# US 2023/0053383 A1 · Relying Party Risk-Adjusted Indicator System and Method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2023/0053383 A1
- Document ID: US20230053383A1
- Status: Published application
- Kind: A1
- Application number: 17/982,678
- Filed: 2022-11-08
- Published: 2023-02-23
- Earliest claimed: 2019-11-04
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: William Joseph Leddy, III
- Web page: https://patentgrep.com/patent/US20230053383A1

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/32: using wireless devices
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Provided is a method including receiving, by a user device, a request from an identity service to approve communicating a user proof-of-identity to a relying party. A user of the user device is prompted to request a one-time transaction identifier based on the request. Based on a first input from the user, the user device requests the one one-time transaction identifier from the identity service. In response to the request for the one-time transaction identifier, the user device receives the one-time transaction identifier from the identity server and displays the one-time transaction identifier on a first user device screen. The user inputs the one-time transaction identifier on a second user device screen and the user device communicates the one-time transaction identifier to the identity service. In response to receiving the at least one inputted one-time transaction identifier, the relying party determines whether to approve or deny a transaction.

## Claims

### Claim 1

A computer-implemented method comprising:
receiving, by a user device, a request from at least one identity service to approve communicating at least one user proof-of-identity to at least one relying party;
prompting, by the user device, a user of the user device to request at least one one-time transaction identifier based on the request;
requesting, by the user device, the at least one one-time transaction identifier from at least one identity server associated with the at least one identity service based on a first input from the user on the user device;
in response to the request for the at least one one-time transaction identifier, receiving, by the user device, the at least one one-time transaction identifier from the identity server;
displaying, by the user device, the at least one one-time transaction identifier on a first user device screen;
receiving, by the user device, a second input from the user on a second user device screen different than the first user device screen, the second input comprising at least one inputted one-time transaction identifier;
communicating, by the user device to the at least one identity service, the at least one inputted one-time transaction identifier input by the user on the second user device screen; and
in response to receiving the at least one inputted one-time transaction identifier, determining, by the at least one relying party, whether to approve or deny a transaction based at least partially on the at least one one-time transaction identifier and the at least one inputted one-time transaction identifier.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1 further comprising:
generating at least one risk signifier associated with the user.

### Claim 3 (depends on 2)

The computer-implemented method of claim 2 further comprising:
generating at least one relying party risk-adjusted indicator based on the one-time transaction identifier and the at least one risk signifier associated with the user; and
communicating the at least one relying party risk-adjusted indicator to the at least one relying party.

### Claim 4 (depends on 3)

The computer-implemented method of claim 3, wherein determining whether to approve or deny the transaction is based partially on receiving, by the relying party, the at least one relying party risk-adjusted indicator.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1 further comprising:
displaying the at least one user proof-of-identity, wherein the at least one user proof-of-identity is associated with a corresponding check-box of a plurality of corresponding check-boxes.

### Claim 6 (depends on 5)

The computer-implemented method of claim 5 further comprising:
receiving a third input from the user comprising a selection of at least one check-box of the plurality of corresponding check-boxes; and
in response to receiving the third input, displaying a check-mark in the at least one selected check-box, wherein the check-mark indicates the user authorizes the at least one identity service to send the corresponding at least one user proof-of-identity to the at least one relying party.

### Claim 7 (depends on 5)

The computer-implemented method of claim 5, wherein the at least one user proof-of-identity is a biometric input, a Personal Identification Number, a password, or any combination thereof.

### Claim 8

A system comprising at least one processor of a user device programmed or configured to:
receive a request from at least one identity service to approve communicating at least one user proof-of-identity to at least one relying party;
prompt a user of the user device to request at least one one-time transaction identifier based on the request;
request the at least one one-time transaction identifier from at least one identity server associated with the at least one identity service based on a first input from the user on the user device;
in response to the request for the at least one one-time transaction identifier, receive the at least one one-time transaction identifier from the identity server;
display the at least one one-time transaction identifier on a first user device screen;
receive a second input from the user on a second user device screen different than the first user device screen, the second input comprising at least one inputted one-time transaction identifier;
communicate to the at least one identity service the at least one inputted one-time transaction identifier input by the user on the second user device screen; and
at least one processor of the at least one relying party programmed or configured to:
in response to receiving the at least one inputted one-time transaction identifier, determine whether to approve or deny a transaction based at least partially on the at least one one-time transaction identifier and the at least one inputted one-time transaction identifier.

