Systems and methods for facilitating secure authentication of third-party applications and/or websites using a biometric-enabled transitory password authentication device

Secure authentication of third-party applications and/or websites may be facilitated using a biometric-enabled transitory password authentication device. Exemplary implementations may replace a login requirement with a simple and secure swipe-to-authenticate mechanism in order to gain access to a third-party application and/or website. According to some implementations, a user may have a user computing platform linked to a physically separate authentication device. The user may access the third-party application and/or website via the user computing platform. The user computing platform may detect a login requirement associated with the third-party application and/or website. The user computing platform may prompt the user to swipe-to-authenticate. By using the swipe-to-authenticate mechanism, the user may gain access to the third-party application and/or website.

FIELD OF THE DISCLOSURE

This disclosure relates to systems and methods for facilitating secure authentication of third-party applications and/or websites using a biometric-enabled transitory password authentication device.

BACKGROUND

Conventionally, the standard approach for gaining access to third-party applications and/or websites requiring authentication involves providing a login name and password. This approach presents many disadvantages. One disadvantage is the inconvenience of having to remember and manually enter login names and passwords. Another disadvantage is the ease of theft of login names and passwords, which can result in identity theft.

SUMMARY

One aspect of the disclosure relates to a system configured for facilitating secure authentication of third-party applications and/or websites using a biometric-enabled transitory password authentication device. Exemplary implementations may replace a login requirement with a simple and secure swipe-to-authenticate mechanism in order to gain access to a third-party application and/or website. According to some implementations, a user may have a user computing platform linked to a physically separate authentication device. The user may access the third-party application and/or website via the user computing platform. The user computing platform may detect a login requirement associated with the third-party application and/or website. The user computing platform may prompt the user to swipe-to-authenticate. By using the swipe-to-authenticate mechanism, the user may gain access to the third-party application and/or website. In some implementations, the third-party application may include an industry-certified API intended for use with the authentication device, which itself may be industry-certified. The industry certification may be provided by an industry consortium associated with online authentication with first standards-based specifications. The industry certification may include a Fast Identity Online (FIDO) certification. Certifications may also be provided by certain governmental entities and other certifying organizations.

According to some implementations, the system may include a user computing platform communicatively coupled with the authentication device. The system may include one or more servers. The server(s) may be configured to communicate with the user computing platform according to a client/server architecture. A user may access the system via the user computing platform.

The authentication device may be configured to provide a biometric-enabled transitory password to facilitate secure authentication. The authentication device may include a tamper proof casing and internal components. The authentication device may be configured to run a secured and untethered operating system. The authentication device may be configured to be disposed proximate to the user computing platform. In some implementations, the authentication device may be configured to adhere to an external surface of the user computing platform. Such a form factor may be akin to a sticker that can be adhered, for example, to the back of a smartphone. In some implementations, the authentication device may be embodied within a case configured to removably attached to and cover a portion of user computing platform.

The authentication device may include one or more of a biometric sensor, a communications interface, a power supply, and/or other components. The biometric sensor may be configured to obtain a biometric sample from a user. The communications interface may be configured to provide communications capabilities to the authentication device. The power supply may be configured to provide electrical power to one or more components of the authentication device.

The authentication device may be configured to execute computer readable instructions. The computer readable instructions may include one or more of a biometric component, a transitory password component, a bio-pin component, an encryption component, a one-way communications component, and/or other components.

The biometric component may be configured to receive the biometric sample from the biometric sensor. The biometric component may be configured to verify the biometric sample obtained by the biometric sensor based on biometric information stored by the authentication device. In some implementations, verification of the biometric sample may be required in order to unlock the authentication device.

The transitory password component may be configured to provide a transitory password. The transitory password may change periodically based on passage of time. The transitory password may be provided responsive to the biometric sample being verified.

The bio-pin component may be configured to provide a bio-pin. The bio-pin may be an alphanumeric hash. The bio-pin may be based on one or more of a random number, a numeric representation of the biometric sample, a user code, and/or other information. A bio-pin associated with a given authentication device may be unique that device.

