IP Library Granted Patent US 10,587,614
Granted Patent B2
US 10,587,614 · App. 15/424,595 · Granted Mar 10, 2020

Method and apparatus for facilitating frictionless two-factor authentication

Inventor: Wendell Brown (Henderson, NV)
Assignee: AVERON US, INC.
H04L63/0853H04L63/0861H04L63/0876H04L63/0884H04L63/101H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,587,614
App. No.
15/424,595
Granted
Mar 10, 2020
Kind
B2
Abstract

A method, apparatus and computer program products are provided for facilitating performing frictionless two-factor authentication. One example method includes receiving, from a first entity, an indication of a request, received at the first entity, to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account, receiving, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address, performing a real-time comparison between the first device identification information and second device identification information, and prompting the first entity to grant the device access to the account if a match is detected between the first device identification information and second device identification information.

Claims (64)

1. A method for performing frictionless two-factor authentication, the method comprising:

receiving, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

providing a network address to the first entity, the network address configured to be sent to the device from the first entity;

receiving, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

normalizing the first device identification information and the second device identification information;

performing a real-time comparison between the first device identification information and second device identification information, wherein the real-time comparison between the first device identification information and second device identification information comprises determining whether (i) the normalized first device identification information and (ii) the normalized second device identification information match; and

prompting the first entity to grant the device access to the account if a match is detected between the normalized first device identification information and the normalized second device identification information.

2. The method according to claim 1 , wherein the network address is a uniform resource locator (URL) address.

3. The method according to claim 1 , wherein the first entity is a bank server.

4. The method according to claim 1 , wherein the second entity is a cellular network provider or a cable network provider.

5. The method according to claim 1 , further comprising: determining a confidence level of (i) the first device identification information and (ii) the second device identification information match.

6. The method according to claim 1 , wherein the first device identification information and the second device identification information is at least one of a telephone number, a device serial number, a unique serial number (ICCID), an international mobile subscriber identity (IMSI) number, or an International Mobile Equipment Identity (IMEI).

7. The method according to claim 1 , further comprising: receiving a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity; receiving a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address; and performing a comparison between the first set of biometric data and the second set of biometric data.

8. An apparatus for performing frictionless two-factor authentication, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the processor, cause the apparatus to at least:

receive, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

provide a network address to the first entity, the network address configured to be sent to the device from the first entity;

receive, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

normalize the first device identification information and the second device identification information;

perform a real-time comparison between the first device identification information and second device identification information, wherein the real-time comparison between the first device identification information and second device identification information comprises determining whether (i) the normalized first device identification information and (ii) the normalized second device identification information match; and

prompt the first entity to grant the device access to the account if a match is detected between the normalized first device identification information and the normalized second device identification information.

9. The apparatus according to claim 8 , wherein the network address is a uniform resource locator (URL) address.

10. The apparatus according to claim 8 , wherein the first entity is a bank server.

11. The apparatus according to claim 8 , wherein the second entity is a cellular network provider or a cable network provider.

12. The apparatus according to claim 8 , wherein the at least one memory and the computer program code are further configured to, with the processor, cause the apparatus to: determine a confidence level of (i) the first device identification information and (ii) the second device identification information match.

13. The apparatus according to claim 8 , wherein the first device identification information and the second device identification information is at least one of a telephone number, a device serial number, a unique serial number (ICCID), an international mobile subscriber identity (IMSI) number, or an International Mobile Equipment Identity (IMEI).

14. The apparatus according to claim 8 , wherein the at least one memory and the computer program code are further configured to, with the processor, cause the apparatus to: receive a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity; receive a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address; and performing a comparison between the first set of biometric data and the second set of biometric data.

