Verifying party identities for secure transactions

Inventors: Thomas W. Cronkright (Rockford, MI); Lawrence R. Duthler (Wyoming, MI)

Assignee: CertifID, Inc.

H04L63/0838 G06F16/951 H04L9/0637 H04L9/3228 H04L63/083 H04L63/18 H04L2463/102

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,936,644
App. No.: 17/151,591
Granted: Mar 19, 2024
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A method for verifying identities of parties to a transaction includes receiving a login attempt from a mobile communication device, the login attempt including a security credential. The method determines that the security credential of the login attempt from the mobile communication device is authentic. The method communicates a one-time access code to the mobile communication device. The method receives a one-time entry code and mobile communication device information from the mobile communication device. The method determines that the one-time entry code and the mobile communication device information from the mobile communication device satisfies the communicated one-time access code and predetermined user mobile communication device information. The method provides by the mobile communication device access to a secure transaction environment.

Claims (52)

1. A computer-implemented method when executed by data processing hardware causes the data processing hardware to perform operations comprising:

receiving a login attempt from a mobile communication device of a registered user, the login attempt comprising a first user-related security credential;

determining that the first user-related security credential of the login attempt from the mobile communication device is associated with an account of the registered user;

receiving mobile communication device information from the mobile communication device;

determining whether the mobile communication device information satisfies predetermined mobile communication device information associated with the account of the registered user;

when the mobile communication device information fails to satisfy the predetermined mobile communication device information, rejecting the login attempt;

when the mobile communication device information satisfies the predetermined mobile communication device information, transmitting a request for a second user-related security credential from the mobile communication device, the second user-related security credential comprising a different user-related security credential than the first user-related security credential received from the login attempt;

receiving the second user-related security credential from the mobile communication device;

determining whether the second user-related security credential is associated with the account of the registered user; and

when the second user-related security credential is associated with the account of the registered user, providing the mobile communication device access to a secure transaction environment.

2. The method of claim 1 , wherein the first user-related security credential is a password.

3. The method of claim 1 , wherein the second user-related security credential is personal identification number (PIN) or a biometric credential.

4. The method of claim 3 , wherein the biometric credential is a fingerprint.

5. The method of claim 1 , wherein the second user-related security credential is one or more answers to one or more private information questions.

6. The method of claim 1 , wherein the operations further comprise, when the second user-related security credential is not associated with the account of the registered user, transmitting a second request for the second user-related security credential from the mobile communication device.

7. The method of claim 1 , wherein the operations further comprise, after providing the mobile communication device access to the secure transaction environment, receiving a new transaction request from the mobile communication device, the new transaction request requesting a transaction with a different registered user with access to the secure transaction environment.

8. The method of claim 1 , wherein determining whether the mobile communication device information satisfies predetermined mobile communication device information comprises accessing a private distributed ledger database and a public distributed ledger database.

9. The method of claim 8 , wherein the private distributed ledger database and the public distributed ledger database comprise a blockchain database.

10. The method of claim 1 , wherein the mobile communication device information comprises at least one of:

a unique telephone number assigned to the mobile communication device;

an electronic serial number;

an international mobile equipment indicator unique to the mobile communication device;

a cellular provider of the mobile communication device;

an internet protocol address from the mobile communication device; or

a service provider providing internet services to the mobile communication device.

11. A system comprising:

data processing hardware; and

memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising: