IP Library › Granted Patent US 11,683,179
Granted Patent B2
US 11,683,179 · App. 17/084,799 · Granted Jun 20, 2023

Systems and methods for secure remote identity verification

Inventors: Ryan Fox (Lebanon, OH); Jonathan Weimer (Henrico, VA); Meghnath Sharma (Chantilly, VA); Charles W. Hall (Manakin-Sabot, VA)
Assignee: Capital One Services, LLC
H04L9/3236H04L9/0643H04L9/14H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,683,179
App. No.
17/084,799
Granted
Jun 20, 2023
Kind
B2
Abstract

Systems and methods are provided for authenticating an identity of a user requesting a resource or service from an entity. In some embodiments, a system may include at least one processor; and a non-transitory medium containing instructions that cause the system to perform operations. The operations may include receiving credential information associated with the remote user, and receiving, from the server associated with the entity, first hash information. The operations may also include generating second hash information based on information associated with the user, comparing the first hash information with the second hash information, and transmitting an indication based on the comparison to the server associated with the entity.

Claims (40)

1. A system for authenticating an identity of a remote user, the system comprising:

at least one processor; and

a non-transitory computer readable medium containing instructions, that when executed by the at least one processor, cause the system to perform operations comprising:

receiving credential information associated with a remote user,

transmitting, to a server, information identifying a request to authenticate the remote user, and

receiving first hash information,

wherein the server includes a validation application programming interface for comparing received information associated with the remote user with information known to the server and a salt/pepper application programming interface for securing the received credential information associated with the remote user before the received credential information is provided to the server via the validation application programming interface.

2. The system of claim 1 , wherein the first hash information includes an indication of one or more categories of information used to create the first hash information.

3. The system of claim 1 , wherein the operations further comprise generating second hash information based on at least some information associated with the remote user.

4. The system of claim 3 , wherein generating the second hash information based on the at least some information associated with the remote user comprises generating the second hash information based on an indication of one or more categories of information used to create the first hash information.

5. The system of claim 1 , wherein the operations further comprise submitting, to a computer device associated with the remote user, a multifactor authentication challenge.

6. The system of claim 1 , wherein the first hash information includes an identification of at least one of cryptographic salt and cryptographic pepper.

7. The system of claim 6 , wherein the operations further comprise:

determining, based on the identification of the at least one of cryptographic salt and cryptographic pepper, that the at least one of cryptographic salt and cryptographic pepper is expired,

wherein the transmitted information includes an indication that the authentication cannot be completed.

8. The system of claim 3 , wherein the second hash information is generated based on the information identifying the request.

9. The system of claim 8 , wherein the first hash information includes the information identifying the request.

10. The system of claim 9 , wherein the at least some information associated with the remote user is retrieved based on the information identifying the request included in the first hash information.

11. A system for authenticating an identity of a remote user, the system comprising:

at least one processor; and

a non-transitory computer readable medium containing instructions, that when executed by the at least one processor, cause the system to perform operations comprising:

receiving an identity verification request from a device associated with a remote user, the request including information associated with the remote user,

hashing the information associated with the remote user, and

receiving, from a server, an indication of an authenticity of the remote user;

wherein the server includes a validation application programming interface for comparing the received information associated with the remote user with information known to the server and a salt/pepper application programming interface for securing the received information associated with the remote user before the received information is provided to the server via the validation application programming interface.

12. The system of claim 11 , wherein the hashed information includes an identification of at least one of cryptographic salt and cryptographic pepper.

13. The system of claim 11 , wherein the operations further comprise:

receiving, from the server, an indication that the at least one of cryptographic salt and cryptographic pepper is expired; and

transmitting, to the server, a request for at least one of new cryptographic salt and new cryptographic pepper.

14. The system of claim 11 , wherein the hashed information includes a transaction identifier.

15. The system of claim 11 , wherein the hashed information includes an indication of one or more categories of information used to create the hashed information.

16. The system of claim 11 , wherein the hashing is performed at least in part based on a received transaction identifier.

17. A method for authenticating an identity of a remote user, the method comprising the following operations performed by one or more processors:

receiving, from a first computer device, credential information associated with a remote user,

transmitting, to a server, information identifying a request to authenticate the remote user, and

receiving first hash information,

wherein the server includes a validation application programming interface for comparing received information associated with the remote user with information known to the server and a salt/pepper application programming interface for securing the received credential information associated with the remote user before the received credential information is provided to the server via the validation application programming interface.

18. The method of claim 17 , wherein the first hash information includes an indication of one or more categories of information used to create the first hash information.

19. The method of claim 17 , wherein the operations further comprise generating second hash information based on at least some information associated with the remote user.

20. The method of claim 17 , wherein the first hash information includes an identification of at least one of cryptographic salt and cryptographic pepper.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 30, 2020
From: FOX, RYAN; WEIMER, JONATHAN; SHARMA, MEGHNATH; HALL, CHARLES W
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 054219/0962 →
Continuity (4)
Continuation 16591759 · Oct 3, 2019
Continuation 15642259 · Jul 5, 2017
Provisional Application 62358535 · Jul 5, 2016
Related Publication 20210051018A1 · Feb 18, 2021
Cited By (1)
US 12,256,015