15. A computer program product for performing frictionless two-factor authentication, the computer program product comprising at least one non-transitory computer-readable storage medium having computer-executable program code instructions stored therein, the computer-executable program code instructions comprising program code instructions for:

receiving, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

providing a network address to the first entity, the network address configured to be sent to the device from the first entity;

receiving, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

normalizing the first device identification information and the second device identification information;

performing a real-time comparison between the first device identification information and second device identification information, wherein the real-time comparison between the first device identification information and second device identification information comprises determining whether (i) the normalized first device identification information and (ii) the normalized second device identification information match; and

prompting the first entity to grant the device access to the account if a match is detected between the normalized first device identification information and the normalized second device identification information.

16. The computer program product according to claim 15 , wherein the network address is a uniform resource locator (URL) address.

17. The computer program product according to claim 15 , wherein the first entity is a bank server.

18. The computer program product according to claim 15 , wherein the second entity is a cellular network provider or a cable network provider.

19. The computer program product according to claim 15 , wherein the computer-executable program code instructions further comprise program code instructions for: determining a confidence level of (i) the first device identification information and (ii) the second device identification information match.

20. The computer program product according to claim 15 , wherein the first device identification information and the second device identification information is at least one of a telephone number, a device serial number, a unique serial number (ICCID), an international mobile subscriber identity (IMSI) number, or an International Mobile Equipment Identity (IMEI).

21. The computer program product according to claim 15 , wherein the computer-executable program code instructions further comprise program code instructions for: receiving a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity; receiving a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address; and performing a comparison between the first set of biometric data and the second set of biometric data.

22. A method for performing frictionless two-factor authentication, the method comprising:

receiving, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

providing a network address to the first entity, the network address configured to be sent to the device from the first entity;

receiving, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

receiving a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity; receiving a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address;

performing a real-time comparison between the first device identification information and second device identification information;

performing a comparison between the first set of biometric data and the second set of biometric data; and

prompting the first entity to grant the device access to the account if a match is detected between both (i) the first device identification information and the second device identification information and (ii) the first set of biometric data and the second set of biometric data.

23. An apparatus for performing frictionless two-factor authentication, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the processor, cause the apparatus to at least:

receive, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

provide a network address to the first entity, the network address configured to be sent to the device from the first entity;

receive, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

receive a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity;

receive a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address;

perform a real-time comparison between the first device identification information and second device identification information;

perform a comparison between the first set of biometric data and the second set of biometric data; and

prompt the first entity to grant the device access to the account if a match is detected between both (i) the first device identification information and the second device identification information and (ii) the first set of biometric data and the second set of biometric data.

24. A computer program product for performing frictionless two-factor authentication, the computer program product comprising at least one non-transitory computer-readable storage medium having computer-executable program code instructions stored therein, the computer-executable program code instructions comprising program code instructions for:

receiving, from a first entity, an indication of a request received at the first entity to access an account from a device associated with a user, the indication comprising at least one instance of first device identification information of at least one device having authorization to access the account;

providing a network address to the first entity, the network address configured to be sent to the device from the first entity;

receiving, from a second entity, second device identification information, the second device identification information determined upon the device accessing to the network address;

receiving a first set of biometric data from the first entity, the first set of biometric data used at log in at the first entity; receiving a second set of biometric data from the second entity, the second set of biometric data used when accessing the network address;

performing a real-time comparison between the first device identification information and second device identification information;

performing a comparison between the first set of biometric data and the second set of biometric data; and

prompting the first entity to grant the device access to the account if a match is detected between both (i) the first device identification information and the second device identification information and (ii) the first set of biometric data and the second set of biometric data.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 12, 2018
From: BROWN, WENDELL
To: CLOUDWEAR, INC.
Reel/Frame 045521/0043 →
CHANGE OF NAME Recorded Jul 14, 2017
From: CLOUDWEAR, INC.
To: AVERON US, INC.
Reel/Frame 043203/0026 →
Continuity (5)
Provisional Application 62290491 · Feb 3, 2016
Provisional Application 62313845 · Mar 28, 2016
Provisional Application 62325478 · Apr 21, 2016
Provisional Application 62416210 · Nov 2, 2016
Related Publication 20190260737A1 · Aug 22, 2019
Cited By (1)
US 12,225,003