-
公开(公告)号:US11032272B2
公开(公告)日:2021-06-08
申请号:US16102624
申请日:2018-08-13
Applicant: ZUMIGO, INC.
Inventor: Harish Manepalli , Chirag C. Bakshi
Abstract: A mobile number of a mobile device can be employed as an authorization factor when the mobile device is connected to a WLAN. When a user attempts to interact with a restricted access server via the mobile device, verification functions loaded on the mobile device determine whether the mobile device is connected to a WLAN. If so, the verification functions cause the mobile device to open a port on the cellular network interface of the mobile device and transmit data packets to a mobile device identification server via a cellular network. The mobile device identification server can then determine the mobile number of the mobile device based on the cellular network IP address of the mobile device, and transmit the mobile number to the restricted access server as an authentication factor.
-
2.
公开(公告)号:US12015918B2
公开(公告)日:2024-06-18
申请号:US17458078
申请日:2021-08-26
Applicant: Zumigo, Inc.
Inventor: Harish Manepalli , Chirag C. Bakshi
CPC classification number: H04W12/068 , H04L63/0838 , H04L63/0884 , H04W48/08 , G06Q20/3221 , G06Q40/03
Abstract: A mobile network based authentication system for authenticating a user's access to a restricted-access account includes an application server and an identification server. The application server is configured to authenticate the user's access to the restricted-access account by transmitting a one-time password to a mobile computing device of the user and confirming that the one-time password has been entered by the user. The identification server communicates with the application server after the application server receives a request from the user to access the restricted-access account and before the application transmits the one-time password to the mobile device, to verify that an attribute of the restricted-access account is linked to a network identification of the mobile computing device.
-
公开(公告)号:US11575671B2
公开(公告)日:2023-02-07
申请号:US16442323
申请日:2019-06-14
Applicant: ZUMIGO, INC.
Inventor: Harish Manepalli , Chirag C. Bakshi , Venkatarama Parimi , Lyndi Rebecca Long
IPC: H04L9/40 , H04W12/06 , G06F16/953
Abstract: An authorization process employs a network ID as a possession factor for a secure account, such as a bank account or e-mail account, and determines one or more risk indicators associated with the possession factor. The authorization process is successfully completed when a risk score that is based on the risk indicators is less than a certain risk threshold. The risk indicators include a device history of the network ID and/or at least one attribute of a cellular account associated with the network ID. The device history identifies other mobile devices and/or SIM cards, if any, that have been previously activated with the network ID, while the one or more attributes can further indicate potentially fraudulent activity associated with the cellular account through which wireless services for the network ID are currently provided.
-
公开(公告)号:US10311423B2
公开(公告)日:2019-06-04
申请号:US14735042
申请日:2015-06-09
Applicant: ZUMIGO, INC.
Inventor: Chirag C. Bakshi , Partha Roy Chowdhury , David Aaron Pinski
Abstract: A user activity, which may be a debit or credit card transaction or an online access, is approved, or proximity between two users is confirmed, based on a response or other acknowledgement from a mobile subscriber terminal. The mobile subscriber terminal acknowledgement is generated in response to a query from an authorizing entity associated with the debit or credit card, or another mobile subscriber terminal, and indicates whether or not the mobile subscriber terminal is within a maximum allowable radius from a specific location included in the query. It is noted that no specific location information is included in the mobile subscriber terminal acknowledgement. An application downloaded to the mobile subscriber terminal may generate the above-described acknowledgement.
-
公开(公告)号:US11689923B2
公开(公告)日:2023-06-27
申请号:US17141643
申请日:2021-01-05
Applicant: ZUMIGO, INC.