The encryption component may be configured to encrypt sensitive information stored by and/or transmitted by the authentication device. By way of non-limiting example, the sensitive information stored by and/or transmitted by the authentication device may include one or more of the transitory password provided by the transitory password component, a credit card number, a debit card number, an bank account number, a payment account number, a digital currency (e.g., bitcoin) private key, a password, other information pertaining to electronic payment platforms, and/or other sensitive information.

The one-way communications component may be configured to transmit information (e.g., the encrypted transitory password) to the user computing platform. The one-way communications component may be configured such that, while information may be transmitted by the authentication device, no information may be received by the authentication device. In some implementations, verification of the biometric sample may be required in order for the one-way communications component to allow information to be transmitted from the authentication device.

Referring now to the user computing platform, it may be configured to execute computer readable instructions. The computer readable instructions may include one or more of a user code component, an unlock-app component, a user interface component, a login detection component, a user prompt component, an authentication initiation component, a transaction component, and/or other components.

The user code component may be configured to obtain a user code from a user. The unlock-app component may be configured to unlock an application running on the user computing platform responsive to the correct user code being obtained by the user code component.

The user interface component may be configured to provide a user interface presented via the user computing platform. In some implementations, the user interface may be configured to receive user instructions to perform a transaction that requires authentication. According to various implementations, a given transaction may involve gaining access to a third-party application and/or website requiring authentication. Such access may be provided subsequent to authentication. Such access may include access to some or all of the functionality and/or information associated with the third-party application and/or website.

The login detection component may be configured to detect a login requirement associated with the third-party application and/or website. The login may include a login name and password, a two-factor authentication, and/or other login scheme. A successful login may be required to gain access to the third-party application and/or website.

The user prompt component may be configured to provide a prompt for the user to swipe-to-authenticate in order to access the application and/or website. “Swipe-to-authenticate” may include providing a biometric sample via the authentication device. In some implementations, swipe-to-authenticate may include swiping a finger past the biometric sensor of the authentication device. The prompt may be presented visually via the user interface provided by the user interface component. The prompt may be presented audibly, haptically, and/or other manners for prompting the user. The prompt may include any indication to the user which the user will recognize as a cue to provide a biometric sample.

The authentication initiation component may be configured to prompt the authentication device. The prompt may be configured to cause the authentication device to “wake up,” turn on, become activated, and/or otherwise become ready to receive a biometric sample.

The transaction component may be configured to receive the transitory password (which may be encrypted) from the authentication device. In some implementations, the transitory password may be provided from the authentication device to the user computing platform only after (1) the user code has been successfully provided via the user computing platform and (2) the biometric sample has been successfully obtained and verified by the authentication device. The transaction component may be configured to sign transaction information associated with the transaction. Signing the transaction information may be based on the encrypted transitory password. The transaction information may be encrypted based on the encrypted transitory password. The transaction information may include information that describes the transaction and/or information that is necessary to perform the transaction. The transaction component may be configured to transmit the encrypted transitory password with the signed transaction information to the server(s).

Referring now to the server(s), they may be configured to execute computer readable instructions. The computer readable instructions may include one or more of a communications component, a decryption component, a server-side transitory password component, a verification component, a server-side transaction component, and/or other components.

The communications component may be configured to receive the encrypted transitory password from the user computing platform. The communications component may be configured to receive the signed transaction information from the user computing platform.

The decryption component may be configured to decrypt information received from the user computing platform. The decryption component may be configured to decrypt the encrypted transitory password. The decryption component may be configured to decrypt the signed transaction information.

The server-side transitory password component may be configured to provide a server-side transitory password that changes periodically based on passage of time. The server-side transitory password may be provided synchronously with the transitory password provided by the authentication device. The server-side transitory password may be the same as the transitory password provided by the authentication device.

