# US 2019/0378102 A1 · Systems and Methods for Use in Verifying Users to Service Providers

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0378102 A1
- Document ID: US20190378102A1
- Status: Published application
- Kind: A1
- Application number: 16/006,296
- Filed: 2018-06-12
- Published: 2019-12-12
- Earliest claimed: 2018-06-12
- Assignees: Mastercard International Incorporated
- Applicants: Mastercard International Incorporated
- Inventors: Manoneet Kohli
- Web page: https://patentgrep.com/patent/US20190378102A1

## CPC

- G06Q 20/127: {Shopping or accessing services according to a time-limitation}
- G06F 9/468: {Specific access rights for resources, e.g. using capability register}
- G06F 9/547: {Remote procedure calls [RPC]; Web services}
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/45: Structures or tools for the administration of authentication
- G06Q 20/36: using electronic wallets or electronic money safes
- G06Q 20/3674: {involving authentication}
- G06Q 20/4014: {Identity check for transactions}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06F 2221/2117: User registration
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods are provided for verifying a user, through an account associated with the user, in connection with a subscription of the user to a service from a service provider. One exemplary system includes a memory having an account for the user, and a platform computing device coupled to and/or including the memory. The computing device is configured to receive a request from the service provider, in connection with the user subscribing to the service, and authenticate the user. When the user is authenticated, the computing device is configured to generate a subscription message for the user comprising assurance data based on the user's account, a timestamp, and an identifier associated with the user, and transmit the subscription message to the service provider, to thereby permit the service provider to rely on the assurance data to verify the user.

## Claims

### Claim 1

A system for verifying a user, through an account associated with the user, in connection with a subscription of the user to one or more services, the system comprising:
a memory including an account for a user, the account associated with a mobile application and including login credentials for the mobile application, the account further provisioned with at least one issued account for the user; and
a platform computing device coupled to and/or including the memory, the platform computing device configured to:
receive a request from a service provider, in connection with the user subscribing to at least one service offered by the service provider;
authenticate the user, based on the login credentials for the mobile application associated with the user;
when the user is authenticated, generate a subscription message for the user, the subscription message including assurance data based on the account for the user, a timestamp, and an identifier associated with one or more of the mobile application, the account and the user, the assurance data indicative of at least one interval associated with the at least one issued account and the mobile application; and
transmit the subscription message to the service provider, in response to the request, to thereby permit the service provider to rely on the assurance data included in the subscription message to verify the user, in lieu of direct identification and verification of the user by the service provider apart from the platform computing device.

### Claim 2 (depends on 1)

The system of claim 1, wherein the subscription message includes personal identifying information (PII) for the user, the PII including multiple of: a name of the user, an address of the user, a date of birth of the user, and a government identifier unique to the user.

### Claim 3 (depends on 1)

The system of claim 1, wherein the account for the user includes a virtual wallet account;
wherein the at least one issued account includes at least one payment account;
wherein the platform computing device includes a wallet platform computing device; and
wherein the mobile application includes a virtual wallet application at a communication device associated with the user.

### Claim 4 (depends on 3)

The system of claim 3, wherein said at least one interval associated with the at least one issued account and the mobile application includes an interval since the at least one payment account was provisioned to the virtual wallet account.

### Claim 5 (depends on 4)

The system of claim 4, wherein the assurance data further includes an interval since a last transaction initiated through the virtual wallet application at the communication device and funded by the at least one payment account.

### Claim 6 (depends on 3)

The system of claim 3, wherein, in order to authenticate the user, the wallet platform computing device is configured to:
cause a login interface to be displayed to the user, via a virtual wallet application, at the communication device; and
receive login credentials from the user, via the login interface; and
determine whether the received login credentials match the login credential included in the memory, whereby the user is authenticated when the login credentials match.

### Claim 7 (depends on 3)

The system of claim 3, wherein the wallet platform computing device is further configured to:
receive, from the service provider, a notification of reliance indicating reliance of the service provider on the subscription message in connection with subscription of the user to the at least one service; and
record an indication of reliance, based on the notification, as part of the virtual wallet account for the user, in the memory.

### Claim 8 (depends on 7)

The system of claim 7, wherein the wallet platform computing device is further configured to transmit a change notification to the service provider, when the at least one payment account is deleted from the virtual wallet account and the virtual wallet account includes an indication of reliance by the service provider.

### Claim 9 (depends on 3)

The system of claim 3, wherein the service provider includes one of a utility provider and a banking institution.

### Claim 10 (depends on 9)

The system of claim 9, wherein the wallet platform computing device is further configured to transmit a personal identifying information (PII) message to the service provider, in response to an application programming interface (API) call for PII after the subscription message is generated and transmitted to the service provider.

