公开(公告)号：US20220405764A1

公开(公告)日：2022-12-22

申请号：US17740106

申请日：2022-05-09

申请人： HYPR Corp.

发明人： George Avetisov ,  Roman Kadinsky ,  Bojan Simic

IPC分类号： G06Q20/40 ,  G06Q20/10 ,  G06Q20/32

摘要： Spending digital currency without owning digital currency may be facilitated. The user may use a software application running on the user's computing platform to scan a digital currency public address quick-response code (QR), or a near-field-communication (NFC) based public address. The user may be prompted to swipe-to-authenticate the transaction. The user may authenticate the transaction by fingerprint-swiping a biometric-enabled transitory password authentication device. The biometric-enabled transitory password authentication device may transmit an encrypted transitory password a server via the user's computing platform. Upon receiving and verifying the transaction, the server may send an amount of digital currency to the target address on behalf of the user. The server may charge the user's debit card an equivalent amount of sovereign currency.

公开(公告)号：US20200287901A1

公开(公告)日：2020-09-10

申请号：US16783028

申请日：2020-02-05

申请人： HYPR Corp.

发明人： George Avetisov ,  Bojan Simic ,  Roman Kadinsky

IPC分类号： H04L29/06 ,  H04L9/08 ,  G06F21/45

摘要： Provided is a process that affords out-of-band authentication based on a secure channel to a trusted execution environment on a client device. The authentication process includes one or more authentication steps in addition to verifying any credentials provided by a client device. A notification may be transmitted by a server to a device other than the client device attempting to access the asset. That device may be a mobile device with a trusted execution environment storing user credential information, and the server may store representations of those credentials. The mobile device collects user input credentials and transmits representations for matching the previously stored representations and signed data for verification by the server that received data originated from the mobile device. The access attempt by the client is granted based in part on the result of authenticating the data received from the mobile device in a response to the notification.

公开(公告)号：US10601828B2

公开(公告)日：2020-03-24

申请号：US16270255

申请日：2019-02-07

申请人： HYPR Corp.

发明人： George Avetisov ,  Bojan Simic ,  Roman Kadinsky

IPC分类号： H04L29/06 ,  H04L9/08 ,  G06F21/45

摘要： Provided is a process that affords out-of-band authentication based on a secure channel to a trusted execution environment on a client device. The authentication process includes one or more authentication steps in addition to verifying any credentials provided by a client device. A notification may be transmitted by a server to a device other than the client device attempting to access the asset. That device may be a mobile device with a trusted execution environment storing user credential information, and the server may store representations of those credentials. The mobile device collects user input credentials and transmits representations for matching the previously stored representations and signed data for verification by the server that received data originated from the mobile device. The access attempt by the client is granted based in part on the result of authenticating the data received from the mobile device in a response to the notification.

公开(公告)号：US09906525B1

公开(公告)日：2018-02-27

申请号：US14538758

申请日：2014-11-11

申请人： HYPR Corp.

发明人： George Avetisov ,  Roman Kadinsky ,  Bojan Simic

IPC分类号： H04L29/06

CPC分类号： H04L63/0861 ,  H04L63/0846

摘要： Secure authentication of third-party applications and/or websites may be facilitated using a biometric-enabled transitory password authentication device. Exemplary implementations may replace a login requirement with a simple and secure swipe-to-authenticate mechanism in order to gain access to a third-party application and/or website. According to some implementations, a user may have a user computing platform linked to a physically separate authentication device. The user may access the third-party application and/or website via the user computing platform. The user computing platform may detect a login requirement associated with the third-party application and/or website. The user computing platform may prompt the user to swipe-to-authenticate. By using the swipe-to-authenticate mechanism, the user may gain access to the third-party application and/or website.

公开(公告)号：US20230362163A1

公开(公告)日：2023-11-09

申请号：US18191399

申请日：2023-03-28

申请人： HYPR Corp.

发明人： George Avetisov ,  Bojan Simic ,  Roman Kadinsky

IPC分类号： H04L9/08 ,  H04L9/40 ,  G06F21/45

CPC分类号： H04L63/0884 ,  G06F21/45 ,  H04L9/088 ,  H04L63/18

摘要： Provided is a process that affords out-of-band authentication for confirmation of physical access or when a device utilized for out-of-band authentication lacks connectivity to a network. An asymmetric cryptographic key-pair is established, a first device obtaining a key operable to decrypt data. A remote server obtaining a key operable to encrypt data and associating that key with an identifier of an identity or account associated with a user. An access attempt from the second device is received in association with the identifier of the identity associated with the user. A notification including data encrypted by the encryption key is generated by the remote server and transmitted to the second device. The first device obtains the notification data from the second device and decrypts the data to determine a notification response which is returned to the remote server for verification to permit or deny the access attempt of the second device.