The verification component may be configured to verify the user by determining whether the transitory password received from the user computing platform, once decrypted, is valid. Determining the validity of the decrypted transitory password may include determining whether the decrypted transitory password matches the server-side transitory password.

The server-side transaction component may be configured to facilitate the transaction responsive to the user being verified. Facilitating the transaction may include effectuating gaining access to a third-party application and/or website requiring authentication. Such access may include access to some or all of the functionality and/or information associated with the third-party application and/or website. Such access may be provided subsequent to authentication. In some implementations, the server-side transaction component may be configured to provide an authentication verification. The authentication verification may be transmitted from the server(s) to the user computing platform. The user computing platform may provide access to the third-party application and/or website responsive to receiving the authentication verification from the server(s).

DETAILED DESCRIPTION

FIG. 1illustrates a system100configured for facilitating secure authentication of third-party applications and/or websites using a biometric-enabled transitory password authentication device102, in accordance with one or more implementations. The system100may include a user computing platform104communicatively coupled with authentication device102. The system100may include one or more servers106. The server(s)106may be configured to communicate with user computing platform104according to a client/server architecture. A user may access system100via user computing platform104.

The authentication device102may be configured to provide a biometric-enabled transitory password to facilitate secure authentication. The authentication device102may include a tamper proof casing and internal components. The authentication device102may be configured to run a secured and untethered operating system. The authentication device102may be configured to be disposed proximate to user computing platform104. In some implementations, authentication device102may be configured to adhere to an external surface of user computing platform104. Such a form factor may be akin to a sticker that can be adhered, for example, to the back of a smartphone. In some implementations, authentication device102may be embodied within a case configured to removably attached to and cover a portion of user computing platform. The authentication device102may include one or more of a biometric sensor108, a communications interface110, a power supply112, and/or other components.

The biometric sensor108may be configured to obtain a biometric sample from a user. A biometric sample (also referred as a biometric identifier) may describe distinctive, measurable characteristics used to label and describe individuals. According to various implementations, the biometric sample may include one or more of fingerprint, palm veins, face recognition, DNA, palm print, hand geometry, iris recognition, retina, odor/scent, and/or other biometric samples. By way of non-limiting example, authentication device102may include a fingerprint scanner and/or other imaging technology configured to obtain information associated with fingerprint, palm veins, face recognition, DNA, palm print, hand geometry, iris recognition, retina, odor/scent, and/or other biometric samples. In some implementations, biometric sensor108may include a FPC-1080A fingerprint swipe scanner. In some implementations, the biometric sample may include behavioral characteristics related to the pattern of behavior of the user, which may be referred to as behaviometrics. The behaviometrics may include one or more of typing rhythm, gait, voice, and/or other behaviometrics.

The communications interface110may be configured to provide communications capabilities to authentication device102. In some implementations, authentication device102may be configured for one-way communication such that information is transmitted from authentication device102to other locations (e.g., user computing platform104) but no information is received by authentication device102. Such a communications approach may wholly prevent or greatly alleviate the probability of authentication device102being hacked, tampered with, and/or otherwise compromised because foreign software code (e.g., computer viruses) cannot be introduced into authentication device102. In some implementations, communications interface110may include a wireless technology standard for transmitting data over short distances such as Bluetooth, ZigBee, RuBee, and/or other suitable standards.

The power supply112may be configured to provide electrical power to one or more components of authentication device102. The power supply112may include one or more of a battery, a capacitor, a solar cell, an electromagnetic induction circuit, and/or other power supplies. In some implementations, power supply112may include a rechargeable battery. In some implementations, power supply112may include a battery that stores sufficient electrical power to supply one or more components of authentication device102without charging for the lifetime of authentication device102(e.g., a month, several months, a year, several years, and/or other durations).

The authentication device102may be configured to execute computer readable instructions114. The computer readable instructions114may include one or more of a biometric component116, a transitory password component118, a bio-pin component120, an encryption component122, a one-way communications component124, and/or other components.

