Systems and Methods for Managing User Identities in Networks

    公开(公告)号:US20210014062A1

    公开(公告)日:2021-01-14

    申请号:US16507776

    申请日:2019-07-10

    Abstract: Systems and methods are provided for managing user identities in networks. One exemplary method includes receiving, at a communication device, an API call request for a credential from a relying party. The communication device includes an application that incorporates an SDK. After receiving the API call request for the credential, the communication device authenticates a user associated with the communication device and identified in the API call request. After authentication of the user the communication device generates, via the SDK, a private-public key pair and stores the private key in memory. The communication device compiles, via the SDK, a credential packet include the public key and identity data associated with the user and transmits the credential packet to the relying party, whereby the relying party is registered to the SDK to request assertions of an identity of the user.

    SYSTEMS AND METHODS FOR PROVISIONING DIGITAL IDENTITIES TO AUTHENTICATE USERS

    公开(公告)号:US20200234527A1

    公开(公告)日:2020-07-23

    申请号:US16841115

    申请日:2020-04-06

    Abstract: Systems and methods are provided for use in provisioning digital identities for users. One exemplary method includes receiving, at a card device, an authentication request and a captured first biometric of a user, from a communication device associated with the user, and comparing the first biometric and a first biometric reference at the card device, in response to the first biometric reference being stored at the card device. The method also includes capturing, at the card device, a second biometric of the user and comparing the second biometric to a second biometric reference stored at the card device. The method further includes compiling a response to the authentication request including a first indicator of the comparison of the first biometric to the first biometric reference and a second indicator of the comparison of the second biometric to the second biometric reference, and transmitting the response to the communication device.

    METHODS AND SYSTEMS FOR PROVIDING FIDO AUTHENTICATION SERVICES

    公开(公告)号:US20200045046A1

    公开(公告)日:2020-02-06

    申请号:US16598206

    申请日:2019-10-10

    Abstract: FIDO (“Fast IDentity Online”) authentication processes and systems are described. In an embodiment, a FIDO (“Fast IDentity Online”) authentication process includes a FIDO information systems (IS) computer system receiving a FIDO authentication request for a transaction from a user device, the FIDO authentication request including user data and user device authenticator data, then verifying the user data and user device authenticator data, selecting a FIDO-certified server based on a list of authorized authenticators, business rules and the user device authenticator data, and transmitting the FIDO authentication request to the selected FIDO server. The process also includes the FIDO IS computer system receiving an authentication result from the FIDO-certified server, and transmitting the authentication result to the user device.

    Methods and systems for providing FIDO authentication services

    公开(公告)号:US10469490B2

    公开(公告)日:2019-11-05

    申请号:US15787976

    申请日:2017-10-19

    Abstract: FIDO (“Fast IDentity Online”) authentication processes and systems are described. In an embodiment, a FIDO information systems (IS) computer system receives a FIDO authentication request for a transaction from a user device, which includes user data and user device authenticator data. The FIDO IS computer system then verifies the user data and user device authenticator data, selects a FIDO-certified server, transmits the FIDO authentication request to the selected FIDO server, and receives a challenge message from the selected FIDO-certified server. The FIDO IS computer system next transmits the challenge message to the user device, receives a FIDO authentication response, transmits the FIDO authentication response to the selected FIDO-certified server, receives an authentication result from the FIDO-certified server, and transmits the authentication result to the user device.

    SECURE ON DEVICE CARDHOLDER AUTHENTICATION USING BIOMETRIC DATA
    47.
    发明申请
    SECURE ON DEVICE CARDHOLDER AUTHENTICATION USING BIOMETRIC DATA 审中-公开
    使用生物量数据确保设备卡片认证

    公开(公告)号:US20170061441A1

    公开(公告)日:2017-03-02

    申请号:US14839234

    申请日:2015-08-28

    CPC classification number: G06Q20/40145 G06Q20/32 G06Q2220/00

    Abstract: A secure on-device cardholder authentication method and system. In an embodiment, a consumer's mobile device uses a mobile application to receive a user authentication request from an entity. A biometric data capture request is then transmitted to a biometric sensor of the mobile device, and a determination made that the mobile application is authorized to use an authenticator API. Next, the mobile device processor prompts the user to provide at least one form of biometric data in accordance with business rules, receives a user authentication response when the user provided biometric data matches locally stored biometric data, generates a positive user authentication response message, and transmits the positive user authentication response message to the entity.

    Abstract translation: 安全的设备上的持卡人认证方法和系统。 在一个实施例中,消费者的移动设备使用移动应用从实体接收用户认证请求。 然后将生物特征数据捕获请求发送到移动设备的生物特征传感器,并且确定移动应用被授权使用认证器API。 接下来,移动设备处理器提示用户根据业务规则提供至少一种形式的生物特征数据,当用户提供的生物统计数据与本地存储的生物统计数据匹配时,接收用户认证响应,生成正用户认证响应消息,以及 向实体发送正用户认证响应消息。

    SYSTEMS, APPARATUS AND METHODS FOR IMPROVED AUTHENTICATION
    48.
    发明申请
    SYSTEMS, APPARATUS AND METHODS FOR IMPROVED AUTHENTICATION 审中-公开
    用于改进认证的系统,装置和方法

    公开(公告)号:US20150294313A1

    公开(公告)日:2015-10-15

    申请号:US14684749

    申请日:2015-04-13

    Abstract: Multi-factor authentication techniques are described that use secure push authentication technology for transactions. An embodiment includes receiving, by an assurance platform operating as an authentication service platform, a user authentication request and transaction data from an access control server (ACS), determining an authentication rule, generating a user validation request message, transmitting the user validation request message to a user mobile device, and receiving user authentication data. The assurance platform then validates the user authentication data, transmits a device authentication request, receives a device authentication response signed with a private key of the user, and authenticates the user based on the device authentication response and private key.

    Abstract translation: 描述了使用安全推送认证技术进行交易的多因素认证技术。 一个实施例包括由作为验证服务平台的保证平台从访问控制服务器(ACS)接收用户认证请求和交易数据,确定认证规则,生成用户验证请求消息,发送用户验证请求消息 到用户移动设备,并且接收用户认证数据。 然后,保证平台验证用户认证数据,发送设备认证请求,接收用用户私钥签名的设备认证响应,并根据设备认证响应和私钥认证用户。

Patent Agency Ranking