System and method for passwordless logins
AssigneeAffirm, Inc.
InventorsJeffrey Howard Kaditz, Andrew Gettings Stevens, Bradley N. Selby, Aaron Ng Ligon, Manuel De Jesus Arias
Life of this patent
Estimating the term…
Abstract
A login system allows users to access computer systems without using a password. The passwordless system and method can use other information to securely and reliably identify true authorized system users. The identity of a user can be associated with their mobile device. The login can be based upon a minimal amount of information such as a name and a phone number which can be stored as an identification record for each of the users in a database.
Claims21
1-18. (canceled)
A method for a passwordless login to an internet based system that includes a server, a database and a smart phone in communication with the server through a network, the method comprising:
- receiving, at the server, a transmission from the smart phone including only a user name and a phone number for the smart phone associated with a user without any password;
- recognizing, by the server, the user name and the phone number for the smart phone during a login of the user;
- transmitting, by the server, a verification message that includes a unique randomly generated verification code that is part of a hyperlink for the passwordless login to the phone number of the smart phone;
- providing, by the server, instructions for displaying a webpage for the hyperlink for internet based system on the smart phone of the user during the passwordless login;
- receiving, by the server, a confirmation message transmitted through the hyperlink from the smart phone to authenticate the user during the passwordless login of the user;
- binding, by the server, identification information for the smart phone to the user during the passwordless login of the user;
- and
- authorizing, by the server, the user and the smart phone to interact with the server.
A method for purchasing goods in a system comprising a server, a database and a mobile device in communication with the server through a network, the method comprising:
- receiving a transmission from the mobile device at the server, the transmission including a user name and phone number for the mobile device associated with a user;
- recognizing, by the server, the user name, the phone number and a unique identifier for the mobile device to authenticate the user during a passwordless login of the user;
- receiving, at the server and from the mobile device, identification information for the goods in a personal point of sales program running at the mobile device;
- transmitting, by the server, a verification message that includes a unique randomly generated verification code that is part of a hyperlink for the passwordless login to the phone number of the mobile device;
- providing, by the server, instructions for displaying a webpage for the hyperlink for purchasing the goods on the mobile device of the user during the passwordless login;
- receiving, by the server, a purchase acceptance response to the verification message transmitted through the hyperlink for accepting the purchasing the goods from the mobile device to authenticate the user during the passwordless login of the user;
- binding, by the server, identification information for the mobile device to the user;
- and
- authorizing, by the server, the user and the mobile device to interact with the server using the passwordless login to complete the purchase of the goods.
A method for accessing a system for financing purchase of a product, the method comprising:
- receiving, at a server, a transmission from a mobile device for accessing the system, the transmission including a phone number for a mobile device associated with a user attempting to access the system;
- recognizing, by the server, the phone number and a unique identifier for the mobile device to authenticate the user during a passwordless login of the user;
- transmitting, by the server, a verification message that includes a unique randomly generated verification code that is part of the passwordless login to the phone number of the mobile device;
- receiving, by the server, a response to the verification message including the verification code to authenticate the user during the passwordless login of the user;
- determining, by the server, a permission level of the user based on the passwordless login of the user;
- authorizing, by the server, the user and the mobile device to access the system to interact with the server using the passwordless login;
- and
- granting the user, by the server, access to a service based on the permission level granted.
Dependencies are inferred from the claim text.