The biometric component116may be configured to receive the biometric sample from biometric sensor108. The biometric component116may be configured to verify the biometric sample obtained by biometric sensor108based on biometric information stored by authentication device102. In some implementations, verification of the biometric sample may be required in order to unlock authentication device102. The biometric information stored by authentication device102and used to verify the biometric sample obtained by biometric sensor108may include an exemplar or template of the biometric sample. The biometric information may be stored by authentication device102during an initialization process during which the user provides the sample during set up of authentication device102. The biometric information may be stored by authentication device102during manufacture of authentication device102. By way of non-limiting example, a biometric sample comprising a fingerprint obtained by biometric sensor108may be verified by matching the fingerprint to a fingerprint exemplar or template stored by authentication device102. In some implementations, biometric component116may utilize a fingerprint matching algorithm that is the same as or similar to the FPC-1080A matching algorithm available from Fingerprints Cards AB of Gothenburg, Sweden.

The transitory password component118may be configured to provide a transitory password. The transitory password may change periodically based on passage of time. The transitory password may be provided responsive to the biometric sample being verified. In some implementations, the transitory password may be a time-based one-time password (TOTP). The TOTP may be provided by an algorithm that computes a one-time password from a shared secret key and a current time. The TOTP may operate on Unix Time.

The bio-pin component120may be configured to provide a bio-pin. The bio-pin may be an alphanumeric hash. The bio-pin may be based on one or more of a random number, a numeric representation of the biometric sample, a user code, and/or other information. A bio-pin associated with a given authentication device102may be unique that device. In some implementations, the random number may be a “true” random number provided based on a measured physical phenomenon that is expected to be random. By way of non-limiting example, the measured physical phenomenon may include one or more of photons impinging on an imaging device (e.g., a charge-coupled device or CCD) atmospheric noise, thermal noise, cosmic background radiation, radioactive decay, other external electromagnetic and quantum phenomena, and/or other physical phenomena. The numeric representation of the biometric sample may be determined based on a numeric code sequence for a fingerprint image based on ridge flow patterns of the fingerprint. Other approaches for numerically representing a biometric sample are contemplated and are within the scope of the disclosure. The user code may by a code provided by the user. The user code may be an alphanumeric code. In some implementations, the user code may be a for digit number.

In some implementations, the bio-pin may be the master seed for generation of some or all wallet chains managed by system100. For example, some or all wallet chains and/or public keys belonging to a user may be generated as the result of a hash resulting from the bio-pin. In some implementations, a wallet chain may be based on a bio-pin and the transitory password (e.g., TOTP) provided by transitory password component118.

The encryption component122may be configured to encrypt sensitive information stored by and/or transmitted by authentication device102. By way of non-limiting example, the sensitive information stored by and/or transmitted by authentication device102may include one or more of the transitory password provided by transitory password component118, a credit card number, a debit card number, an bank account number, a payment account number, a digital currency (e.g., bitcoin) private key, a password, other information pertaining to electronic payment platforms, and/or other sensitive information. In some implementations, encryption component122may utilize 512 bit elliptic curve cryptography for PCI. Other encryption techniques are contemplated and are within the scope of the disclosure.

The one-way communications component124may be configured to transmit information (e.g., the encrypted transitory password) to user computing platform104. The one-way communications component124may be configured such that, while information may be transmitted by authentication device102, no information may be received by authentication device102. In some implementations, verification of the biometric sample may be required in order for one-way communications component124to allow information to be transmitted from authentication device102.

As described further herein, authentication device102may receive a prompt from user computing platform104that causes authentication device102to “wake up,” turn on, become activated, and/or otherwise become ready to receive a biometric sample. Such a prompt, however, may not include any information that can corrupt authentication device102and may merely function to activate authentication device102from a power-saving mode.

Referring now to user computing platform104depicted inFIG. 1, it may be configured to execute computer readable instructions126. The computer readable instructions126may include one or more of a user code component128, an unlock-app component130, a user interface component132, a login detection component133, a user prompt component134, an authentication initiation component135, a transaction component136, and/or other components.

