IP Library Granted Patent US 10,990,965
Granted Patent B2
US 10,990,965 · App. 14/979,279 · Granted Apr 27, 2021

Single sign-on using a secure authentication system

Inventor: Raul Leyva (Round Rock, TX)
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
G06Q20/363G06F21/41G06Q20/3821G06Q20/4014G06Q20/42H04L63/0815
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,990,965
App. No.
14/979,279
Granted
Apr 27, 2021
Kind
B2
Abstract

One embodiment of the invention is directed to a method comprising, establishing, by a wallet server computer, a single sign-on link between a user bank account and a wallet application. The method further comprises receiving a transaction request message from a user, wherein the transaction request is for a transaction between the user and a merchant associated with the wallet application. The method further comprises sending sign-on data to an issuer computer using a secure authentication protocol and receiving a confirmation message from the issuer computer confirms initiation through the issuer application. The transaction is processed by the wallet server computer based on the confirmation message.

Claims (59)

1. A method, comprising:

managing, by an online banking server computer operated by or on behalf of an issuer, an online banking website providing i) display access to banking account data provided by the issuer of a banking account maintained by the issuer and associated with a user and ii) at least one interface for initiating a transaction with a merchant;

obtaining, by the online banking server computer from a user device, sign-on data for accessing the banking account online;

obtaining, by a wallet server computer from the online banking server computer associated with the issuer, the sign-on data obtained by the online banking server computer from the user device;

receiving, by the wallet server computer from the online banking server computer, a transaction request associated with the banking account and initiated via the online banking website;

sending, by the wallet server computer to the issuer computer associated with the issuer, the sign-on data initially obtained by the online banking server computer and an indication that the transaction request was initiated by the online banking server computer;

in response to receiving the indication that the transaction request was initiated through the online banking server computer;

authenticating, by the issuer computer, the user based on matching the sign-on data initially obtained by the online banking server computer to stored account data maintained by the issuer and associated with the banking account of the user, the authenticating being conducted without the issuer computer prompting the user for input;

validating, by the issuer computer, that the transaction request was initiated through the online banking server computer based on the indication; and

determining, by the issuer computer, that additional user authentication is not required based on the validating that the transaction request was initiated through the online banking server computer;

receiving, by the wallet server computer from the issuer computer, a confirmation message comprising an additional indicator indicating that the sign-on data has been authenticated by the issuer computer;

in response to receiving the additional indicator, executing, by the wallet server computer, the transaction request without the wallet server computer prompting the user for the additional user authentication.

2. The method of claim 1 , further comprising:

receiving, by the wallet server computer, user account information for a digital wallet account, wherein the user account information comprises payment account information for the user;

creating, by the wallet server computer, the digital wallet account for the user in response to receiving the user account information comprising the payment account information associated with the banking account; and

associating, by the wallet server computer, the payment account information with the digital wallet account for the user.

3. The method of claim 1 , further comprising:

receiving, by the wallet server computer, a request to create a digital wallet account; and

generating, by the wallet server computer, an association between the banking account and the digital wallet account, wherein the sign-on data to be sent to the issuer computer is retrieved based at least in part on the association between the banking account and the digital wallet account.

4. The method of claim 3 , wherein the sign-on data comprises at least one of a user identifier for the user or a session identifier for a session associated with the banking account, and wherein the sign-on data further comprises an issuer identifier for the banking account.

5. The method of claim 1 , further comprising:

sending, by the wallet server computer, digital wallet data to the issuer computer, wherein the digital wallet data further comprises a digital wallet identifier.

6. A system, comprising:

an online banking server computer;

a wallet server computer; and

an issuer computer;

wherein, the online banking server computer is programmed to:

i) obtain, from a user device, sign-on data for accessing a banking account maintained by an issuer and associated with a user via an online banking website;

ii) manage the online banking website and provide display access to banking account data of the banking account; and

iii) provide at least one interface for initiating a transaction with a merchant;

wherein the wallet server computer is programmed to:

obtain, from the online banking server computer the sign-on data for accessing the banking account of the user;

receive, from the online banking server computer, a transaction request associated with the banking account and initiated by the online banking server computer;

send, to the issuer computer, the sign-on data initially obtained by the online banking server computer, the sign-on data comprising an indicator that indicates the transaction request was initiated through the online banking server computer;

receive, from the issuer computer, a confirmation message comprising an additional indicator that the sign-on data has been authenticated by the issuer computer; and

execute, based on the additional indicator, the transaction request without prompting the user for additional user authentication;

wherein the issuer computer is programmed to:

authenticate the user based on matching the sign-on data initially obtained by the online banking server computer to stored account data maintained by the issuer and associated with the banking account of the user, the authenticating being conducted without prompting the user for input based on receiving the indicator indicating the transaction request was initiated through the online banking server computer;

validate that the transaction request was initiated through the online banking server computer based on the indicator; and

determine that additional user authentication is not required based on the validating that the transaction request was initiated through the online banking server computer.

7. The system of claim 6 , wherein the wallet server computer is further configured to:

receive user account information for a digital wallet account, wherein the user account information comprises payment account information for the user;

create the digital wallet account for the user; and

associate the payment account information with the digital wallet account for the user.

8. The system of claim 6 , wherein the wallet server computer is further configured to:

receive a request to create a digital wallet account;

generate an association between the banking account and the digital wallet account; and

retrieve the sign-on data utilizing the association.

9. The system of claim 8 , wherein the sign-on data comprises at least one of a user identifier for the user or a session identifier for a session associated with the banking account, and wherein the sign-on data further comprises an issuer identifier for the banking account.

10. The system of claim 6 , wherein the wallet server computer is further configured to:

send digital wallet data to the issuer computer, wherein the digital wallet data further comprises a digital wallet identifier.

11. The method of claim 1 , wherein the confirmation message from the issuer computer is received in a payer authentication response message.

12. The method of claim 5 , wherein sending the sign-on data and the digital wallet data to the issuer computer utilizes a secure authentication system and a payer authentication request.

13. The method of claim 12 , wherein sending the sign-on data and the digital wallet data to the issuer computer causes the issuer computer to validate the transaction request.

14. The method of claim 13 , wherein validating the transaction request comprises comparing the sign-on data to stored account data associated with the user.

15. The system of claim 6 , wherein the confirmation message from the issuer computer is received in a payer authentication response message.

16. The system of claim 10 , wherein sending the sign-on data and the digital wallet data to the issuer computer utilizes a secure authentication system and a payer authentication request.

17. The system of claim 16 , wherein sending the sign-on data and the digital wallet data to the issuer computer causes the issuer computer to validate the transaction request.

18. The system of claim 17 , wherein validating the transaction request comprises comparing the sign-on data to stored account data associated with the user.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 18, 2016
From: LEYVA, RAUL
To: VISA INTERNATIONAL SERVICE ASSOCIATION
Reel/Frame 037770/0917 →
Continuity (2)
Provisional Application 62096034 · Dec 23, 2014
Related Publication 20160180333A1 · Jun 23, 2016
Cited By (1)
US 12,671,680