# US 2023/0053385 A1 · Systems and methods for authenticating end users of a web service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0053385 A1 - Document ID: US20230053385A1 - Status: Published application - Kind: A1 - Application number: 17/409,084 - Filed: 2021-08-23 - Published: 2023-02-23 - Earliest claimed: 2021-08-23 - Assignees: The Toronto-Dominion Bank - Applicants: The Toronto-Dominion Bank - Inventors: Milos DUNJIC; David Samuel TAX; Kushank RASTOGI; Asad JOHEB; Lisa Marie BAST; Vipul Kishore LALKA - Web page: https://patentgrep.com/patent/US20230053385A1 ## CPC - H04L 63/102: {Entity profiles} - G06F 21/31: User authentication - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A computer-implemented method is disclosed. The method includes: receiving an authentication request to authenticate a first entity with a first service; in response to receiving the authentication request: identifying an access-restricted first data record associated with the first entity; generating a message associated with a first transfer of resources between the first data record and a designated second data record, the message identifying one of the first and second data records as a recipient data record for the first transfer and defining a first quantity of resources to transfer; and transmitting the message to a first server associated with the first entity, the first server requiring user authentication to access the message; determining a completion status of the first transfer; and generating a response to the authentication request based on the completion status of the first transfer. ## Claims ### Claim 1 A computing system, comprising: a processor; a communications module coupled to the processor; and a memory coupled to the processor, the memory storing instructions that, when executed, configure the processor to: receive an authentication request to authenticate a first entity with a first service; in response to receiving the authentication request: identify an access-restricted first data record associated with the first entity; generate a message associated with a first transfer of resources between the first data record and a designated second data record, the message identifying one of the first and second data records as a recipient data record for the first transfer and defining a first quantity of resources to transfer; and transmit the message to a first server associated with the first entity, the first server requiring user authentication to access the message; determine a completion status of the first transfer; and generate a response to the authentication request based on the completion status of the first transfer. ### Claim 2 (depends on 1) The computing system of claim 1, wherein the message comprises a resource transfer request to cause the first transfer of resources to be initiated from the first data record to the second data record and wherein determining the completion status of the first transfer comprises: receiving a response message associated with the resource transfer request; and validating the response message. ### Claim 3 (depends on 2) The computing system of claim 2, wherein validating the response message comprises: verifying that the response message is associated with the first entity; and determining that the response message designates the first quantity of resources to be transferred to the second data record. ### Claim 4 (depends on 1) The computing system of claim 1, wherein the first server comprises a messaging server associated with a messaging service that is independent of the first data record. ### Claim 5 (depends on 1) The computing system of claim 1, wherein the first server comprises a resource server associated with the first data record and wherein the first transfer comprises a transfer of resources via a real-time transfer rail. ### Claim 6 (depends on 1) The computing system of claim 1, wherein determining the completion status of the first transfer comprises detecting transfer failure of the first transfer and wherein the response to the authentication request comprises a notification of the transfer failure. ### Claim 7 (depends on 6) The computing system of claim 6, wherein the transfer failure of the first transfer comprises at least one of: an authentication failure of the entity at a messaging server associated with a messaging service; or an authentication failure of the entity at a resource server associated with the first data record. ### Claim 8 (depends on 6) The computing system of claim 6, wherein detecting the transfer failure of the first transfer comprises determining that a time-out condition associated with the first transfer has occurred. ### Claim 9 (depends on 1) The computing system of claim 1, wherein the message comprises a transfer initiation message for transferring the first quantity of resources from the second data record to the first data record and wherein determining the completion status of the first transfer comprises determining that the first quantity of resources is received at the first data record. ### Claim 10 (depends on 9) The computing system of claim 9, wherein the transfer initiation message identifies the first data record as an exclusive recipient data record. ### Claim 11 A computer-implemented method, comprising: receiving an authentication request to authenticate a first entity with a first service; in response to receiving the authentication request: identifying an access-restricted first data record associated with the first entity; generating a message associated with a first transfer of resources between the first data record and a designated second data record, the message identifying one of the first and second data records as a recipient data record for the first transfer and defining a first quantity of resources to transfer; and transmitting the message to a first server associated with the first entity, the first server requiring user authentication to access the message; determining a completion status of the first transfer; and generating a response to the authentication request based on the completion status of the first transfer. ### Claim 12 (depends on 11) The method of claim 11, wherein the message comprises a resource transfer request to cause the first transfer of resources to be initiated from the first data record to the second data record and wherein determining the completion status of the first transfer comprises: receiving a response message associated with the resource transfer request; and validating the response message. ### Claim 13 (depends on 12) The method of claim 12, wherein validating the response message comprises: verifying that the response message is associated with the first entity; and determining that the response message designates the first quantity of resources to be transferred to the second data record. ### Claim 14 (depends on 11) The method of claim 11, wherein the first server comprises a messaging server associated with a messaging service that is independent of the first data record. ### Claim 15 (depends on 11) The method of claim 11, wherein the first server comprises a resource server associated with the first data record and wherein the first transfer comprises a transfer of resources via a real-time transfer rail. ### Claim 16 (depends on 11) The method of claim 11, wherein determining the completion status of the first transfer comprises detecting transfer failure of the first transfer and wherein the response to the authentication request comprises a notification of the transfer failure. ### Claim 17 (depends on 16) The method of claim 16, wherein the transfer failure of the first transfer comprises at least one of: an authentication failure of the entity at a messaging server associated with a messaging service; or an authentication failure of the entity at a resource server associated with the first data record. ### Claim 18 (depends on 16) The method of claim 16, wherein detecting the transfer failure of the first transfer comprises determining that a time-out condition associated with the first transfer has occurred. ### Claim 19 (depends on 11) The method of claim 11, wherein the message comprises a transfer initiation message for transferring the first quantity of resources from the second data record to the first data record and wherein determining the completion status of the first transfer comprises determining that the first quantity of resources is received at the first data record. ### Claim 20 (depends on 19) The method of claim 19, wherein the transfer initiation message identifies the first data record as an exclusive recipient data record.