The user code component128may be configured to obtain a user code from a user. The user code may be provided by the user via user computing platform104. In some implementations, the user may enter the user code on a keypad of user computing platform104. The user may provide the user code using a voice command received by user computing platform104. The user code may be the same as or different from the user code utilized by bio-pin component120of authentication device102.

The unlock-app component130may be configured to unlock an application running on user computing platform104responsive to the correct user code being obtained by user code component128. In some implementations, unlocking the application may include allowing the application to open. In some implementations, unlocking the application may include enabling one or more features of the application when it is already running on user computing platform104.

The user interface component132may be configured to provide a user interface presented via user computing platform104. The user interface may be a graphical user interface (GUI). The user interface may be configured to provide information to the user. In some implementations, the user interface may be configured to present information associated with one or more transactions. The user interface may be configured to receive information from the user. In some implementations, the user interface may be configured to receive user instructions to perform a transaction that requires authentication. The user instructions may include a selection of a transaction, a command to perform a transaction, and/or information associated with a transaction. According to various implementations, a given transaction may involve gaining access to a third-party application and/or website requiring authentication. Such access may be provided subsequent to authentication. Such access may include access to some or all of the functionality and/or information associated with the third-party application and/or website.

The login detection component133may be configured to detect a login requirement associated with the third-party application and/or website. The login may include a login name and password, a two-factor authentication, and/or other login scheme. A successful login may be required to gain access to the third-party application and/or website. Detecting the login may be performed by various approaches known in the art, which are within the scope of the disclosure.

The user prompt component134may be configured to provide a prompt for the user to swipe-to-authenticate in order to access the application and/or website. “Swipe-to-authenticate” may include providing a biometric sample via authentication device102. In some implementations, swipe-to-authenticate may include swiping a finger past biometric sensor108of authentication device102. The prompt may be presented visually via the user interface provided by user interface component132. The prompt may be presented audibly, haptically, and/or other manners for prompting the user. The prompt may include any indication to the user which the user will recognize as a cue to provide a biometric sample.

The authentication initiation component135may be configured to prompt authentication device102. The prompt may be configured to cause authentication device102to “wake up,” turn on, become activated, and/or otherwise become ready to receive a biometric sample. Such a prompt, however, may not include any information that can corrupt authentication device102and may merely function to activate authentication device102from a power-saving mode. Once the biometric sample is received and verified by authentication device102, authentication device102may provide the transitory password (which may be encrypted) to user computing platform104.

The transaction component136may be configured to receive the transitory password (which may be encrypted) from authentication device102. In some implementations, the transitory password may be provided from authentication device102to user computing platform104only after (1) the user code has been successfully provided via user computing platform104and (2) the biometric sample has been successfully obtained and verified by authentication device102. The transaction component136may be configured to sign transaction information associated with the transaction. Signing the transaction information may be based on the encrypted transitory password. The transaction information may be encrypted based on the encrypted transitory password. The transaction information may include information that describes the transaction and/or information that is necessary to perform the transaction. The transaction component136may be configured to transmit the encrypted transitory password with the signed transaction information to server(s)106.

Referring now to server(s)106depicted inFIG. 1, they may be configured to execute computer readable instructions138. The computer readable instructions138may include one or more of a communications component140, a decryption component142, a server-side transitory password component144, a verification component146, a server-side transaction component148, and/or other components.

The communications component140may be configured to receive the encrypted transitory password from user computing platform104. The communications component140may be configured to receive the signed transaction information from user computing platform104.

The decryption component142may be configured to decrypt information received from user computing platform104. The decryption component142may be configured to decrypt the encrypted transitory password. The decryption component142may be configured to decrypt the signed transaction information.

The server-side transitory password component144may be configured to provide a server-side transitory password that changes periodically based on passage of time. In some implementations, the transitory password may be a time-based one-time password (TOTP). The TOTP may be provided by an algorithm that computes a one-time password from a shared secret key and a current time. The TOTP may operate on Unix Time. The server-side transitory password may be provided synchronously with the transitory password provided by authentication device102. The server-side transitory password may be the same as the transitory password provided by authentication device102.

