IP Library Granted Patent US 12695740
Granted Patent B2
US 12695740 · App. 18/443,215 · Granted Jul 28, 2026

Systems and methods for independently sourced authentication during remote network sessions

Inventors: John Akkarakaran Jose (McLean, VA); Rajat Gupta (McLean, VA)
Assignee: Capital One Services, LLC
H04L63/083
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12695740
App. No.
18/443,215
Granted
Jul 28, 2026
Kind
B2
Abstract

Systems and methods use independently sourced authentication for a bifurcated authentication process. For example, in furtherance of authentication of devices in a first device session (e.g., between a user and an interface provider), the systems and methods create a second device session (e.g., between the interface provider and an independent authentication source). To do so, the interface provider may facilitate the transmission of information from the user to the independent authentication source. The independent authentication source may use information (e.g., information only accessible to the independent authentication source) to authenticate the information provided by the user. The independent authentication source may then authenticate the user. By doing so, the interface provider has relied on information known to the other parties (e.g., the user and the independent authentication source) to authenticate the user.

Claims (63)

1 . A system for providing independently sourced authentication during remote network sessions featuring non-native accounts, the system comprising:

one or more processors and one or more non-transitory media comprising instructions recorded thereon that, when executed by the one or more processors, cause operations comprising:

generating for display, on a user interface, (i) a first user-selectable option to invoke a first device session between a user and an interface provider using a native account and (ii) a second user-selectable option to invoke the first device session between the user and the interface provider using a non-native account, wherein the native account is facilitated by the interface provider, and wherein the non-native account is facilitated by at least one independent authentication source independent of the interface provider and not facilitated by the interface provider;

in response to the second user-selectable option being selected via a user request associated with the user, establishing the first device session between the user and the interface provider using the non-native account;

in response to receiving authentication information associated with the non-native account via the first device session between the user and the interface provider, transmitting, via a second device session between the interface provider and an independent authentication source, the authentication information from the interface provider to the independent authentication source;

in response to (i) transmitting the authentication information to the independent authentication source via the second device session between the interface provider and the independent authentication source and (ii) the independent authentication source authenticating the user using the authentication information, receiving, via the second device session, from the independent authentication source, a unique temporary session token that is not provided to a user device of the user; and

using the unique temporary session token from the independent authentication source to populate a communication between the user and the interface provider during the first device session with substitute payment information corresponding to payment information associated with the user in lieu of the payment information, wherein using the unique temporary session token comprises matching a first identifier corresponding to the first device session to a second identifier corresponding to the unique temporary session token.

2 . A method comprising:

performing, by one or more processors of an interface provider system, operations comprising:

establishing a first device session between a user and an interface provider associated with the interface provider system using a non-native account and querying the user for authentication information via the first device session;

based on querying the user for the authentication information via the first device session between the user and the interface provider, receiving the authentication information via the first device session;

based on receiving the authentication information via the first device session between the user and the interface provider, transmitting, via a second device session between the interface provider and an independent authentication source, the authentication information to the independent authentication source;

receiving, via the second device session, from the independent authentication source, a unique temporary session token that is not provided to a user device of the user in the first device session; and

using the unique temporary session token from the independent authentication source to populate a communication between the user and the interface provider during the first device session with substitute information corresponding to financial transaction information associated with the user in lieu of the financial transaction information, wherein using the unique temporary session token comprises matching a first identifier corresponding to the first device session to a second identifier corresponding to the unique temporary session token.

3 . The method of claim 2 , further comprising establishing the second device session between the interface provider and the independent authentication source such that the second device session corresponds to an identifier generated based on a first session identifier corresponding to the first device session.

4 . The method of claim 2 , wherein using the unique temporary session token comprises using the unique temporary session token to obtain the substitute information corresponding to payment information associated with the user and populating the communication with the substitute information in lieu of the payment information.

5 . The method of claim 2 , the operations further comprising:

generating for display, in a user interface, a plurality of independent authentication sources;

receiving a user selection of the independent authentication source of the plurality of independent authentication sources;

querying the user for the authentication information based on (i) the user selection of the independent authentication source and (ii) the authentication information being an authentication information type for the user that is available to the independent authentication source.

