Back to results
US 2019/0164165 A1Published application
Cross-device, multi-factor authentication for interactive kiosks
AssigneeCA, Inc.
InventorAshok Kumar Ithabathula
Life of this patent
Estimating the term…
Abstract
Provided is a process that includes: obtaining, from an interactive kiosk, with a remote authentication application, an account identifier; accessing a record that associates the account identifier with a mobile computing device; receiving, from the mobile computing device, a value indicative of whether a sensed biometric attribute matches a previously obtained biometric attribute; determining, based on the value, to authenticate the presenting user; and upon determining to authenticate the user, causing the interactive kiosk to provide access to a secured resource.
Claims20
A tangible, non-transitory, machine-readable medium storing instructions that when executed by one or more processors effectuate operations comprising:
- obtaining, from an interactive kiosk, with one or more processors executing at least part of a remote authentication application, an account identifier, wherein:
- the remote authentication application is physically remote from the interactive kiosk,
- the account identifier distinguishes a given account from a plurality of accounts accessible via the interactive kiosk,
- the account identifier is communicated to the interactive kiosk from a physical token,
- the physical token is presented by a presenting user to the interactive kiosk,
- the presenting user is physically present at the interactive kiosk, and
- the account identifier is obtained based on data read from memory of the physical token upon presentation of the physical token to the interactive kiosk;
- accessing, with one or more processors executing at least part of the authentication application, a record that associates the account identifier with an identifier of a mobile computing device;
- receiving, with one or more processors executing at least part of the authentication application, from the mobile computing device associated with the account identifier obtained from the physical token by the interactive kiosk, via the network, a value indicative of whether a sensed biometric attribute matches a previously obtained biometric attribute of a biometric-verification user, wherein the value is obtained at least in part by sensing, with the mobile computing device, the biometric attribute of the biometric-verification user;
- determining, with one or more processors executing at least part of the remote authentication application, based on the value indicative of whether the sensed biometric attribute matches the previously obtained biometric attribute of the biometric-verification user, to authenticate the presenting user;
- and
- upon determining to authenticate the user, causing, with one or more processors executing at least part of the remote authentication application, the interactive kiosk to provide the presenting user access to a secured resource.
9 more elements
A method, comprising:
- obtaining, from an interactive kiosk, with one or more processors executing at least part of a remote authentication application, an account identifier, wherein:
- the remote authentication application is physically remote from the interactive kiosk,
- the account identifier distinguishes a given account from a plurality of accounts accessible via the interactive kiosk,
- the account identifier is communicated to the interactive kiosk from a physical token,
- the physical token is presented by a presenting user to the interactive kiosk,
- the presenting user is physically present at the interactive kiosk, and
- the account identifier is obtained based on data read from memory of the physical token upon presentation of the physical token to the interactive kiosk;
- accessing, with one or more processors executing at least part of the authentication application, a record that associates the account identifier with an identifier of a mobile computing device;
- receiving, with one or more processors executing at least part of the authentication application, from the mobile computing device associated with the account identifier obtained from the physical token by the interactive kiosk, via the network, a value indicative of whether a sensed biometric attribute matches a previously obtained biometric attribute of a biometric-verification user, wherein the value is obtained at least in part by sensing, with the mobile computing device, the biometric attribute of the biometric-verification user;
- determining, with one or more processors executing at least part of the remote authentication application, based on the value indicative of whether the sensed biometric attribute matches the previously obtained biometric attribute of the biometric-verification user, to authenticate the presenting user;
- and
- upon determining to authenticate the user, causing, with one or more processors executing at least part of the remote authentication application, the interactive kiosk to provide the presenting user access to a secured resource.
9 more elements
Dependencies are inferred from the claim text.