Digital access code
A method is disclosed. One embodiment of the invention is directed to a method. The method comprises: prompting, by an access device, a user to enter an access code; receiving, by the access device, the access code from the user; transmitting, by the access device, the access code to a validation computer, which validates the access code; receiving, by the access device, an access identifier or access token from the validation computer in response to validating the access code; transmitting, by the access device, an authorization request message including the access identifier or the access token to an authorizing computer; and receiving, by the access device, an authorization response message from the authorizing computer.
1. A computer-implemented method comprising:
receiving, by a validation computer and from a first user device, a request for an access code;
determining, by the validation computer, the access code associated with an account number corresponding to the first user device;
determining, by the validation computer, an expiration time period for the access code, the expiration time period of a certain length based on one or more policies, the one or more policies including a number of access code requests previously transmitted by the first user device compared to a certain time period;
transmitting, by the validation computer, the access code and the expiration time period for the access code to the first user device;
receiving, by the validation computer and from an access device, the access code;
validating, by the validation computer, the received access code based at least in part on the access code associated with the request and the expiration time period for the access code;
generating, by the validation computer, a message that includes the account number associated with the received access code in accordance with a determination that the access code is validated, the validation computer maintaining information that identifies a delivery channel preference for the access code, the delivery channel preference specified by a user associated with the first user device and including an email or an application push notification;
transmitting, by the validation computer, the message to the access device using the delivery channel preference; and
transmitting, by the validation computer, data identifying a status of the received access code using the delivery channel preference.
2. The computer-implemented method of claim 1 , wherein the expiration time period is specified by the user associated with the first user device.
3. The computer-implemented method of claim 1 , further comprising determining one or more geographic locations for access devices that utilize the received access code.
4. The computer-implemented method of claim 3 , further comprising updating a user interface of the first user device that displays the one or more geographic locations for the access devices in response to the request for the access code.
5. The computer-implemented method of claim 1 , wherein determining the access code associated with the account number is in response to the user authenticating with the first user device prior to requesting the access code.
6. The computer-implemented method of claim 1 , wherein the validation computer and the access device communicate by invoking an application programming interface call that uses mutual secure socket layer authentication and channel encryption.
7. The computer-implemented method of claim 1 , further comprising:
receiving, by the validation computer, the access code from a second user device;
validating, by the validation computer, the received access code from the second user device based at least in part on the access code associated with the request;
generating, by the validation computer, the message that includes the account number associated with the received access code from the second user device in accordance with a determination that the received access code from the second user device is validated; and
transmitting, by the validation computer, the message to the access device.
8. The computer-implemented method of claim 7 , further comprising:
generating, by the validation computer, a notification indicating that the received access code from the second user device has been used by the second user device; and
transmitting, by the validation computer, the notification to the first user device.