# US 2021/0243181 A1 · Verifying Party Identities for Secure Transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243181 A1 - Document ID: US20210243181A1 - Status: Published application - Kind: A1 - Application number: 17/151,591 - Filed: 2021-01-18 - Published: 2021-08-05 - Earliest claimed: 2017-01-18 - Assignees: CertifID LLC - Applicants: CertifID LLC - Inventors: Thomas W. Cronkright; Lawrence R. Duthler - Web page: https://patentgrep.com/patent/US20210243181A1 ## CPC - H04L 63/0838: {using one-time-passwords} - G06F 16/951: Indexing; Web crawling techniques - G06F 16/953: Querying, e.g. by the use of web search engines - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 2463/102: applying security measure for e-commerce - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method for verifying identities of parties to a transaction includes receiving a login attempt from a mobile communication device, the login attempt including a security credential. The method determines that the security credential of the login attempt from the mobile communication device is authentic. The method communicates a one-time access code to the mobile communication device. The method receives a one-time entry code and mobile communication device information from the mobile communication device. The method determines that the one-time entry code and the mobile communication device information from the mobile communication device satisfies the communicated one-time access code and predetermined user mobile communication device information. The method provides by the mobile communication device access to a secure transaction environment. ## Claims ### Claim 1 A computer-implemented method when executed by data processing hardware causes the data processing hardware to perform operations comprising: receiving a login attempt from a mobile communication device of a registered user, the login attempt comprising a first security credential; determining that the first security credential of the login attempt from the mobile communication device is associated with an account of the registered user; receiving mobile communication device information from the mobile communication device; determining whether the mobile communication device information satisfies predetermined mobile communication device information associated with the account of the registered user; when the mobile communication device information fails to satisfy the predetermined mobile communication device information, rejecting the login attempt; when the mobile communication device information satisfies the predetermined mobile communication device information, transmitting a request for a second security credential from the mobile communication device; receiving the second security credential from the mobile communication device; determining whether the second security credential is associated with the account of the registered user; and when the second security credential is associated with the account of the registered user, providing the mobile communication device access to a secure transaction environment. ### Claim 2 (depends on 1) The method of claim 1, wherein the first security credential is a password. ### Claim 3 (depends on 1) The method of claim 1, wherein the second security credential is personal identification number (PIN) or a biometric credential. ### Claim 4 (depends on 3) The method of claim 3, wherein the biometric credential is a fingerprint. ### Claim 5 (depends on 1) The method of claim 1, wherein the second security credential is one or more answers to one or more private information questions. ### Claim 6 (depends on 1) The method of claim 1, wherein the operations further comprise, when the second security credential is not associated with the account of the registered user, transmitting a second request for the second security credential from the mobile communication device. ### Claim 7 (depends on 1) The method of claim 1, wherein the operations further comprise, after providing the mobile communication device access to the secure transaction environment, receiving a new transaction request from the mobile communication device, the new transaction request requesting a transaction with a different registered user with access to the secure transaction environment. ### Claim 8 (depends on 1) The method of claim 1, wherein determining whether the mobile communication device information satisfies predetermined mobile communication device information comprises accessing a private distributed ledger database and a public distributed ledger database. ### Claim 9 (depends on 8) The method of claim 8, wherein the private distributed ledger database and the public distributed ledger database comprise a blockchain database. ### Claim 10 (depends on 1) The method of claim 1, wherein the mobile communication device information comprises at least one of: a unique telephone number assigned to the mobile communication device; an electronic serial number; an international mobile equipment indicator unique to the mobile communication device; a cellular provider of the mobile communication device; an internet protocol address from the mobile communication device; or a service provider providing internet services to the mobile communication device. ### Claim 11 A system comprising: data processing hardware; and memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising: receiving a login attempt from a mobile communication device of a registered user, the login attempt comprising a first security credential; determining that the first security credential of the login attempt from the mobile communication device is associated with an account of the registered user; receiving mobile communication device information from the mobile communication device; determining whether the mobile communication device information satisfies predetermined mobile communication device information associated with the account of the registered user; when the mobile communication device information fails to satisfy the predetermined mobile communication device information, rejecting the login attempt; when the mobile communication device information satisfies the predetermined mobile communication device information, transmitting a request for a second security credential from the mobile communication device; receiving the second security credential from the mobile communication device; determining whether the second security credential is associated with the account of the registered user; and when the second security credential is associated with the account of the registered user, providing the mobile communication device access to a secure transaction environment. ### Claim 12 (depends on 11) The system of claim 11, wherein the first security credential is a password. ### Claim 13 (depends on 11) The system of claim 11, wherein the second security credential is personal identification number (PIN) or a biometric credential. ### Claim 14 (depends on 13) The system of claim 13, wherein the biometric credential is a fingerprint. ### Claim 15 (depends on 11) The system of claim 11, wherein the second security credential is one or more answers to one or more private information questions. ### Claim 16 (depends on 11) The system of claim 11, wherein the operations further comprise, when the second security credential is not associated with the account of the registered user, transmitting a second request for the second security credential from the mobile communication device. ### Claim 17 (depends on 11) The system of claim 11, wherein the operations further comprise, after providing the mobile communication device access to the secure transaction environment, receiving a new transaction request from the mobile communication device, the new transaction request requesting a transaction with a different registered user with access to the secure transaction environment. ### Claim 18 (depends on 11) The system of claim 11, wherein determining whether the mobile communication device information satisfies predetermined mobile communication device information comprises accessing a private distributed ledger database and a public distributed ledger database. ### Claim 19 (depends on 18) The system of claim 18, wherein the private distributed ledger database and the public distributed ledger database comprise a blockchain database. ### Claim 20 (depends on 11) The system of claim 11, wherein the mobile communication device information comprises at least one of: a unique telephone number assigned to the mobile communication device; an electronic serial number; an international mobile equipment indicator unique to the mobile communication device; a cellular provider of the mobile communication device; an internet protocol address from the mobile communication device; or a service provider providing internet services to the mobile communication device.