The verification component146may be configured to verify the user by determining whether the transitory password received from user computing platform104, once decrypted, is valid. Determining the validity of the decrypted transitory password may include determining whether the decrypted transitory password matches the server-side transitory password.

The server-side transaction component148may be configured to facilitate the transaction responsive to the user being verified. Facilitating the transaction may include effectuating gaining access to a third-party application and/or website requiring authentication. Such access may include access to some or all of the functionality and/or information associated with the third-party application and/or website. Such access may be provided subsequent to authentication. In some implementations, server-side transaction component148may be configured to provide an authentication verification. The authentication verification may be transmitted from server(s)106to user computing platform104. The user computing platform104may provide access to the third-party application and/or website responsive to receiving the authentication verification from server(s)106.

In some implementations, server(s)106, user computing platform104, and/or external resources150may be operatively linked via one or more electronic communication links. For example, such electronic communication links may be established, at least in part, via a network such as the Internet and/or other networks. It will be appreciated that this is not intended to be limiting, and that the scope of this disclosure includes implementations in which server(s)106, user computing platform104, and/or external resources150may be operatively linked via some other communication media.

External resources150may include sources of information, hosts and/or providers of transaction platforms outside of system100, external entities participating with system100, and/or other resources. In some implementations, some or all of the functionality attributed herein to external resources150may be provided by resources included in system100.

The authentication device102may include electronic storage152, one or more processors154, and/or other components. Illustration of authentication device102inFIG. 1is not intended to be limiting. Authentication device102may include a plurality of hardware, software, and/or firmware components operating together to provide the functionality attributed herein to authentication device102.

The user computing platform104may include electronic storage156, one or more processors158, and/or other components. The user computing platform104may include communication lines, or ports to enable the exchange of information with a network and/or other computing platforms. Illustration of user computing platform104inFIG. 1is not intended to be limiting. The user computing platform104may include a plurality of hardware, software, and/or firmware components operating together to provide the functionality attributed herein to user computing platform104. By way of non-limiting example, user computing platform104may include one or more of a desktop computer, a laptop computer, a handheld computer, a tablet computing platform, a NetBook, a Smartphone, a gaming console, and/or other computing platforms.

The server(s)106may include electronic storage160, one or more processors162, and/or other components. The server(s)106may include communication lines, or ports to enable the exchange of information with a network and/or other computing platforms. Illustration of server(s)106inFIG. 1is not intended to be limiting. The server(s)106may include a plurality of hardware, software, and/or firmware components operating together to provide the functionality attributed herein to server(s)106. For example, server(s)106may be implemented by a cloud of computing platforms operating together as server(s)106.

Electronic storage152,156, and/or160may comprise non-transitory storage media that electronically stores information. The electronic storage media of electronic storage152,156, and/or160may include one or both of system storage that is provided integrally (i.e., substantially non-removable) with a respective component of system100and/or removable storage that is removably connectable to a respective component of system100via, for example, a port (e.g., a USB port, a firewire port, etc.) or a drive (e.g., a disk drive, etc.). Electronic storage152,156, and/or160may include one or more of optically readable storage media (e.g., optical disks, etc.), magnetically readable storage media (e.g., magnetic tape, magnetic hard drive, floppy drive, etc.), electrical charge-based storage media (e.g., EEPROM, RAM, etc.), solid-state storage media (e.g., flash drive, etc.), and/or other electronically readable storage media. Electronic storage152,156, and/or160may include one or more virtual storage resources (e.g., cloud storage, a virtual private network, and/or other virtual storage resources). Electronic storage152,156, and/or160may store software algorithms, information determined by a processor, and/or other information that enables components of system100to function as described herein.

