Granted Patent B2

US 12,206,784 · App. 18/429,892 · Granted Jan 21, 2025

Inventors: Clayton Johnson (Edgewood, MD); Esther Scott (Arlington, VA); Jeffrey Wieker (Falls Church, VA)

Assignee: Capital One Services, LLC

H04L9/3231G06Q20/382G06Q20/4014H04L9/0866H04L9/3213

Abstract

Claims (50)

1. A method for payment authentication performed by a payment authentication system, the method comprising:

receiving, from a first computing device, a token request that includes reference data identifying at least one of the first computing device or a first user associated with the first computing device;

generating a token;

storing the reference data in association with the token;

providing the token to the first computing device;

receiving, from a payment processing system, an authentication request that includes the token and data identifying at least one of a second computing device or a second user associated with the second computing device attempting to use the token as a payment method to complete a transaction;

determining the data included in the authentication request matches the reference data stored in association with the token; and

based on the match, indicating, to the payment processing system, that the transaction is authenticated such that the token is usable as the payment method.

2. The method of claim 1 , wherein the reference data included in the token request is a first device fingerprint generated by the first computing device, and the first device fingerprint is generated based on at least one of one or more device attributes of the first computing device or behavioral biometric data of the first user associated with the first computing device.

3. The method of claim 2 , wherein the data included in the authentication request is a second device fingerprint generated by the second computing device, and the second device fingerprint is generated based on at least one of one or more device attributes of the second computing device or behavioral biometric data of the second user associated with the second computing device.

4. The method of claim 3 , wherein determining the data included in the authentication request matches the reference data stored in association with the token comprises at least one of:

determining the second device fingerprint is indicative of the one or more device attributes of the first device fingerprint; or

determining the second device fingerprint is indicative of behavioral biometric data having at least a threshold degree of similarity with the behavioral biometric data of the first device fingerprint.

5. The method of claim 1 , wherein the token request further includes a first merchant identifier for an authorized merchant that is stored in association with the token.

6. The method of claim 5 , wherein the authentication request further includes a second merchant identifier of a merchant associated with the transaction, and the method further comprises:

determining the second merchant identifier and the first merchant identifier match.

7. The method of claim 1 , wherein generating the token comprises:

identifying an account number associated with the first user; and

generating the token to represent the account number.

8. The method of claim 7 , wherein indicating, to the payment processing system, that the transaction is authenticated, comprises:

generating and transmitting, to the payment processing system, an authentication message responsive to the authentication request, the authentication message including the account number represented by the token.

9. The method of claim 7 , wherein the token is a virtual card number.

10. A method for payment authentication performed by a computing device, the method comprising:

transmitting a request for a token to a payment authentication system, the request including reference data identifying at least one of the computing device or a user associated with the computing device, wherein the payment authentication system generates the token responsive to the request and stores the reference data in association with the token;

receiving the token from the payment authentication system;

detecting an input to use the token as a payment method to complete a transaction; and

generating data identifying at least one of the computing device or the user associated with the computing device that matches the reference data, wherein the token and the generated data are provided to the payment authentication system, and the payment authentication system authenticates use of the token as the payment method based on the generated data matching the reference data stored in association with the token.

11. The method of claim 10 , further comprising:

generating the reference data included in the request.

12. The method of claim 11 , wherein, when the reference data identifies at least the computing device, generating the reference data comprises:

generating the reference data based on one or more device attributes of the computing device.

13. The method of claim 11 , wherein, when the reference data identifies at least the user associated with the computing device, generating the reference data comprises:

generating the reference data based on behavioral biometric data of the user.

14. The method of claim 13 , further comprising:

deriving the behavioral biometric data of the user from one or more recorded behavioral patterns of the user when using the computing device.

15. The method of claim 14 , wherein the one or more recorded behavioral patterns include one or more of:

a pattern in which the user holds or transports the computing device;

a traveling pattern of the computing device;

a pattern in which the user uses one or more software applications of the computing device; or

a web browsing history.

16. The method of claim 11 , wherein the reference data included in the request is a first device fingerprint generated by the computing device, and the data identifying the at least one of the computing device or the user associated with the computing device that matches the reference data is a second device fingerprint generated by the computing device.

17. The method of claim 10 , wherein the request for the token further includes a first merchant identifier of an authorized merchant, and the payment authentication system further stores the first merchant identifier in association with the token.

18. The method of claim 17 , wherein a second merchant identifier of a merchant associated with the transaction is provided to the payment authentication system, and the payment authentication system further authenticates the use of the token as the payment method based on the second merchant identifier matching the first merchant identifier stored in association with the token.

19. A method for payment authentication performed by a payment processing system, the method comprising:

receiving, from a merchant system, a token provided to the merchant system for use as a payment method to complete a transaction, and identifying information of at least one of a computing device used to perform the transaction or a user associated with the computing device, the token generated by a payment authentication system;

transmitting an authentication request, including the token and the identifying information, to the payment authentication system, wherein the payment authentication system determines the identifying information included in the authentication request matches reference identifying information of at least one of an authorized computing device or an authorized user that is stored in association with the token by the payment authentication system;

receiving, from the payment authentication system, an indication that the transaction is authenticated; and

using the token as the payment method to complete the transaction.

20. The method of claim 19 , wherein the token generated by a payment authentication system represents an account number, and receiving, from the payment authentication system, an indication that the transaction is authenticated comprises:

receiving an authentication message including the account number to enable the using of the token as the payment method.

Assignments (1)

Continuity (3)

References Cited (36)