Granted Patent B2

US 12,256,010 · App. 18/653,746 · Granted Mar 18, 2025

Inventors: Abbie Barbir (Hartford, CT); John Poirier (Hartford, CT); Alan Bachmann (Hartford, CT); Amy Ulrich (Hartford, CT); Cisa Kurian (Hartford, CT); Erick Verry (Hartford, CT)

Assignee: Aetna Inc.

H04L9/3228G06K19/06056H04L67/146H04L9/50

Abstract

Claims (78)

1. A method, comprising:

obtaining, from a first user device, a request to access content associated with a relying party system, wherein the request indicates user credentials and a first session identifier (ID);

providing, by the relying party system and to the first user device, a quick response (QR) code based on obtaining the user credentials and the first session ID;

obtaining, by the relying party system, the QR code and a second session ID associated with the QR code, wherein the second session ID is determined based on scanning the QR code;

in response to obtaining the QR code and the second session ID, verifying the first session ID and the second session ID based on:

determining, by the relying party system, whether the first session ID matches the second session ID; and

determining, by the relying party system, whether the QR code provided to the first user device matches the QR code received by the relying party system; and

granting access to the requested content based on the verification.

2. The method of claim 1 , wherein the QR code comprises metadata indicating a digital address associated with the relying party system,

wherein obtaining the QR code and the second session ID comprises receiving, by the relying party system, the QR code and the second session ID from a second user device via a mailbox system.

3. The method of claim 2 , wherein the first user device, the mailbox system, and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain.

4. The method of claim 1 , wherein the QR code is a designer QR code that indicates a digital address associated with a mailbox system and indicates that the QR code is secure.

5. The method of claim 1 , wherein the method further comprises:

receiving, by a mailbox system, the QR code and the second session ID; and

forwarding, by the mailbox system, the second session ID and the first QR code to the relying party system.

6. The method of claim 5 , wherein the method further comprises:

scanning, by a second user device, the QR code displayed on the first user device;

determining, by the second user device and based on scanning the QR code, the second session ID and metadata indicating a digital address associated with the relying party system or the mailbox system;

providing, by the second user device, the scanned QR code and the second session ID to the mailbox system; and

receiving, by the mailbox system, the QR code and the second session ID from the second user device.

7. The method of claim 1 , wherein obtaining, from the first user device, the request to access content associated with the relying party system further comprises:

obtaining, from the first user device, a request for the QR code by the relying party system, and

wherein providing, to the first user device, the QR code is further based on the request for the QR code.

8. The method of claim 1 , further comprising:

receiving, by the first user device, the QR code;

displaying, by the first user device, the QR code for being scanned; and

receiving, by the first user device, access to the requested content.

9. The method of claim 8 , further comprising:

scanning, by a second user device, the QR code displayed on the first user device; and

providing, by the second user device, the scanned QR code and the second session ID.

10. A system, comprising:

a first user device configured to:

provide, to a relying party system via a mailbox system, a request to access content associated with the relying party system, wherein the request indicates user credentials and a first session identifier (ID); and

display a quick response (QR) code generated by the relying party system based on the user credentials and the first session ID;

a second user device configured to:

scan the QR code displayed on the first user device; and

provide the scanned QR code and a second session ID associated with the QR code to the relying party system via the mailbox system; and

the relying party system configured to:

generate and provide the QR code to the first user device based on the request to access the content;

obtain the scanned QR code and the second session ID from the second user device;

in response to receiving the QR code and the second session ID, verify the first session ID and the second session ID based on:

determining whether the first session ID matches the second session ID; and

determining whether the QR code provided to the first user device matches the scanned QR code from the second user device; and

grant access to the first user device for the requested content based on the verification.

11. The system of claim 10 , further comprising:

the mailbox system configured to:

receive the request from the first user device;

provide the request to the relying party system;

receive the scanned QR code and the second session ID from the second user device; and

provide the scanned QR code and the second session ID to the relying party system.

12. The system of claim 11 , wherein the first user device, the mailbox system, and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain.

13. The system of claim 10 , wherein the QR code comprises metadata indicating a digital address associated with the relying party system.

14. The system of claim 10 , wherein the second user device is further configured to:

determine a digital address associated with the relying party system based on scanning the QR code;

provide a request for the second session ID to the relying party system; and

obtain the second session ID from the relying party system based on the request.

15. The system of claim 10 , wherein the second user device is further configured to determine the second session ID based on scanning the QR code.

16. A method, comprising:

obtaining, from a first user device, a request to access content associated with a relying party system, wherein the request indicates user credentials and a first session identifier (ID);

forwarding, by the mailbox system, the first session ID to the relying party system;

providing, to the first user device, a quick response (QR) code based on the user credentials and the first session ID;

receiving, by the mailbox system, the QR code and a second session ID associated with the QR code, wherein the second session ID is determined based on scanning the QR code;

forwarding, by the mailbox system, the second session ID and the QR code to the relying party system;

in response to obtaining the QR code and the second session ID, verifying the first session ID and the second session ID based on comparing, by the relying party system, the first session ID with the second session ID; and

granting the first user device access to the requested content based on the verification.

17. The method of claim 16 , wherein the QR code comprises metadata indicating a digital address associated with the relying party system, and wherein the first user device, the mailbox system, and the relying party system are part of a trusted decentralized system, wherein the trusted decentralized system is an identity blockchain.

18. The method of claim 16 , wherein the QR code is a designer QR code that indicates a digital address associated with the mailbox system and indicates that the QR code is secure.

19. The method of claim 16 , further comprising:

scanning, by a second user device, the QR code displayed on the first user device;

determining, by the second user device and based on scanning the QR code, the second session ID and metadata indicating a digital address associated with the relying party system or the mailbox system;

providing, by the second user device, the scanned QR code and the second session ID to the mailbox system; and

receiving, by the mailbox system, the QR code and the second session ID from the second user device.

20. The method of claim 16 , further comprising:

receiving, by the first user device, the QR code;

displaying, by the first user device, the QR code for being scanned;

scanning, by a second user device, the QR code displayed on the first user device;

providing, by the second user device, the scanned QR code and the second session ID-to a mailbox system; and

receiving, by the first user device, access to the requested content.

Assignments (1)

Continuity (3)

References Cited (23)