Granted Patent B2

US 12,530,688 · App. 18/202,676 · Granted Jan 20, 2026

Inventors: Debashis Ghosh (Charlotte, NC); Randy Shuken (Westport, CT)

Assignee: MASTERCARD INTERNATIONAL INCOPORATED

G06Q20/4014G06F21/31G06F21/316H04L9/3271H04L63/0876G06F2221/2149H04L9/3213H04L9/3226H04L9/3273

Abstract

Claims (41)

1 . A computing device comprising at least one processor coupled to a memory device and in communication with a first database and a second database, the at least one processor configured to:

receive, from a user computing device associated with a candidate user, a request to authenticate the candidate user as an authentic user for accessing secure data stored in the second database by the candidate user, the request including device data for identifying the user computing device used in a previous interaction;

access, using the device data, user data of the authentic user stored in the first database, the user data including data known to the authentic user;

generate, before receiving the request to authenticate the candidate user, a challenge question based on the user data stored in the first database and a predetermined level of security associated with accessing the secure data stored in the second database, wherein the challenge question and at least a portion of the user data are associated with at least one transaction of the authentic user that was received during a predetermined period of time;

generate, after receiving the request to authenticate the candidate user and based on the predetermined level of security, a correct answer to the challenge question;

transmit the challenge question to the user computing device;

cause to display on the user computing device the challenge question;

receive, from the user computing device, an answer to the challenge question;

compare the received answer to the generated correct answer; and

in response to the received answer matching at least one portion of the generated correct answer, authenticate the candidate user as the authentic user to enable access to the candidate user to the data stored in the second database.

2 . The computing device of claim 1 , wherein the challenge question includes a plurality of images, and wherein one of the plurality of images includes a correct answer to the challenge question.

3 . The computing device of claim 1 , wherein the second database is associated with a host computing device, wherein the first database is associated with an authenticating computing device, and wherein the host computing device and the authenticating computing device are different and separate computing devices.

4 . The computing device of claim 1 , wherein the challenge question includes a plurality of answers, and wherein one of the plurality of answers is a correct answer that matches the at least one portion of the user data stored in the first database.

5 . A computer-implemented method using a computing device including at least one processor coupled to a memory device and in communication with a first database and a second database, the method comprising:

receiving, from a user computing device associated with a candidate user, a request to authenticate the candidate user as an authentic user for accessing secure data stored in the second database by the candidate user, the request including device data for identifying the user computing device used in a previous interaction;

accessing, using the device data, user data of the authentic user stored in the first database, the user data including data known to the authentic user;

generating, before receiving the request to authenticate the candidate user, a challenge question based on the user data stored in the first database and a predetermined level of security associated with accessing the secure data stored in the second database, wherein the challenge question and at least a portion of the user data are associated with at least one transaction of the authentic user that was received during a predetermined period of time;

generating, after receiving the request to authenticate the candidate user and based on the predetermined level of security, a correct answer to the challenge question;

transmitting the challenge question to the user computing device a;

causing to display on the user computing device the challenge question;

receiving, from the user computing device, an answer to the challenge question;

comparing the received answer to the generated correct answer; and

in response to the received answer matching at least one portion of the generated correct answer, authenticating the candidate user as the authentic user to enable access to the candidate user to the data stored in the second database.

6 . The method of claim 5 , wherein the challenge question includes a plurality of images, and wherein one of the plurality of images includes a correct answer to the challenge question.

7 . The method of claim 5 , wherein the second database is associated with a host computing device, wherein the first database is associated with an authenticating computing device, and wherein the host computing device and the authenticating computing device are different and separate computing devices.

8 . The method of claim 5 , wherein the challenge question includes a plurality of answers, and wherein one of the plurality of answers is a correct answer that matches the at least one portion of the user data stored in the first database.

9 . At least one non-transitory computer-readable medium having computer-executable instructions embodied thereon, wherein when executed by at least one processor of a computing device in communication with a first database and a second database, the computer-executable instructions cause the at least one processor to:

receive, from a user computing device associated with a candidate user, a request to authenticate the candidate user as an authentic user for accessing secure data stored in the second database by the candidate user, the request including device data for identifying the user computing device used in a previous interaction;

access, using the device data, user data of the authentic user stored in the first database, the user data including data known to the authentic user;

generate, before receiving the request to authenticate the candidate user, a challenge question based on the user data stored in the first database and a predetermined level of security associated with accessing the secure data stored in the second database, wherein the challenge question and at least a portion of the user data are associated with at least one transaction of the authentic user that was received during a predetermined period of time;

generate after receiving the request to authenticate the candidate user and based on the predetermined level of security, a correct answer to the challenge question;

transmit the challenge question to the user computing device;

cause to display on the user computing device the challenge question;

receive, from the user computing device, an answer to the challenge question;

compare the received answer to the generated correct answer; and

in response to the received answer matching the generated correct answer, authenticate the candidate user as the authentic user to enable access to the candidate user to the data stored in the second database.

10 . The non-transitory computer-readable medium of claim 9 , wherein the challenge question includes a plurality of images, and wherein one of the plurality of images includes a correct answer to the challenge question.

11 . The non-transitory computer-readable medium of claim 9 , wherein the second database is associated with a host computing device, wherein the first database is associated with an authenticating computing device, and wherein the host computing device and the authenticating computing device are different and separate computing devices.

12 . The non-transitory computer-readable medium of claim 9 , wherein the challenge question includes a plurality of answers, and wherein one of the plurality of answers is a correct answer that matches the at least one portion of the user data stored in the first database.

13 . The computing device of claim 1 , wherein the device data includes at least one of a media access control (MAC) address or an Internet protocol (IP) address of the user computing device.

14 . The computing device of claim 1 , wherein the previous interaction includes an exchange of data between the user computing device and the computing device.

Assignments (1)

Continuity (6)

References Cited (128)