IP Library › Granted Patent US 11,496,462
Granted Patent B2
US 11,496,462 · App. 16/204,350 · Granted Nov 8, 2022

Secure multifactor authentication with push authentication

Inventors: Felix C. P. Lee (Hong Kong, HK); Jason Severn (Hong Kong, HK); Boris T. H. So (Hong Kong, HK); Jason Chun Kit Wan (Hong Kong, HK); Kevin Chi Chung Wong (Hong Kong, HK)
Assignee: JPMORGAN CHASE BANK, N.A.
H04L63/0853H04L9/3213H04L9/3226H04L9/3228H04L9/3231H04L9/3236H04L63/102H04W12/06H04W12/77H04L63/0428H04L63/083H04L63/0861H04L63/101H04L63/18H04L67/55H04L2209/80H04L2463/082H04W4/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,496,462
App. No.
16/204,350
Granted
Nov 8, 2022
Kind
B2
Abstract

Improved systems and methods of authenticating a user using a mobile device to access a secure electronic portal are provided. A user may be enabled to quickly and securely log onto a website or other electronic portal using a handheld electronic device. In certain embodiments, multifactor authentication is utilized to improve the security of the authentication process.

Claims (77)

1. A system for facilitating secure access to an electronic portal comprising:

a plurality of processors;

a memory; and

a communication interface coupled to each of the plurality of processors and the memory,

wherein an authentication portal processor is configured to:

receive an access request from a user device in response to a promotional message, the promotional message including a transaction request to authorize a high-volume user transaction;

request an authentication image from a code generator;

receive an authentication image;

display the authentication image at the authentication portal;

receive an authentication confirmation from an authentication application in response to the authentication application recognizing the authentication image;

generate an authentication request including a transaction ID that is based on information corresponding to a user, the user device, and the electronic portal, the transaction ID including data that corresponds to an access time, an access location, a user identifier, and a device identifier; and

transmit the authentication request to an authentication service processor;

wherein the authentication service processor is configured to:

receive the authentication request;

generate an encryption key;

encrypt the transaction ID in the authentication request by using the encryption key; and

generate and transmit a notification to an authentication application processor that is associated with the user device, the notification including the encrypted transaction ID and a prompt to the user device for a simple passcode;

wherein the authentication application processor is configured to:

receive the notification and decrypt the transaction ID;

identify a login ID from the decrypted transaction ID;

accept user input of the simple passcode; and

authenticate the user input of the simple passcode based on the login ID and upon successful authentication, grant access to an authentication portal by causing the authentication application processor to,

re-encrypt the decrypted transaction ID;

transmit the re-encrypted transaction ID to the authentication service processor; and

call an application programming interface that is associated with the authentication portal processor with a notice that the user is authorized to access the authentication portal.

2. The system of claim 1 , wherein the simple passcode comprises at least one of a personal identification number (PIN), biometric identifier, or personal identification pattern.

3. The system of claim 2 , wherein the simple passcode comprises a plurality of a personal identification number (PIN), biometric identifier, or personal identification pattern.

4. The system of claim 1 , wherein the authentication service processor is further configured to:

encrypt the transaction ID;

transmit the encrypted transaction ID to the authentication application processor.

5. The system of claim 4 , wherein the encrypted transaction ID is transmitted with the notification.

6. The system of claim 1 , wherein the transaction ID comprises a hash token.

7. The system of claim 1 , wherein the authentication portal processor is further configured to:

generate a first authentication image.

8. The system of claim 7 , wherein the authentication application processor is further configured to:

scan and recognize the first authentication image generated by the authentication portal processor.

9. A computer implemented method for facilitating secure access to an electronic portal through multifactor authentication, the method comprising:

at an authentication portal:

receiving an access request from a user device in response to a promotional message, the promotional message including a transaction request to authorize a high-volume user transaction;

requesting an authentication image from a code generator;

receiving an authentication image;

displaying the authentication image at the authentication portal;

receiving an authentication confirmation from an authentication application in response to the authentication application recognizing the authentication image;

generating an authentication request including a transaction ID that is based on information corresponding to a user, the user device, and the electronic portal, the transaction ID including data that corresponds to an access time, an access location, a user identifier, and a device identifier; and

transmitting the authentication request to an authentication service;

at the authentication service:

receiving the authentication request from the authentication portal;

generating an encryption key;

encrypting the transaction ID in the authentication request by using the encryption key;

generating a notification configured to prompt the user device for input of a simple passcode, the notification including the encrypted transaction ID; and

transmitting the notification to the authentication application;

at the authentication application:

receiving the notification and decrypting the transaction ID;

identifying a login ID from the decrypted transaction ID;

accepting user input of the simple passcode;

authenticating the user input of the simple passcode based on the login ID and upon successful authentication, granting access to the authentication portal by,

re-encrypting the decrypted transaction ID;

transmitting the re-encrypted transaction ID to the authentication service; and

calling an application programming interface that is associated with the authentication portal with a notice that the user is authorized to access the authentication portal.

10. The method of claim 9 , wherein the authentication image comprises a quick response (QR) code.

11. The method of claim 10 , further comprising:

at the authentication portal:

generating a promotion detail for a target customer;

generating a hash token for the target customer;

transmitting a promotion request to the authentication service.

12. The method of claim 11 , wherein the promotion request comprises the hash token and the promotional message.

13. The method of claim 9 , wherein the simple passcode comprises at least one of a personal identification number (PIN), biometric identifier, or personal identification pattern.

14. The method of claim 13 , wherein the simple passcode comprises a plurality of a personal identification number (PIN), biometric identifier, or personal identification pattern.

15. The method of claim 9 , further comprising:

at the authentication service, encrypting the transaction ID and transmitting the encrypted transaction ID to the authentication application.

16. The method of claim 15 , further comprising:

transmitting the encrypted transaction ID with the notification.

17. The method of claim 9 , wherein the transaction ID comprises a hash token.

18. The method of claim 9 , further comprising:

at the authentication portal, generating a first authentication image.

19. The method of claim 18 , further comprising:

at the authentication application, scanning and recognizing the first authentication image generated by the authentication portal.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 19, 2019
From: LEE, FELIX C.P.; SEVERN, JASON; SO, BORIS T.H.; WAN, JASON CHUN KIT; WONG, KEVIN CHI CHUNG
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 048633/0746 →
Continuity (2)
Provisional Application 62592012 · Nov 29, 2017
Related Publication 20190166118A1 · May 30, 2019
Cited By (1)
US 12,598,180