Automating calls between separate and distinct applications for invoking an identity verification function
A method, software and system allows for the novel and seamless integration between disparate hardware and software systems to facilitate strong authentication and identity assertion of an individual as an integral component of transaction processing. The method, software and system can combine quick response (QR) code(s) with more custom mobile device uniform resource locator (URL) scheme(s) to seamlessly invoke mobile application(s) that enable an end user to perform strong, multi-factor authentication as a component of completing a transaction. The use of mobile application(s) can simplify and automate the conveyance of transaction details between computing platforms and devices to allow a user to fully participate in a transaction approval process with a simplified, convenient experience.
1. A method for automating calls between separate and distinct applications for the purpose of invoking an identity verification function for a user, the method comprising the steps of:
sending a transaction request by a relying party computer to a message queue, the message queue either generating a QR code for scanning by a user computer to generate a custom scheme URL for operating system consumption or, when the relying party computer and the user computer comprise the same hardware, rendering the custom scheme URL for operating system consumption;
invoking a mobile application registered to consume the custom scheme URL and utilizing a transaction ID to retrieve transaction details from the message queue;
reviewing and either accepting or rejecting a transaction.
2. The method of claim 1 , wherein the transaction details include a requirement for additional authentication.
3. The method of claim 1 , wherein the relying party computer is a merchant computer.
4. The method of claim 1 , wherein the relying party computer is the user computer.
5. The method of claim 1 , wherein the step of sending comprises the steps of:
sending the transaction request from the relying party computer to a web service; and
sending a queue request from the web service to the message queue.
6. The method of claim 1 , further comprising the step of sending a queue transaction state response from the message queue after the transaction is approved or rejected.
7. The method of claim 6 , wherein the step of sending a queue transaction state response comprises notifying the relying party computer of an approval or rejection of the transaction.
8. The method of claim 1 , wherein the mobile application is located on the user computer.
9. The method of claim 1 , wherein the user computer comprises a mobile phone.
10. The method of claim 1 , wherein the message queue comprises a cloud-based service.
11. The method of claim 1 , further comprising authentication rules for authenticating the transaction.
12. The method of claim 11 , wherein the authentication rules comprise geo-location restrictions.
13. The method of claim 11 , wherein the authentication rules are based at least in part on the transaction request.
14. The method of claim 11 , wherein the authentication rules are dynamically generated.
15. A system for automating calls between separate and distinct applications for the purpose of invoking an identity verification function for a user, comprising:
a relying party computer sending a transaction request to a message queue, the message queue either generating a QR code for scanning by a user computer to generate a custom scheme URL for operating system consumption or, when the relying party computer and the user computer comprise the same hardware, rendering the custom scheme URL for operating system consumption;
a mobile application registered to consume the custom scheme URL, utilizing a transaction ID to retrieve transaction details from the message queue, and allowing the user to review and either accept or reject a transaction.
16. The system of claim 15 , wherein the relying party computer is a merchant computer.
17. The system of claim 15 , wherein the relying party computer is the user computer.
18. The system of claim 15 , wherein the user computer comprises a mobile phone.
19. The system of claim 15 , wherein the message queue comprises a cloud-based service.