### Claim 11

A computer-implemented method for providing verification of a user, through a virtual wallet account associated with the user, in connection with a subscription of the user to one or more services, the method comprising:
receiving, by at least one computing device, from a service provider, a request to verify a user associated with a virtual wallet account in connection with subscription of the user to at least one service associated with the service provider, the virtual wallet account associated with a communication device of the user and provisioned with at least one payment account;
requesting, by the at least one computing device, authentication of the user to the virtual wallet account;
after authentication of the user, generating, by the at least one computing device, a subscription message, the subscription message including at least assurance data for the user based on the virtual wallet account, a timestamp, and a wallet identifier for the virtual wallet account and/or the communication device, the assurance data including historic details of the at least one payment account and/or the virtual wallet account; and
transmitting the subscription message to the service provider in response to the request to verify the user associated with the virtual wallet account, thereby permitting the service provider to rely on the assurance data and to proceed, or not, with subscription of the user to the at least one service while omitting further verification of the user with a third party and apart from the at least one computing device.

### Claim 12 (depends on 11)

The computer-implemented method of claim 11, wherein the subscription message includes at least a portion of personal identifying information (PII) for the user included in the at least one computing device and associated with the virtual wallet account.

### Claim 13 (depends on 12)

The computer-implemented method of claim 12, further comprising requesting, by the at least one computing device, consent from the user to share the PII with the service provider, prior to generating the subscription message; and
wherein the subscription message includes the at least a portion of the PII only when consent is provided from the user.

### Claim 14 (depends on 11)

The computer-implemented method of claim 11, wherein the assurance data includes an interval since a last transaction initiated by a virtual wallet application at the communication device, and associated with the virtual wallet account, and funded by the at least one payment account.

### Claim 15 (depends on 11)

The computer-implemented method of claim 11, wherein the assurance data includes at least one of an interval since the at least one payment account was added to the virtual wallet account and an interval since issuance of the at least one payment account to the user.

### Claim 16 (depends on 11)

The computer-implemented method of claim 11, wherein requesting authentication of the user includes one of:
causing a login interface to be displayed to the user, via the service provider, at the communication device; and
causing a login interface to be displayed to the user, via a virtual wallet application at the communication device and associated with the virtual wallet account.

### Claim 17 (depends on 11)

The computer-implemented method of claim 11, further comprising:
receiving, by the at least one computing device, a notification of reliance from the service provider indicating that the subscription message was relied upon in connection with subscription of the user to the at least one service;
recording, by the at least one computing device, an indication of reliance, based on the notification, as part of the virtual wallet account for the user, in memory; and
transmitting a change in payment account notification to the service provider, when the at least one payment account is altered in the virtual wallet account and the virtual wallet account includes an indication of reliance by the service provider, thereby permitting the service provider to re-evaluate verification of the user.

### Claim 18

A non-transitory computer-readable storage media including executable instructions for providing verification of a user, through a virtual wallet account associated with the user, in connection with subscription by the user for at least one service, which when executed by at least one processor, cause the at least one processor to:
receive, from a service provider, a request to verify a user associated with a virtual wallet account in connection with subscription of the user to at least one service associated with the service provider, the virtual wallet account associated with a communication device of the user and provisioned with at least one payment account;
when the user is authenticated to the virtual wallet account in connection with the request, generate a subscription message having assurance data, a timestamp, and a wallet identifier for the virtual wallet account and/or the communication device, the assurance data including an interval associated with a last transaction to the at least one payment account and/or an interval associated with provisioning of the at least one payment account to the virtual wallet account; and
transmit the subscription message to the service provider in response to the request to verify the user associated with the virtual wallet account, thereby permitting the service provider to rely on the assurance data in proceeding, or not, with subscription of the user to the at least one service, without further and separately verifying the user with a third party and apart from the at least one processor.

### Claim 19 (depends on 18)

The non-transitory computer-readable storage media of claim 18, wherein the executable instructions, when executed by the at least one processor, further cause the at least one processor to:
record an indication of reliance as part of the virtual wallet account for the user, wherein the indication is based on a notification from the service provider indicating reliance of the service provider on at least part of the subscription message; and
transmit a change notification to the service provider, when the virtual wallet account includes the indication of reliance and the at least one payment account is deleted from the virtual wallet account, thereby permitting the service provider to re-evaluate verification of the user.

### Claim 20 (depends on 18)

The non-transitory computer-readable storage media of claim 18, wherein the subscription message includes personal identifying information (PII), thereby permitting the service provider to validate PII received from the user, in connection with the subscription of the user to the at least one service, based on the PII included in the subscription message.
