Granted Patent B2

US 12,639,732 · App. 17/892,623 · Granted May 26, 2026

Inventor: Mehdi Zadeh Heidari (Maple, CA)

Assignee: Giesecke+Devrient Mobile Security America, Inc.

G06Q30/06G06Q40/02G10L15/22H04L63/0861H04L65/102

Abstract

Claims (61)

1 . A system for providing access to services across various development platforms, comprising:

a non-transitory memory for storing instructions;

one or more hardware processors that are coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations comprising:

establishing a first secure channel connection between the system and a first voice assistant service provider server associated with a first service provider that supports a first development platform, wherein the establishing the first secure channel connection includes using biometric authentication to authenticate users and to ascertain that certain users are authorized to request certain banking operations, the certain banking operations including one or more of open a banking account, open a card account, transfer funds between different banking accounts of the user, transfer funds from a banking account of the user to a third party's account, and receive currency exchange data;

receiving, via the established first secure channel connection between the system and the first voice assistant service provider server, a first user request from the first voice assistant service provider server, the first user request indicating a first banking operation to be performed on behalf of a first user, the first user request configured to operate with the first development platform, wherein the first user request is received from the first voice assistant service provider server associated with the first voice assistant service provider that supports the first development platform;

performing biometric authentication based on the first user request and previously provided biometric input, the biometric authentication performed without transferring biometric data to another device;

generating, when the previously provided biometric input matches the first user request, a first service request for performing the first banking operation on behalf of the first user in response to receiving the first user request; and

transmitting, when the previously provided biometric input matches the first user request, the first service request to a first server associated with a first service, to cause the first server to perform the first banking operation on behalf of the first user.

2 . The system of claim 1 , wherein the one or more hardware processors that are coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations further comprising:

prior to receiving the first user request, generating a user profile corresponding to the first user, the user profile including bank account information associated with a plurality of bank accounts of the first user including at least (i) first bank account information associated with a first bank account of the first user and (ii) second bank account information associated with a second bank account of the first user.

3 . The system of claim 2 , wherein

generating the first service request includes (i) receiving input configured to select the first bank account from among the plurality of bank accounts in the user profile and (ii) generating the first service request using the first bank account information associated with the first bank account selected based on the received input.

4 . The system of claim 3 , wherein receiving input configured to select the first bank account includes:

generating a response to the first user request, the response requesting a selection of a bank account associated with the first user,

providing the response via the first voice assistant service provider to the first user, and

receiving, from the first voice assistant service provider, the selection of the bank account made by the first user, the selection indicating the first bank account to be selected for performing the first banking operation on behalf of the first user.

5 . The system of claim 2 , wherein the first banking operation to be performed on behalf of the first user is to transfer money from the first bank account at a first bank to the second bank account at a second bank, wherein the second bank is different from the first bank.

6 . The system of claim 1 , wherein generating the first service request includes:

determining whether the first user is authorized to request the first banking operation, and

generating the first service request only in response to determining that the first user is authorized to request the first banking operation.

7 . The system of claim 1 , wherein the one or more hardware processors that are coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations further comprising:

receiving a second user request from a second service provider server, the second user request indicating a second banking operation, the second user request configured to operate with a second development platform different from the first development platform, wherein the second user request is received from a second voice assistant service provider server associated with a second voice assistant service provider that supports the second development platform different from the first development platform, and wherein the second banking operation is to be performed on behalf of a second user different from the first user;

performing biometric authentication based on the second user request and previously provided biometric input, the biometric authentication performed without transferring biometric data to another device;

generating, when the previously provided biometric input matches the second user request, a second service request for performing the second banking operation in response to receiving the second user request; and

transmitting, when the previously provided biometric input matches the second user request, the second service request to the first server associated with the first service, to cause the first server to perform the second banking operation, wherein

the first service request comprises a first access token corresponding to the first user that is obtained from the first server for authorizing the first banking operation,

the second service request comprises a second access token corresponding to the second user obtained from the first server for authorizing the second banking operation, and

the first service request and the second service request are configured to operate without a separate application of the first server configured to perform the first and second banking operations.

8 . The system of claim 7 , wherein the one or more hardware processors that are coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations further comprising:

prior to receiving the second user request from the second voice assistant service server, establishing, a second secure channel connection between the system and the second voice assistant service provider server, and wherein receiving the second user request comprises receiving the second user request via the second secure channel connection between the system and the second voice assistant service provider server.

9 . The system of claim 7 , wherein the one or more hardware processors that are coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations further comprising:

prior to transmitting the second service request to the second service server, establishing a second secure channel connection between the system and the second service server, and wherein transmitting the second server request comprises transmitting the second server request via the second secure channel connection between the system and the second service server.