The processor(s)154of authentication device102may be configured to provide information processing capabilities in authentication device102. As such, processor(s)154may include one or more of a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and/or other mechanisms for electronically processing information. Although processor(s)154is shown inFIG. 1as a single entity, this is for illustrative purposes only. In some implementations, processor(s)154may include a plurality of processing units. The processor(s)154may be configured to execute computer readable instruction components116,118,120,122,124, and/or other components. The processor(s)154may be configured to execute components116,118,120,122,124, and/or other components by software; hardware; firmware; some combination of software, hardware, and/or firmware; and/or other mechanisms for configuring processing capabilities on processor(s)154.

The description of the functionality provided by the different components116,118,120,122, and/or124described herein is for illustrative purposes, and is not intended to be limiting, as any of components116,118,120,122, and/or124may provide more or less functionality than is described. For example, one or more of components116,118,120,122, and/or124may be eliminated, and some or all of its functionality may be provided by other ones of components116,118,120,122, and/or124. As another example, processor(s)154may be configured to execute one or more additional computer readable instruction components that may perform some or all of the functionality attributed below to one of components116,118,120,122, and/or124.

The processor(s)158of user computing platform104may be configured to provide information processing capabilities in user computing platform104. As such, processor(s)158may include one or more of a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and/or other mechanisms for electronically processing information. Although processor(s)158is shown inFIG. 1as a single entity, this is for illustrative purposes only. In some implementations, processor(s)158may include a plurality of processing units. These processing units may be physically located within the same device, or processor(s)158may represent processing functionality of a plurality of devices operating in coordination. The processor(s)158may be configured to execute computer readable instruction components128,130,132,133,134,135,136, and/or other components. The processor(s)158may be configured to execute components128,130,132,133,134,135,136, and/or other components by software; hardware; firmware; some combination of software, hardware, and/or firmware; and/or other mechanisms for configuring processing capabilities on processor(s)158.

It should be appreciated that although components128,130,132,133,134,135, and136are illustrated inFIG. 1as being implemented within a single processing unit, in implementations in which processor(s)158includes multiple processing units, one or more of components128,130,132,133,134,135, and/or136may be implemented remotely from the other components. The description of the functionality provided by the different components128,130,132,133,134,135, and/or136described herein is for illustrative purposes, and is not intended to be limiting, as any of components128,130,132,133,134,135, and/or136may provide more or less functionality than is described. For example, one or more of components128,130,132,133,134,135, and/or136may be eliminated, and some or all of its functionality may be provided by other ones of components128,130,132,133,134,135, and/or136. As another example, processor(s)158may be configured to execute one or more additional components that may perform some or all of the functionality attributed below to one of components128,130,132,133,134,135, and/or136.

The processor(s)162of server(s)106may be configured to provide information processing capabilities in server(s)106. As such, processor(s)162may include one or more of a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and/or other mechanisms for electronically processing information. Although processor(s)162is shown inFIG. 1as a single entity, this is for illustrative purposes only. In some implementations, processor(s)162may include a plurality of processing units. These processing units may be physically located within the same device, or processor(s)162may represent processing functionality of a plurality of devices operating in coordination. The processor(s)162may be configured to execute computer program instruction components140,142,144,146,148, and/or other components. The processor(s)162may be configured to execute components140,142,144,146,148, and/or other components by software; hardware; firmware; some combination of software, hardware, and/or firmware; and/or other mechanisms for configuring processing capabilities on processor(s)162.

It should be appreciated that although components140,142,144,146, and148are illustrated inFIG. 1as being implemented within a single processing unit, in implementations in which processor(s)162includes multiple processing units, one or more of components140,142,144,146, and/or148may be implemented remotely from the other components. The description of the functionality provided by the different components140,142,144,146, and/or148described below is for illustrative purposes, and is not intended to be limiting, as any of components140,142,144,146, and/or148may provide more or less functionality than is described. For example, one or more of components140,142,144,146, and/or148may be eliminated, and some or all of its functionality may be provided by other ones of components140,142,144,146, and/or148. As another example, processor(s)162may be configured to execute one or more additional components that may perform some or all of the functionality attributed below to one of components140,142,144,146, and/or148.

