System and method for providing merchant in context checkout
AssigneePaypal, Inc.
InventorsDarshan Desai, Kishore Jaladi
Life of this patent
Estimating the term…
Abstract
Methods and systems for providing merchant in-context checkout are described. A user is authenticated based on credentials received from a first application running on a computing device. An authentication code is provided to the first application. A signed verifier and the authentication code is then received from a second application running on the computing device. The authentication code and the signed verifier received from the second application are then validated, and a device token is provided to the second application upon validation. The device token is exchangeable by the second application for an access token that is usable for making payment calls from the second application.
Claims20
A system comprising:
- a non-transitory memory storing instructions;
- and
- one or more hardware processors coupled to the non-transitory memory and configured to read the instructions from the non-transitory memory to cause the system to perform operations comprising:
- authenticating a user based on credentials received from a first application running on the computing device;
- providing an authentication code to the first application;
- receiving a signed verifier and the authentication code from a second application running on the computing device;
- validating the authentication code and the signed verifier received from the second application;
- and
- providing a device token to the second application, the device token being exchangeable by the second application for an access token that is usable for making payment calls from the second application.
A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause performance of operations comprising:
- determining that a device token associated with a user of an application is stored on a secure element;
- requesting a signature for a verifier from the secure element;
- receiving a signed verifier and the access token from the secure element;
- sending the signed verifier and the access token to a server;
- receiving an access token from the server in response to the server validating the signed verifier and the access token;
- and
- utilizing the access token to make payment calls to the server.
A method comprising:
- receiving a username and password associated with a user from a first application;
- providing an access token to the first application in response to verifying the received username and password for the user;
- receiving the access token and a public key associated with the user from the first application;
- linking the public key and an authentication code to an account corresponding to the user;
- providing an authentication code to the first application;
- receiving a signed verifier and the authentication code from a second application running on the computing device;
- validating the authentication code and the signed verifier received from the second application using the public key;
- and
- providing a device token to the second application, the device token being exchangeable by the second application for an access token that is usable for making payment calls from the second application.
Dependencies are inferred from the claim text.