# US 8,752,154 B2 · System and method for authenticating a user > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,752,154 B2 - Document ID: US8752154B2 - Status: Granted - Kind: B2 - Application number: 13/207,508 - Filed: 2011-08-11 - Published: 2013-02-14 - Granted: 2014-06-10 - Earliest claimed: 2011-08-11 - Assignees: Bank of America Corporation - Applicants: William E. Kelley - Inventors: William E. Kelley - Web page: https://patentgrep.com/patent/US8752154B2 ## CPC - H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract According to one embodiment, a system including a memory and a processor is provided. The memory may be operable to store a plurality of accounts. Each account may be associated with a user and with a mobile device. The processor may be coupled to the memory and operable to receive user credentials, sent by a requesting user and originating from a requesting device, in conjunction with a request for authentication. The user credentials may include an account identifier. The processor may be further operable to retrieve, from the plurality of accounts, the account associated with the account identifier that matches the account identifier included in the user credentials. The processor may compare information included within the user credentials with information associated the account. If the information included within the user credentials matches the information associated with the account, the processor may send an authentication-confirmation message to a second device. ## Claims ### Claim 1 A system comprising: a memory operable to store a plurality of accounts, each account associated with a user and with a mobile device of the user, each account further associated with: an account identifier; an authentication token issued to the mobile device; a mobile device identifier associated with the mobile device and comprising the International Mobile Equipment Identity number associated with the mobile device, and a user identifier associated with the user; and a processor coupled to the memory and operable to: receive a request for authentication and user credentials over a network from a requesting mobile device, wherein the request for authentication was communicated in conjunction with the requesting mobile device requesting a transaction from a second device, the user credentials comprising: a second account identifier; a second authentication token associated with the requesting mobile device; a second mobile device identifier associated with the requesting mobile device; and a second user identifier associated with the requesting user; retrieve, from the plurality of accounts, the account associated with the account identifier that matches the second account identifier; compare the second authentication token with the authentication token associated with the retrieved account; compare the second mobile device identifier with the mobile device identifier associated with the retrieved account; compare the second user identifier with the user identifier associated with the retrieved account; send an authentication-confirmation message to the second device if the second authentication token matches the authentication token associated with the retrieved account, if the second mobile device identifier matches the mobile device identifier associated with the retrieved account, and if the second user identifier matches the user identifier associated with the retrieved account, wherein the second device is operable to process the transaction in response to receiving the authentication-confirmation message; and issue the authentication token to the mobile device in conjunction with a request from the user prior to receiving the request for authentication. ### Claim 2 (depends on 1) The system of claim 1, the second device operable to perform, upon receiving the authentication-confirmation message, an operation requested by the requesting user. ### Claim 3 (depends on 1) The system of claim 1, the authentication-confirmation message confirming that the requesting mobile device is the mobile device associated with the retrieved account and that the requesting user is the user associated with the retrieved account. ### Claim 4 (depends on 1) The system of claim 1, the user identifier comprising at least one of a picture of the user's face scanned in real-time, credit card information associated with the user, the user's personal information, and a password or key associated with the user. ### Claim 5 (depends on 1) The system of claim 1, the authentication token comprising a digital certificate. ### Claim 6 (depends on 1) The system of claim 1, the processor further operable to receive the user credentials and the request for authentication from the second device. ### Claim 7 (depends on 1) The system of claim 1, the second device comprising at least one of the user's vehicle, a second mobile device associated with a second user, and an Automatic Teller Machine. ### Claim 8 A method comprising: storing, by a computer, a plurality of accounts, each account associated with a user and with a mobile device of the user, each account further associated with an account identifier, an authentication token issued to the mobile device, a mobile device identifier associated with the mobile device and comprising the International Mobile Equipment Identity number associated with the mobile device, and a user identifier associated with the user; receiving, by the computer, a request for authentication and user credentials, over a network from a requesting mobile device, wherein the request for authentication was communicated in conjunction with the requesting mobile device requesting a transaction from a second device, the user credentials comprising: a second account identifier a second authentication token associated with the requesting mobile device; a second mobile device identifier associated with the requesting mobile device; and a second user identifier associated with the requesting user; retrieving, by the computer, from the plurality