Patent ID: 9734500
Date: 2017-08-15
CPC Classifications: G06F,G06Q,H04L

Claim:
1. A computer-implemented method for authenticating a candidate user to facilitate accessing a host computing device as an authentic user, the host computing device in communication with an authenticating computing device, said method comprising: receiving from the host computing device, by the authenticating computing device, an authentication request to authenticate the candidate user as the authentic user, the host computing device associated with a service provider of secure data, the host computing device operating separately from the authenticating computing device, wherein the authentication request is received independent from a payment transaction; retrieving, by the authenticating computing device from a database, transaction data including a plurality of payment transactions associated with the authentic user based on a user identifier; generating, by the authenticating computing device, a challenge question and a correct answer to the challenge question based on the transaction data associated with the authentic user; and transmitting the challenge question to the host computing device for authenticating the candidate user and presenting the challenge question for display to ask the candidate user to respond without exposing the transaction data to the host computing device.