### Claim 9 (depends on 8)

The system of claim 8, wherein the at least one processor of the user device is programmed or configured to:
generate at least one risk signifier associated with the user.

### Claim 10 (depends on 9)

The system of claim 9, wherein the at least one processor of the user device is programmed or configured to:
generate at least one relying party risk-adjusted indicator based on the one-time transaction identifier and the at least one risk signifier associated with the user; and
communicate the at least one relying party risk-adjusted indicator to the at least one relying party.

### Claim 11 (depends on 10)

The system of claim 10, wherein when determining whether to approve or deny the transaction, the at least one processor of the relying party is programmed or configured to:
receive the at least one relying party risk-adjusted indicator, wherein the determination to approve or deny the transaction is based partially on the at least one relying party risk-adjusted indicator.

### Claim 12 (depends on 8)

The system of claim 8, wherein the at least one processor of the user device is programmed or configured to:
display the at least one user proof-of-identity, wherein the at least one user proof-of-identity is associated with a corresponding check-box of a plurality of corresponding check-boxes.

### Claim 13 (depends on 12)

The system of claim 12, wherein the at least one processor of the user device is programmed or configured to:
receive a third input from the user comprising a selection of at least one check-box of the plurality of corresponding check-boxes; and
in response to receiving the third input, display a check-mark in the at least one selected check-box, wherein the check-mark indicates the user authorizes the at least one identity service to send the corresponding at least one user proof-of-identity to the at least one relying party.

### Claim 14 (depends on 12)

The system of claim 12, wherein the at least one user proof-of-identity is a biometric input, a Personal Identification Number, a password, or any combination thereof.

### Claim 15

A computer program product comprising at least one non-transitory computer readable medium including one or more instructions that, when executed by at least one processor, cause the at least one processor to:
receive a request from at least one identity service to approve communicating at least one user proof-of-identity to at least one relying party;
prompt a user of a user device to request at least one one-time transaction identifier based on the request;
request the at least one one-time transaction identifier from at least one identity server associated with the at least one identity service based on a first input from the user on the user device;
in response to the request for the at least one one-time transaction identifier, receive the at least one one-time transaction identifier from the identity server;
display the at least one one-time transaction identifier on a first user device screen;
receive a second input from the user on a second user device screen different than the first user device screen, the second input comprising at least one inputted one-time transaction identifier;
communicate to the at least one identity service the at least one inputted one-time transaction identifier input by the user on the second user device screen; and
in response to receiving the at least one inputted one-time transaction identifier, determine whether to approve or deny a transaction based at least partially on the at least one one-time transaction identifier and the at least one inputted one-time transaction identifier.

### Claim 16 (depends on 15)

The computer program product of claim 15, wherein the one or more instructions cause the at least one processor to:
generate at least one risk signifier associated with the user.

### Claim 17 (depends on 16)

The computer program product of claim 16, wherein the one or more instructions cause the at least one processor to:
generate at least one relying party risk-adjusted indicator based on the one-time transaction identifier and the at least one risk signifier associated with the user; and
communicate the at least one relying party risk-adjusted indicator to the at least one relying party.

### Claim 18 (depends on 17)

The computer program product of claim 17, wherein when determining whether to approve or deny the transaction the one or more instructions further cause the at least one processor to: receive the at least one relying party risk-adjusted indicator, wherein the determination to approve or deny the transaction is based partially on the at least one relying party risk-adjusted indicator.

### Claim 19 (depends on 15)

The computer program product of claim 15, wherein the one or more instructions cause the at least one processor to: display the at least one user proof-of-identity, wherein the at least one user proof-of-identity is associated with a corresponding check-box of a plurality of corresponding check-boxes.

### Claim 20 (depends on 19)

The computer program product of claim 19, wherein the one or more instructions cause the at least one processor to:
receive a third input from the user comprising a selection of at least one check-box of the plurality of corresponding check-boxes; and
in response to receiving the third input, display a check-mark in the at least one selected check-box, wherein the check-mark indicates the user authorizes the at least one identity service to send the corresponding at least one user proof-of-identity to the at least one relying party, wherein the at least one user proof-of-identity is a biometric input, a Personal Identification Number, a password, or any combination thereof.
