;
- determining a risk value based on information in the first request and the user information;
- determining a risk threshold based on the application;
- determining that the risk value passes the risk threshold;
- and
- responding to the first request for user information with the user information in response to determining that the risk value passes the risk threshold.
9 more elements
A non-transitory machine readable medium having stored thereon machine readable instructions executable to cause a machine to perform operations comprising:
- receiving, from an application interacting with a user device over a carrier network, a first request for user information, wherein the first request comprises a header enrichment injected into the first request by the carrier network;
- receiving authentication information from the application;
- determining an identity of the carrier network based on the first request for user information;
- determining a carrier-provided user identifier from the header enrichment;
- determining the application that sent the first request;
- sending, to a system of the carrier network, a second request for user information, the carrier-provided user identifier, and the authentication information;
- receiving, from the system of the carrier network, the user information in response to the second request for user information;
- determining a risk value based on information in the first request and the user information;
- determining a risk threshold based on the application;
- determining that the risk value passes the risk threshold;
- and
- responding to the first request for user information with the user information in response to determining that the risk value passes the risk threshold.
9 more elements
Dependencies are inferred from the claim text.