公开(公告)号：US11677547B1

公开(公告)日：2023-06-13

申请号：US17871770

申请日：2022-07-22

申请人： HYPR Corp.

发明人： Michael McDonald

IPC分类号： H04L9/08 ,  H04W12/0433 ,  H04W12/08

CPC分类号： H04L9/0825 ,  H04W12/0433 ,  H04W12/08

摘要： Provided is a process for authentication of a user on a mobile device. The user of the mobile device may authenticate with the mobile device, and credentials may be conveyed to a server via a relying device. The mobile device may directly communicate credentials to the relying device. In some examples, the user of the mobile device may authenticate using the mobile device without inputting credentials on the relying device. Credentials conveyed to the server by the relying device and authenticated by the server may permit user access to the relying device or access to an online resource from the relying device.

公开(公告)号：US11438764B2

公开(公告)日：2022-09-06

申请号：US16932605

申请日：2020-07-17

申请人： HYPR Corp.

发明人： George Avetisov ,  Roman Kadinsky ,  Bojan Simic

IPC分类号： H04W12/06 ,  H04L9/40 ,  G06F21/45 ,  H04W12/08 ,  H04W12/069

摘要： Provided is a process that establishes representations and permits users to login to a relying device to which a mobile device has registered. Credential values of the user are established within a trusted execution environment of the mobile device and representations of those credentials are transmitted to a server. The user of the mobile device may authenticate with the mobile device to the server, which may permit user access to the relying device via secure session. The user of the mobile device may authenticate with the mobile device to the server, which may permit user access by causing the mobile device to obtain a value by which the relying device may be accessed. The user of the mobile device may authenticate with the mobile device based on a policy received from the server to obtain a value by which the relying device may be accessed.

公开(公告)号：US20210306335A1

公开(公告)日：2021-09-30

申请号：US17344316

申请日：2021-06-10

申请人： HYPR Corp.

发明人： George Avetisov ,  Bojan Simic ,  Roman Kadinsky

IPC分类号： H04L29/06 ,  H04L9/08 ,  G06F21/45

摘要： Provided is a process that affords out-of-band authentication based on a secure channel to a trusted execution environment on a client device. The authentication process includes one or more authentication steps in addition to verifying any credentials provided by a client device. A notification may be transmitted by a server to a device other than the client device attempting to access the asset. That device may be a mobile device with a trusted execution environment storing user credential information, and the server may store representations of those credentials. The mobile device collects user input credentials and transmits representations for matching the previously stored representations and signed data for verification by the server that received data originated from the mobile device. The access attempt by the client is granted based in part on the result of authenticating the data received from the mobile device in a response to the notification.

公开(公告)号：US11063944B2

公开(公告)日：2021-07-13

申请号：US16783028

申请日：2020-02-05

申请人： HYPR Corp.

发明人： George Avetisov ,  Bojan Simic ,  Roman Kadinsky

IPC分类号： H04L29/06 ,  H04L9/08 ,  G06F21/45

摘要： Provided is a process that affords out-of-band authentication based on a secure channel to a trusted execution environment on a client device. The authentication process includes one or more authentication steps in addition to verifying any credentials provided by a client device. A notification may be transmitted by a server to a device other than the client device attempting to access the asset. That device may be a mobile device with a trusted execution environment storing user credential information, and the server may store representations of those credentials. The mobile device collects user input credentials and transmits representations for matching the previously stored representations and signed data for verification by the server that received data originated from the mobile device. The access attempt by the client is granted based in part on the result of authenticating the data received from the mobile device in a response to the notification.

公开(公告)号：US20200351660A1

公开(公告)日：2020-11-05

申请号：US16932605

申请日：2020-07-17

申请人： HYPR Corp.

发明人： George Avetisov ,  Roman Kadinsky ,  Bojan Simic

IPC分类号： H04W12/06 ,  G06F21/45 ,  H04L29/06 ,  H04W12/08

摘要： Provided is a process that establishes representations and permits users to login to a relying device to which a mobile device has registered. Credential values of the user are established within a trusted execution environment of the mobile device and representations of those credentials are transmitted to a server. The user of the mobile device may authenticate with the mobile device to the server, which may permit user access to the relying device via secure session. The user of the mobile device may authenticate with the mobile device to the server, which may permit user access by causing the mobile device to obtain a value by which the relying device may be accessed. The user of the mobile device may authenticate with the mobile device based on a policy received from the server to obtain a value by which the relying device may be accessed.