Granted Patent B2

US 12,438,721 · App. 18/391,441 · Granted Oct 7, 2025

Inventor: Lawrence Douglas (McLean, VA)

Assignee: Capital One Services, LLC

H04L9/3213H04L9/3226

Abstract

Claims (81)

1. A system for leveraging offline virtual authentication tokens during periods of inaccessible network connectivity, comprising:

one or more processors; and

one or more non-transitory, computer-readable media storing instructions that when executed by the one or more processors cause operations comprising:

storing a plurality of offline virtual authentication tokens associated with a user account;

receiving, from a token reader, an authentication request for obtaining resources associated with the user account, wherein the authentication request comprises activity data, and wherein the activity data comprises location data;

in response to receiving the authentication request, detecting inaccessible network connectivity to determine the system is offline;

in response to determining the system is offline, requesting an authentication code from a user;

determining whether the authentication code received from the user is valid;

in response to determining that the authentication code is valid, selecting an offline virtual authentication token from the plurality of stored offline virtual authentication tokens associated with the user account;

generating a new authentication token based on the selected offline virtual authentication token; and

transmitting the new authentication token to the token reader in response to receiving the authentication request.

2. The system of claim 1 , further comprising:

in response to determining that the authentication code is not valid, generating a false authentication token having an invalid checksum; and

transmitting the false authentication token to the token reader to signal malicious activity in response to receiving the authentication request.

3. A method for leveraging offline virtual authentication tokens, the method comprising:

storing a plurality of offline virtual authentication tokens associated with a user account;

receiving from a token reader an authentication request for obtaining resources associated with the user account, wherein the authentication request comprises an activity operator and activity data, and wherein the activity data comprises location data;

in response to receiving the authentication request, detecting inaccessible network connectivity to determine a system is offline;

in response to determining the system is offline, requesting an authentication code from a user;

determining whether the authentication code is valid;

in response to determining that the authentication code is valid, selecting an offline virtual authentication token from the plurality of stored offline virtual authentication tokens associated with the user account; and

generating a new authentication token based on the selected offline virtual authentication token.

4. The method of claim 3 , further comprising:

in response to determining that the authentication code is invalid, searching the plurality of stored offline virtual authentication tokens associated with the user account for an invalid offline virtual authentication token; and

selecting the stored invalid offline virtual authentication token to generate a false authentication token, wherein the invalid offline virtual authentication token comprises an invalid checksum.

5. The method of claim 3 , further comprising:

detecting the new authentication token comprises an activity limit value;

determining whether the activity data comprises a value greater than the activity limit value; and

in response to determining the value is greater than the activity limit value, declining the authentication request.

6. The method of claim 3 , further comprising:

detecting the new authentication token comprises a location threshold;

determining whether the location data is within the location threshold; and

in response to determining the location data is within the location threshold, accepting the authentication request.

7. The method of claim 3 , further comprising:

determining a threshold period based on a user preference;

in response to detecting a threshold period has passed, removing the plurality of offline virtual authentication tokens; and

generating a new plurality of offline virtual authentication tokens.

8. The method of claim 3 , further comprising:

detecting accessible network connectivity, wherein the accessible network connectivity indicates the system is online; and

in response to detecting accessible network connectivity, removing the new authentication token and the valid offline virtual authentication token from the user account.

9. The method of claim 8 , wherein removing the new authentication token from the user account further comprises:

retrieving a list of activities associated with the new authentication token, wherein each activity on the list of activities comprises activity data;

determining whether the list of activities associated with the new authentication token is completed; and

in response to determining the list of activities is incomplete, forwarding the list of activities to an active authentication token associated with the user account.

10. The method of claim 3 , further comprising:

receiving, from a user, a notification indicating the user account is comprised; and

in response to receiving the notification, removing the plurality of offline virtual authentication tokens from the user account.

11. The method of claim 3 , further comprising generating the authentication code based on a unique value.

12. The method of claim 3 , wherein determining whether the authentication code is valid further comprises verifying the new authentication token has a valid checksum.

13. One or more non-transitory, computer-readable storage media storing instructions that when executed by one or more processors cause operations comprising:

storing a plurality of offline virtual authentication tokens associated with a user account;

receiving from a token reader an authentication request for obtaining resources associated with the user account, wherein the authentication request comprises an activity operator and activity data, and wherein the activity data comprises location data;

in response to receiving the authentication request, detecting inaccessible network connectivity to determine a system is offline;

in response to determining the system is offline, requesting an authentication code from a user;

in response to determining that the authentication code is valid, selecting an offline virtual authentication token from the plurality of stored offline virtual authentication tokens associated with the user account; and

generating a new authentication token based on the selected offline virtual authentication token.

14. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

in response to determining that the authentication code is invalid, searching the plurality of stored offline virtual authentication tokens associated with the user account for an invalid offline virtual authentication token; and

selecting the stored invalid offline virtual authentication token to generate a false authentication token, wherein the invalid offline virtual authentication token comprises an invalid checksum.

15. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

detecting the new authentication token comprises an activity limit value;

determining whether the activity data comprises a value greater than the activity limit value; and

in response to determining the value is greater than the activity limit value, declining the authentication request.

16. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

detecting the new authentication token comprises a location threshold;

determining whether the location data is within the location threshold; and

in response to determining the location data is within the location threshold, accepting the authentication request.

17. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

determining a threshold period based on a user preference;

in response to detecting a threshold period has passed, removing the plurality of offline virtual authentication tokens; and

generating a new plurality of offline virtual authentication tokens.

18. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

detecting accessible network connectivity, wherein the accessible network connectivity indicates the system is online; and

in response to detecting accessible network connectivity, removing the new authentication token and the valid offline virtual authentication token from the user account.

19. The one or more non-transitory, computer-readable storage media of claim 18 , wherein removing the new authentication token from the user account further comprises:

retrieving a list of activities associated with the new authentication token, wherein each activity on the list of activities comprises activity data;

determining whether the list of activities associated with the new authentication token is completed; and

in response to determining the list of activities is incomplete, forwarding the list of activities to an active authentication token associated with the user account.

20. The one or more non-transitory, computer-readable storage media of claim 13 , wherein the instructions further cause the one or more processors to perform operations comprising:

receiving, from a user, a notification indicating the user account is comprised; and

in response to receiving the notification, removing the plurality of offline virtual authentication tokens from the user account.

Assignments (1)

Continuity (1)

References Cited (17)