Dynamic access to service devices to facilitate secure operations
A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.
1 . A system comprising:
an Internet of Things (IoT) service device associated with a service provider; and
a computing environment, the computing environment configured to control the IoT service device by:
receiving an access request from an imaging device of the IoT service device, the access request transmitted in response to a mobile device displaying a contactless authentication code to the imaging device of the IoT service device;
accessing a database comprising a plurality of mappings, each mapping of the plurality of mappings associating a different contactless authentication code of a plurality of contactless authentication codes with a unique combination of user account and limitation, the accessing comprising using the contactless authentication code to identify a particular mapping of the plurality of mappings included in the database that maps a particular user account with a version of a dynamic QR code of the contactless authentication code, wherein the particular mapping defines (i) a one-to-one correspondence between the particular user account and the version of the dynamic QR code and (ii) a limitation associated with the particular user account;
in response to receiving the access request and identifying the particular mapping, selecting a particular category among a plurality of categories that comprises a time restriction and a location restriction, the particular category indicated by the limitation associated with the particular user account;
determining, based on the particular category and a value of the access request associated with the particular category, that the version of the dynamic QR code is valid for the IoT service device;
identifying the particular user account associated with the contactless authentication code; and
subsequent to validating the contactless authentication code for the IoT service device and identifying the particular user account, providing access for at least one function of the IoT service device via a software application associated with the service provider, the at least one function usable to facilitate a secure transaction between the IoT service device and the particular user account.
2 . The system of claim 1 , wherein the contactless authentication code comprises a dynamic Quick Response (QR) code generated on the mobile device and captured by the imaging device of the IoT service device.
3 . The system of claim 2 , wherein the dynamic QR code is associated with user account information of the user account.
4 . The system of claim 3 , wherein the dynamic QR code is dynamically generated by the mobile device, and wherein determining that the contactless authentication code is valid for the IoT service device comprises:
determining that the IoT service device is located at a particular location associated with the QR code; and
determining that the access request was generated during a particular time associated with the QR code.
5 . The system of claim 3 , wherein the computing environment identifies the user account information by:
accessing a database, the database comprising a mapping that relates each user account of a plurality of user accounts to a corresponding dynamic QR code of a plurality of dynamic QR codes; and
determining, based on the mapping, that the dynamic QR code is associated with the user account information.
6 . The system of claim 1 , wherein the computing environment further controls the IoT service device by:
subsequent to providing access for the at least one function of the IoT service device, receiving, from the mobile device, a request for the IoT service device to perform the at least one function;
authenticating the request; and
in response to authenticating the request, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the at least one function to facilitate the secure transaction between the IoT service device and the user account.
7 . The system of claim 6 , wherein authenticating the request comprises:
receiving authentication credentials associated with the user account;
authenticating a user of the mobile device based on the authentication credentials; and
authenticating the mobile device based on a distance between a location of the mobile device and a location of the IoT service device being less than a threshold distance.
8 . The system of claim 1 , wherein the computing environment is further configured to control the IoT service device by:
receiving a second access request from the imaging device of the IoT service device, the second access request transmitted in response to the mobile device displaying a second contactless authentication code to the imaging device, wherein the second contactless authentication code comprises a second version of a dynamic QR code;
accessing the database, the accessing comprising using the second contactless authentication code to identify a second mapping of the plurality of mappings included in the database that maps the particular user account with the second version of the dynamic QR code, wherein the second mapping defines (i) a second one-to-one correspondence between the particular user account and the second version of the dynamic QR code and (ii) a second limitation associated with the particular user account;
in response to receiving the second access request and identifying the second mapping, selecting a second category among the plurality of categories, wherein the second category is indicated by the second limitation;
determining, based on the second category and a value of the second access request associated with the second category, that the second version of the dynamic QR code is not valid for the IoT service device; and
transmitting a notification to the mobile device that the second version of the QR code is invalid, wherein the notification includes a command to provide a user interface on the mobile device for requesting additional information for proceeding with the second access request.
9 . A computer-implemented method comprising:
receiving an access request from an imaging device of an Internet of Things (IoT) service device associated with a service provider, the access request transmitted in response to a mobile device displaying a contactless authentication code to the imaging device of the IoT service device;
accessing a database comprising a plurality of mappings, each mapping of the plurality of mappings associating a different contactless authentication code of a plurality of contactless authentication codes with a unique combination of user account and limitation, the accessing comprising using the contactless authentication code to identify a particular mapping of the plurality of mappings included in the database that maps a particular user account with a version of a dynamic QR code of the contactless authentication code, wherein the particular mapping defines (i) a one-to-one correspondence between the particular user account and the version of the dynamic QR code and (ii) a limitation associated with the particular user account;
in response to receiving the access request and identifying the particular mapping, selecting a particular category among a plurality of categories that comprises a time restriction and a location restriction, the particular category indicated by the limitation associated with the particular user account;
determining, based on the particular category and a value of the access request associated with the particular category, that the version of the dynamic QR code is valid for the IoT service device;
identifying the particular user account associated with the contactless authentication code; and
subsequent to validating the contactless authentication code for the IoT service device and identifying the particular user account, providing access for at least one function of the IoT service device via a software application associated with the service provider, the at least one function usable to facilitate a secure transaction between the IoT service device and the particular user account.
