IP Library Granted Patent US 11,271,920
Granted Patent B2
US 11,271,920 · App. 16/260,248 · Granted Mar 8, 2022

Method and system for account security of recycled phone numbers

Inventors: Ankur Arora (New Delhi, IN); Rakesh Patel (Haryana, IN); Shashank Kumar Trivedi (New Delhi, IN)
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
H04L63/0807G06F16/1824H04L9/0861H04L9/30H04L9/3247H04W4/14H04W8/26H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,271,920
App. No.
16/260,248
Granted
Mar 8, 2022
Kind
B2
Abstract

A method for validating a message recipient includes: storing, in a memory of a processing server, a device profile, wherein the device profile is related to a mobile computing device and includes at least a device identifier, and token validation data; receiving, by a receiver of the processing server, a data signal from an external system that is encoded with a message packet, wherein the message packet includes at least the device identifier, a device token, and a content message; validating, by a processing device of the processing server, the device token using at least the token validation data; and electronically transmitting, by a transmitter of the processing server, the content message to the mobile computing device.

Claims (48)

1. A method for validating a message recipient, comprising:

generating, by a processing server, token validation data specifically associated with a device identifier of a mobile computing device;

storing, in a memory of a processing server, a device profile related to the mobile computing device, wherein the device profile includes at least the device identifier and the associated token validation data;

receiving, by a receiver of the processing server, from an external system, a data signal for forwarding to a computing device associated with the device identifier, wherein the data signal is encoded with a message packet including at least the device identifier, a device token, and a content message;

identifying, by the processing server, the token validation data stored in the memory of the processing server on a basis of the device identifier included in the message packet received in the data signal;

validating, by a processing device of the processing server, the device token included in the message packet received in the data signal using at least the token validation data stored in association with the device identifier; and

in response to validating the device token included in the message packet received in the data signal, electronically transmitting, by a transmitter of the processing server, the content message to the mobile computing device,

whereby sending systems cannot send data messages to the mobile computing device when the device token is not validated.

2. The method of claim 1 , wherein the device profile is stored in a block of a blockchain.

3. The method of claim 2 , wherein the token validation data is the device token.

4. The method of claim 1 , further comprising:

receiving, by the receiver of the processing server, a deactivation notification, wherein the deactivation notification includes at least the device identifier;

generating, by the processing device of the processing server, a new device token and, based on the new device token, new token validation data; and

replacing, in the device profile, the token validation data with the new token validation data.

5. The method of claim 1 , wherein, if validation of the device token fails, transmission of the content message to the mobile computing device is replaced by electronically transmitting, by the transmitter of the processing server, a fail message to the external system.

6. The method of claim 1 , wherein the token validation data is a validation token, and

validating the device token includes determining that the device token is a direct match to the validation token.

7. The method of claim 1 , wherein

the token validation data is a public key of a cryptographic key pair,

the device token is a digital signature generated using a private key of the cryptographic key pair, and

validating the device token includes verifying the digital signature using the public key.

8. The method of claim 1 , wherein the content message is a short messaging service message.

9. A system for validating a message recipient, comprising:

a processing device, of a processing server, configured to generate token validation data specifically associated with a device identifier of a mobile computing device;

a memory, of the processing server, configured to store a device profile related to the mobile computing device, wherein the device profile includes at least the device identifier and the associated token validation data;

a receiver, of the processing server, configured to receive, from an external system, a data signal for forwarding to a computing device associated with the device identifier, wherein the data signal is encoded with a message packet including at least the device identifier, a device token, and a content message; and

a transmitter, of the processing server;

wherein the processing device of the processing server is further configured to:

identify the token validation data stored in the memory of the processing server on a basis of the device identifier included in the message packet received in the data signal, and

validate the device token included in the message packet received in the data signal using at least the token validation data stored in associated with the device identifier; and

wherein the transmitter of the processing server is configured to electronically transmit the content message to the mobile computing device in response to the processing device validating the device token included in the message packet received in the data signal,

whereby sending systems cannot send data messages to the mobile computing device when the device token is not validated.

10. The system of claim 9 , wherein the device profile is stored in a block of a blockchain.

11. The system of claim 10 , wherein the token validation data is the device token.

12. The system of claim 9 , wherein

the receiver of the processing server is further configured to receive a deactivation notification, wherein the deactivation notification includes at least the device identifier,

the processing device of the processing server is further configured to

generate a new device token and, based on the new device token, new token validation data, and

replace, in the device profile, the token validation data with the new token validation data.

13. The system of claim 9 , wherein, if validation of the device token fails, transmission of the content message to the mobile computing device is replaced by electronically transmitting, by the transmitter of the processing server, a fail message to the external system.

14. The system of claim 9 , wherein

the token validation data is a validation token, and

validating the device token includes determining that the device token is a direct match to the validation token.

15. The system of claim 9 , wherein

the token validation data is a public key of a cryptographic key pair,

the device token is a digital signature generated using a private key of the cryptographic key pair, and

validating the device token includes verifying the digital signature using the public key.

16. The system of claim 9 , wherein the content message is a short messaging service message.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 29, 2019
From: ARORA, ANKUR; PATEL, RAKESH; TRIVEDI, SHASHANK KUMAR
To: MASTERCARD INTERNATIONAL INCORPORATED
Reel/Frame 048175/0761 →
Continuity (1)
Related Publication 20200244642A1 · Jul 30, 2020
Cited By (1)
US 12,348,673