Patent ID: 11941643
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 9:
10. An authentication system, comprising:
an authentication database; and
at least one server computer including at least one processor programmed or configured to:
register a plurality of user accounts for a plurality of users in the authentication database based at least partially on user information and account data for each user of the plurality of users, the account data for each user comprising an account identifier associated with a portable payment device, wherein the account identifier comprises at least a primary account number (PAN) associated with a user account for each user;
generate an identity score for each user of the plurality of users based on the PAN associated with the user account for each user;
receive at least one message requesting to create a plurality of provider accounts for a plurality of third-party service providers, the at least one message comprising a required permissions field, the required permissions field comprising one or more parameters of user information and the PAN associated with the user account for each user requested by a third-party system;
register the plurality of provider accounts for the plurality of third-party service providers in the authentication database based at least partially on third-party service provider data;
receive, from the third-party system corresponding to a third-party service provider of the plurality of third-party service providers, an initial request to authenticate a user of the plurality of users, the initial request communicated in response to the user creating an account with the third-party service provider;
redirect a device associated with the user to a webpage of the authentication system comprising a first graphical user interface configured to receive a first input from the user;
receive, from the device associated with the user, the first input from the user comprising user credentials corresponding to a first user account of the plurality of user accounts;
validate the user credentials based at least partially on the identity score of the user;
redirect the device associated with the user to a webpage of the authentication system comprising a second graphical user interface configured to receive a second input from the user;
receive the second input from the user comprising an approval for the third-party system to identify the one or more parameters of user information and the PAN associated with the user account of the user requested by the third-party system;
in response to receiving the second input from the user, communicate a redirect message to the device associated with the user, the redirect message comprising an authentication code, the redirect message configured to redirect the device associated with the third-party system;
store the authentication code on the device associated with the user via a browser application executing on the device associated with the user based on receiving the redirect message;
receive, from the third-party system, an access token request message comprising an authorization code and third-party service provider data;
validate the access token request message;
in response to validating the access token request message, generate an access token based at least partially on the authorization code and the third-party service provider data;
communicate the access token to the third-party system;
receive a second request to authenticate the user from the third-party system, wherein the second request to authenticate the user comprises the access token;
validate the access token by analyzing a digital signature of the access token; and
communicate the one or more parameters of user information and the PAN associated with the first user account requested by the third-party system to the third-party system based on validating the access token.