of accounts, the account associated with the account identifier that matches the second account identifier; comparing, by the computer, the second authentication token with the authentication token associated with the retrieved account; comparing, by the computer, the second mobile device identifier with the mobile device identifier associated with the retrieved account; comparing, by the computer, the second user identifier with the user identifier associated with the retrieved account; sending, by the computer, an authentication-confirmation message to the second device if the second authentication token matches the authentication token associated with the retrieved account, if the second mobile device identifier matches the mobile device identifier associated with the retrieved account, and if the second user identifier matches the user identifier associated with the retrieved account, wherein the second device is operable to process the transaction in response to receiving the authentication-confirmation message; and issuing the authentication token to the mobile device in conjunction with a request from the user prior to receiving the request for authentication. ### Claim 9 (depends on 8) The method of claim 8, the second device operable to perform, upon receiving the authentication-confirmation message, an operation requested by the requesting user. ### Claim 10 (depends on 8) The method of claim 8, the authentication-confirmation message confirming that the requesting mobile device is the mobile device associated with the retrieved account and that the requesting user is the user associated with the retrieved account. ### Claim 11 (depends on 8) The method of claim 8, the user identifier comprising at least one of a picture of the user's face scanned in real-time, credit card information associated with the user, the user's personal information, and a password or key associated with the user. ### Claim 12 (depends on 8) The method of claim 8, the authentication token comprising a digital certificate. ### Claim 13 (depends on 8) The method of claim 8, further comprising receiving the user credentials and the request for authentication from the second device. ### Claim 14 (depends on 8) The method of claim 8, the second device comprising at least one of the user's vehicle, a second mobile device associated with a second user, and an Automatic Teller Machine. ### Claim 15 A system comprising: an application executed by a first processor of a requesting mobile device and operable to: send a request for authentication; and send user credentials in conjunction with the request for authentication; and a second processor operable to: store a plurality of accounts, each account associated with a user and with a mobile device of the user, each account further associated with an account identifier, an authentication token issued to the mobile device of the user, a mobile device identifier associated with the mobile device of the user and comprising the International Mobile Equipment Identity number associated with the mobile device, and a user identifier associated with the user; receive the request for authentication and the user credentials, over a network from the requesting mobile device, wherein the request for authentication was communicated in conjunction with the requesting mobile device requesting a transaction from a second device, the user credentials comprising: a second account identifier; a second authentication token associated with the requesting mobile device; a second mobile device identifier associated with the requesting mobile device; and a second user identifier associated with the requesting user; retrieve, from the plurality of accounts, the account associated with the account identifier that matches the second account identifier; compare the second authentication token with the authentication token associated with the retrieved account; compare the second mobile device identifier with the mobile device identifier associated with the retrieved account; compare the second user identifier with the user identifier associated with the retrieved account; send an authentication-confirmation message to the second device if the second authentication token matches the authentication token associated with the retrieved account, if the second mobile device identifier matches the mobile device identifier associated with the retrieved account, and if the second user identifier matches the user identifier associated with the retrieved account, wherein the second device is operable to process the transaction in response to receiving the authentication-confirmation message; and issue the authentication token to the mobile device in conjunction with a request from the user prior to receiving the request for authentication. ### Claim 16 (depends on 15) The system of claim 15, the second device operable to perform, upon receiving the authentication-confirmation message, an operation requested by the requesting user. ### Claim 17 (depends on 15) The system of claim 15, the authentication-confirmation message confirming that the requesting mobile device is the mobile device associated with the retrieved account and that the requesting user is the user associated with the retrieved account. ### Claim 18 (depends on 15) The system of claim 15, the user identifier comprising at least one of a picture of the user's face scanned in real-time, credit card information associated with the user, the user's personal information, and a password or key associated with the user. ### Claim 19 (depends on 15) The system of claim 15, the authentication token comprising a digital certificate. ### Claim 20 (depends on 15) The system of claim 15, the second processor further operable to receive the user credentials and the request for authentication from the second device. ### Claim 21 (depends on 15) The system of claim 15, the second device comprising at least one of the user's vehicle, a second mobile device associated with a second user, and an Automatic Teller Machine.