Back to results
US 2023/0148036 A1Published application
System, Method, and Apparatus for Authenticating a User Device
AssigneeVisa International Service Association
InventorsVaibhav Prakash Gajre, Veerabhadraiah Lingadhalli Matadha, Akon Samir Dey
Life of this patent
Estimating the term…
Abstract
Provided is a method, system, and apparatus for authenticating a user device. The method includes registering a device identifier with at least one transformation rule, receiving a request for authentication comprising a device identifier associated with a user device, obtaining a one-time password (OTP) in response to receiving the request, communicating the OTP to the user device, receiving a transformed OTP from the user device, and authenticating the user device based on the OTP, the transformed OTP, and the at least one transformation rule.
Claims20
A computer-implemented method, comprising:
- receiving, with at least one processor, a registration request message comprising a device identifier and a user identifier from a user device associated with the device identifier or a separate computing device;
- receiving, with at least one processor, at least one transformation rule from the user device or the separate computing device;
- communicating, with at least one processor, a message comprising an initial OTP to the user device or the separate computing device;
- receiving, with at least one processor from the user device or the separate computing device, a responsive message comprising an initial transformed OTP;
- generating, with at least one processor, a comparison OTP by applying the at least one transformation rule to the initial OTP;
- comparing, with at least one processor, the comparison OTP to the initial transformed OTP;
- in response to determining that the comparison OTP matches the initial transformed OTP based on comparing the comparison OTP to the initial transformed OTP, registering, with at least one processor, the device identifier with the at least one transformation rule in an authentication database;
- receiving, with at least one processor, a request for authentication comprising the device identifier;
- and
- authenticating, with at least one processor, the user device associated with the device identifier based on a second OTP communicated to the user device, a second transformed OTP received from the user device, and the at least one transformation rule registered to the device identifier in the authentication database.
7 more elements
A system for registering a user device comprising:
- a memory;
- and
- at least one processor programmed or configured to:
- receive a registration request message comprising a device identifier and a user identifier from a user device associated with the device identifier or a separate computing device;
- receive at least one transformation rule from the user device or the separate computing device;
- communicate a message comprising an initial OTP to the user device or the separate computing device;
- receive from the user device or the separate computing device, a responsive message comprising an initial transformed OTP;
- generate a comparison OTP by applying the at least one transformation rule to the initial OTP;
- compare the comparison OTP to the initial transformed OTP;
- in response to determining that the comparison OTP matches the initial transformed OTP based on comparing the comparison OTP to the initial transformed OTP, register the device identifier with the at least one transformation rule in an authentication database;
- receive a request for authentication comprising the device identifier;
- and
- authenticate the user device associated with the device identifier based on a second OTP communicated to the user device, a second transformed OTP received from the user device, and the at least one transformation rule registered to the device identifier in the authentication database.
10 more elements
A computer program product for registering a user device, comprising at least one non-transitory computer-readable medium comprising one or more instructions that, when executed by at least one processor, cause the at least one processor to:
- receive a registration request message comprising a device identifier and a user identifier from a user device associated with the device identifier or a separate computing device;
- receive at least one transformation rule from the user device or the separate computing device;
- communicate a message comprising an initial OTP to the user device or the separate computing device;
- receive from the user device or the separate computing device, a responsive message comprising an initial transformed OTP;
- generate a comparison OTP by applying the at least one transformation rule to the initial OTP;
- compare the comparison OTP to the initial transformed OTP;
- in response to determining that the comparison OTP matches the initial transformed OTP based on comparing the comparison OTP to the initial transformed OTP, register the device identifier with the at least one transformation rule in an authentication database;
- receive a request for authentication comprising the device identifier;
- and
- authenticate the user device associated with the device identifier based on a second OTP communicated to the user device, a second transformed OTP received from the user device, and the at least one transformation rule registered to the device identifier in the authentication database.
7 more elements
Dependencies are inferred from the claim text.