10 . The computer-implemented method of claim 9 , wherein the contactless authentication code comprises a dynamic Quick Response (QR) code generated on the mobile device and captured by the imaging device of the IoT service device.
11 . The computer-implemented method of claim 10 , wherein the dynamic QR code is associated with user account information of the user account.
12 . The computer-implemented method of claim 11 , wherein the dynamic QR code is dynamically generated by the mobile device, and wherein determining that the contactless authentication code is valid for the IoT service device comprises:
determining that the IoT service device is located at a particular location associated with the QR code; and
determining that the access request was generated during a particular time associated with the QR code.
13 . The computer-implemented method of claim 11 , wherein identifying the user account associated with the contactless authentication code comprises:
accessing a database, the database comprising a mapping that relates each user account of a plurality of user accounts to a corresponding dynamic QR code of a plurality of dynamic QR codes; and
determining, based on the mapping, that the dynamic QR code is associated with the user account information.
14 . The computer-implemented method of claim 9 , further comprising:
subsequent to providing access for the at least one function of the IoT service device, receiving, from the mobile device, a request for the IoT service device to perform the at least one function;
authenticating the request; and
in response to authenticating the request, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the at least one function to facilitate the secure transaction between the IoT service device and the user account.
15 . The computer-implemented method of claim 14 , wherein authenticating the request comprises:
receiving authentication credentials associated with the user account;
authenticating a user of the mobile device based on the authentication credentials; and
authenticating the mobile device based on a distance between a location of the mobile device and a location of the IoT service device being less than a threshold distance.
16 . A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:
receiving an access request from an imaging device of an Internet of Things (IoT) service device associated with a service provider, the access request transmitted in response to a mobile device displaying a contactless authentication code to the imaging device of the IoT service device;
accessing a database comprising a plurality of mappings, each mapping of the plurality of mappings associating a different contactless authentication code of a plurality of contactless authentication codes with a unique combination of user account and limitation, the accessing comprising using the contactless authentication code to identify a particular mapping of the plurality of mappings included in the database that maps a particular user account with a version of a dynamic QR code of the contactless authentication code, wherein the particular mapping defines (i) a one-to-one correspondence between the particular user account and the version of the dynamic QR code and (ii) a limitation associated with the particular user account;
in response to receiving the access request and identifying the particular mapping, selecting a particular category among a plurality of categories that comprises a time restriction and a location restriction, the particular category indicated by the limitation associated with the particular user account;
determining, based on the particular category and a value of the access request associated with the particular category, that the version of the dynamic QR code is valid for the IoT service device;
identifying the particular user account associated with the contactless authentication code; and
subsequent to validating the contactless authentication code for the IoT service device and identifying the particular user account, providing access for at least one function of the IoT service device via a software application associated with the service provider, the at least one function usable to facilitate a secure transaction between the IoT service device and the particular user account.
17 . The non-transitory computer-readable medium of claim 16 , wherein the contactless authentication code comprises a dynamic Quick Response (QR) code generated on the mobile device and captured by the imaging device of the IoT service device.
18 . The non-transitory computer-readable medium of claim 16 , wherein the dynamic QR code is dynamically generated by the mobile device, and wherein the operation of determining that the contactless authentication code is valid for the IoT service device comprises:
determining that the IoT service device is located at a particular location associated with the QR code; and
determining that the access request was generated during a particular time associated with the QR code.
19 . The non-transitory computer-readable medium of claim 16 , wherein the operations further comprise:
subsequent to providing access for the at least one function of the IoT service device, receiving, from the mobile device, a request for the IoT service device to perform the at least one function;
authenticating the request; and
in response to authenticating the request, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the at least one function to facilitate the secure transaction between the IoT service device and the user account.
20 . The non-transitory computer-readable medium of claim 19 , wherein the operation of authenticating the request comprises:
receiving authentication credentials associated with the user account;
authenticating a user of the mobile device based on the authentication credentials; and
authenticating the mobile device based on a distance between a location of the mobile device and a location of the IoT service device being less than a threshold distance.