Inventor: Chirag C. Bakshi , Harish Manepalli , Venkatarama Parimi , Desmond Kwok-Hon Chan
IPC: H04W12/06 , H04L9/40 , H04W12/033
CPC classification number: H04W12/068 , H04L63/0435 , H04L63/0838 , H04W12/033
Abstract: An authentication server enrolls a user's mobile device as a trusted device with a vendor software after verifying the network ID of the user's mobile device. The authentication server associates the network ID in an authentication entry with authentication information such as a push notification token and cryptographic key. Later, when the user attempts to log in to the vendor software, the authentication server may attempt to cryptographically authenticate the user. Otherwise, the authentication server may use the push notification token to transmit an OTP to the user's mobile device as a push notification.
-
6.
公开(公告)号:US11647387B2
公开(公告)日:2023-05-09
申请号:US16151187
申请日:2018-10-03
Applicant: ZUMIGO, INC.
Inventor: Chirag C. Bakshi , Harish Manepalli , Venkatarama Parimi
IPC: H04L29/06 , H04W12/06 , G06F16/9538 , G06Q20/40
CPC classification number: H04W12/068 , G06F16/9538 , G06Q20/40
Abstract: A one-time password (OTP) is transmitted to an authorized wireless device for use an authentication factor, even though the OTP may be intercepted or otherwise viewed with an unauthorized device. When a secure request is initiated that requires entry of an OTP as an authentication factor, a hyperlink is transmitted to a wireless device from which the secure request is initiated. When the hyperlink is selected, a connection is established with an entity that determines mobile number information associated with the SSL connection. Comparison of the determined mobile number information and the mobile number of the wireless device to which the hyperlink was intended to be sent indicates whether the wireless device that has established the SSL connection is the authorized wireless device. The OTP is displayed on the wireless device after that device has been verified as the authorized wireless device.
-
公开(公告)号:US12047777B2
公开(公告)日:2024-07-23
申请号:US18316166
申请日:2023-05-11
Applicant: Zumigo, Inc.
Inventor: Chirag C. Bakshi , Harish Manepalli , Venkatarama Parimi , Desmond Kwok-Hon Chan
IPC: H04W12/06 , H04L9/40 , H04W12/033
CPC classification number: H04W12/068 , H04L63/0435 , H04L63/0838 , H04W12/033
Abstract: An authentication server enrolls a user's mobile device as a trusted device with a vendor software after verifying the network ID of the user's mobile device. The authentication server associates the network ID in an authentication entry with authentication information such as a push notification token and cryptographic key. Later, when the user attempts to log in to the vendor software, the authentication server may attempt to cryptographically authenticate the user. Otherwise, the authentication server may use the push notification token to transmit an OTP to the user's mobile device as a push notification.
-
公开(公告)号:US10560845B1
公开(公告)日:2020-02-11
申请号:US16442327
申请日:2019-06-14
Applicant: ZUMIGO, INC.
Inventor: Harish Manepalli , Chirag C. Bakshi , Venkatarama Parimi , Lyndi Rebecca Long
Abstract: The network ID of a mobile device can be securely employed as a possession factor or as an identifier of a mobile device that is authorized to receive a funds transfer. When an access to a restricted access application server or a restricted access account on the application server is attempted via a computing device, and possession of a mobile device programmed with a network ID is employed as a verification factor, the application server or a risk indicator server can determine whether certain changes in information associated with the network ID and one or more attributes of a cellular account associated with the network ID are risk indicators. Based on the presence or absence of such risk indicators associated with the network ID, the user activity is either authorized or denied.
-
公开(公告)号:US10313835B2
公开(公告)日:2019-06-04
申请号:US15942166
申请日:2018-03-30
Applicant: ZUMIGO, INC.
Inventor: Chirag C. Bakshi , Harish Manepalli , Venkatarama Parimi
Abstract: A mobile device includes a storage device in which an application software of a third party service provider and rules associated with the application software are stored, a network interface, a sensor configured to detect a location of the mobile device, and a processor configured to generate a location alert to be transmitted through the network interface according to the rules. The mobile device implements the rules for location-based alerts therein such that the frequency of the alerts is carefully controlled and the power supply of the mobile device is efficiently utilized.
-
-
-
-
-
-
-
-