10 . A method for providing access to services across various development platforms, the method comprising:

establishing a first secure channel connection between a centralized gateway server and a first voice assistant service provider server associated with a first service provider that supports a first development platform, wherein the establishing the first secure channel connection includes using biometric authentication to authenticate users and to ascertain that certain users are authorized to request certain banking operations, the certain banking operations including one or more of open a banking account, open a card account, transfer funds between different banking accounts of the user, transfer funds from a banking account of the user to a third party's account, and receive currency exchange data;

receiving, at the centralized gateway server via the established first secure channel connection between the central gateway server and the first voice assistant service provider server, a first user request from the first voice assistant service provider server, the first user request indicating a first banking operation to be performed on behalf of a first user, the first user request configured to operate with the first development platform, wherein the first user request is received from the first voice assistant service provider server associated with the first voice assistant service provider that supports the first development platform;

performing biometric authentication based on the first user request and previously provided biometric input, the biometric authentication performed without transferring biometric data to another device;

generating, at the centralized gateway server when the previously provided biometric input matches the first user request, a first service request for performing the first banking operation on behalf of the first user in response to receiving the first user request; and

transmitting, when the previously provided biometric input matches the first user request, the first service request to a first server associated with a first service, to cause the first server to perform the first banking operation on behalf of the first user.

11 . The method of claim 10 , further comprising:

prior to receiving the first user request, generating, with the centralized gateway server, a user profile corresponding to the first user, the user profile including bank account information associated with a plurality of bank accounts of the first user including at least (i) first bank account information associated with a first bank account of the first user and (ii) second bank account information associated with a second bank account of the first user.

12 . The method of claim 11 , wherein

generating the first service request includes (i) receiving input configured to select the first bank account from among the plurality of bank accounts in the user profile and (ii) generating the first service request using the first bank account information associated with the first bank account selected based on the received input.

13 . The method of claim 12 , wherein receiving input configured to select the first bank account includes:

generating a response to the first user request, the response requesting a selection of a bank account associated with the first user,

providing the response via the first voice assistant service provider to the first user, and

receiving, from the first voice assistant service provider, the selection of the bank account made by the first user, the selection indicating the first bank account to be selected for performing the first banking operation on behalf of the first user.

14 . The method of claim 10 , further comprising:

receiving, at the centralized gateway server, a second user request from a second service provider server, the second user request indicating a second banking operation, the second user request configured to operate with a second development platform different from the first development platform, wherein the second user request is received from a second voice assistant service provider server associated with a second voice assistant service provider that supports the second development platform different from the first development platform, and wherein the second banking operation is to be performed on behalf of a second user different from the first user;

performing biometric authentication based on the second user request and previously provided biometric input, the biometric authentication performed without transferring biometric data to another device;

generating, at the centralized gateway server when the previously provided biometric input matches the second user request, a second service request for performing the second banking operation in response to receiving the second user request; and

transmitting, from the centralized gateway server when the previously provided biometric input matches the second user request, the second service request to the first server associated with the first service, to cause the first server to perform the second banking operation, wherein

the first service request comprises a first access token corresponding to the first user that is obtained from the first server for authorizing the first banking operation,

the second service request comprises a second access token corresponding to the second user obtained from the first server for authorizing the second banking operation, and

the first service request and the second service request are configured to operate without a separate application of the first server configured to perform the first and second banking operations.

15 . The method of claim 11 , wherein the first banking operation to be performed on behalf of the first user is to transfer money from the first bank account at a first bank to the second bank account at a second bank, wherein the second bank is different from the first bank.

16 . A tangible, non-transitory computer readable medium, or media, storing machine-readable instructions that, when executed by one or more processors, cause the one or more processors to:

establish a first secure channel connection between a centralized gateway server and a first voice assistant service provider server associated with a first service provider that supports a first development platform, wherein the establishing the first secure channel connection includes using biometric authentication to authenticate users and to ascertain that certain users are authorized to request certain banking operations, the certain banking operations including one or more of open a banking account, open a card account, transfer funds between different banking accounts of the user, transfer funds from a banking account of the user to a third party's account, and receive currency exchange data;

receive, via the established first secure channel connection between the central gateway server and the first voice assistant service provider server, a first user request from the first voice assistant service provider server, the first user request indicating a first banking operation to be performed on behalf of a first user, the first user request configured to operate with the first development platform, wherein the first user request is received from the first voice assistant service provider server associated with the first voice assistant service provider that supports the first development platform;

perform biometric authentication based on the first user request and previously provided biometric input, the biometric authentication performed without transferring biometric data to another device;

generate, when the previously provided biometric input matches the first user request, a first service request for performing the first banking operation on behalf of the first user in response to receiving the first user request; and

transmit, when the previously provided biometric input matches the first user request, the first service request to a first server associated with a first service, to cause the first server to perform the first banking operation on behalf of the first user.

Assignments (1)

Continuity (2)

References Cited (20)