6 . The method of claim 2 , wherein using the unique temporary session token comprises using the unique temporary session token to populate the communication between the user and the interface provider with substitute payment information corresponding to payment information associated with the user in lieu of the payment information.

7 . The method of claim 2 , the operations further comprising:

establishing the second device session between the interface provider and the independent authentication source by determining a participant identifier for the second device session and assigning the participant identifier to the independent authentication source.

8 . The method of claim 2 , the operations further comprising:

establishing the second device session between the interface provider and the independent authentication source by determining a first session identifier for the first device session and assigning a reference identifier for the second device session based on the first session identifier.

9 . The method of claim 2 , the operations further comprising:

establishing the second device session between the interface provider and the independent authentication source by determining a first user identifier for the user and assigning a second user identifier for the second device session based on the first user identifier.

10 . The method of claim 2 , wherein using the unique temporary session token to populate the communication between the user and the interface provider during the first device session comprises:

determining private information corresponding to the user required for the communication; and

using the unique temporary session token to obtain the private information and populating the communication with the private information.

11 . The method of claim 2 , wherein using the unique temporary session token to populate the communication between the user and the interface provider during the first device session comprises:

determining a first user identifier corresponding to the first device session;

determining a second user identifier corresponding to the unique temporary session token; and

matching the first user identifier to the second user identifier.

12 . The method of claim 2 , wherein using the unique temporary session token to populate the communication between the user and the interface provider during the first device session comprises:

determining a first session identifier corresponding to the first device session;

determining a second session identifier corresponding to the unique temporary session token; and

matching the first session identifier to the second session identifier.

13 . The method of claim 2 , the operations further comprising:

generating a native account for the user with the interface provider; and

storing the unique temporary session token in the native account.

14 . One or more non-transitory, computer-readable mediums comprising instructions recorded thereon that, when executed by one or more processors, cause operations comprising:

in connection with a transaction, establishing a first device session between a user and an interface provider using a non-native account;

querying, during the first device session, the user for authentication information;

in response to receiving the authentication information, establishing a second device session between the interface provider and an independent authentication source;

transmitting, using the second device session, the authentication information to the independent authentication source;

receiving a unique temporary session token, from the independent authentication source, based on a user authentication of the user by the independent authentication source using the authentication information, wherein the unique temporary session token is not provided to a user device of the user in the first device session; and

using, during the first device session, the unique temporary session token to populate input fields with substitute information configured for use by the user to complete the transaction, the substitute information corresponding to financial transaction information associated with the user, wherein using the unique temporary session token comprises matching a first identifier corresponding to the first device session to a second identifier corresponding to the unique temporary session token.

15 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein establishing the first device session between the user and the interface provider using the non-native account comprises:

generating for display, on a user interface, a first option to invoke the first device session between the user and the interface provider using a native account, wherein the native account is facilitated by the interface provider;

generating for display, on the user interface, a second option to invoke the first device session between the user and the interface provider using the non-native account, wherein the non-native account is facilitated by at least one independent authentication source independent from the interface provider and not facilitated by the interface provider; and

receiving, via a user interface, a first user request, wherein the first user request establishes the first device session using the non-native account, wherein the first device session corresponds to a first session identifier.

16 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein querying the user comprises:

generating for display, in a user interface, a plurality of independent authentication sources; and

receiving a second user request, wherein the second user request selects the independent authentication source of the plurality of independent authentication sources.

17 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein querying the user comprises:

determining an authentication information type for the user that is available to the independent authentication source; and

querying the user for the authentication information based on the authentication information type being available to the independent authentication source.

18 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein establishing the second device session between the interface provider and the independent authentication source comprises:

determining a session run time for the second device session; and

comparing a current run time of the second device session to the session run time.

19 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein establishing the second device session between the interface provider and the independent authentication source such that the second device session corresponds to an identifier generated based on a first session identifier corresponding to the first device session.

20 . The one or more non-transitory, computer-readable mediums of claim 14 , wherein using the unique temporary session token comprises using the unique temporary session token to obtain the substitute information corresponding to payment information associated with the user and populating the input fields with the substitute information in lieu of the payment information.