FIG. 2illustrates a method200for facilitating secure authentication using a biometric-enabled transitory password authentication device, in accordance with one or more implementations. The operations of method200presented below are intended to be illustrative. In some implementations, method200may be accomplished with one or more additional operations not described, and/or without one or more of the operations discussed. Additionally, the order in which the operations of method200are illustrated inFIG. 2and described below is not intended to be limiting.

At an operation202, a user code may be obtained from a user. Operation202may be performed at user computing platform104. Operation202may be performed by one or more processors configured to execute a user code component that is the same as or similar to user code component128, in accordance with one or more implementations.

At an operation204, an application may be unlocked. The application may be running on a user computing platform (e.g., user computing platform104) The application may be unlocked responsive to the correct user code being obtained (e.g., at operation202). Operation204may be performed at user computing platform104. Operation204may be performed by one or more processors configured to execute an unlock-app component that is the same as or similar to unlock-app component130, in accordance with one or more implementations.

At an operation206, a user instruction to perform a transaction requiring authentication may be received. Operation206may be performed at user computing platform104. In some implementations, the user instruction may be received via a user interface presented by user computing platform104. Operation206may be performed by one or more processors configured to execute a user-interface component that is the same as or similar to user interface component132, in accordance with one or more implementations.

At an operation208, an authorization initiation prompt may be provided to an authentication device (e.g., authentication device102). The prompt may be configured to cause the authentication device to “wake up,” turn on, become activated, and/or otherwise become ready to receive a biometric sample. The prompt may be provided by user computing platform104to authentication device102. Operation208may be performed by one or more processors configured to execute an authentication initiation component that is the same as or similar to authentication initiation component135, in accordance with one or more implementations.

At an operation210, a biometric sample may be received from a biometric sensor. Operation210may be performed at authentication device102. The biometric sample may be received from biometric sensor108of authentication device102. Operation210may be performed by one or more processors configured to execute a biometric component that is the same as or similar to biometric component116, in accordance with one or more implementations.

At an operation212, the biometric sample may be verified. Operation210may be performed at authentication device102. Operation212may be performed by one or more processors configured to execute a biometric component that is the same as or similar to biometric component116, in accordance with one or more implementations.

At an operation214, an encrypted transitory password may be transmitted to a user computing platform (e.g., user computing platform104). The transitory password may be generated and encrypted at authentication device102. The encrypted transitory password may be transmitted from authentication device102to user computing platform104. Operation214may be performed by one or more processors configured to execute a one-way communications component that is the same as or similar to one-way communications component124, in accordance with one or more implementations.

At an operation216, transaction information may be signed. The transaction information may be associated with the transaction of operation206. Signing the transaction information may be based on the encrypted transitory password. The transaction information may be encrypted based on the encrypted transitory password. The transaction information may include information that describes the transaction and/or information that is necessary to perform the transaction. Operation216may be performed at user computing platform104. Operation216may be performed by one or more processors configured to execute a transaction component that is the same as or similar to transaction component136, in accordance with one or more implementations.

At an operation218, the encrypted transitory password may be transmitted with the signed transaction information to one or more servers (e.g., server(s)106). The encrypted transitory password and the signed transaction information may be transmitted from user computing platform104to server(s)106. Operation218may be performed by one or more processors configured to execute a transaction component that is the same as or similar to transaction component136, in accordance with one or more implementations.

At an operation220, the user may be verified. The user may be verified by determining whether the transitory password received from the user computing platform, once decrypted, is valid. Operation220may be performed at the server(s). Operation220may be performed by one or more processors configured to execute a verification component that is the same as or similar to verification component146, in accordance with one or more implementations.

At an operation224, the transaction may be facilitated. Facilitating the transaction may include effectuating one or more of authentication of third-party applications, authentication of debit card payments, authentication of regulated and secure digital currency (e.g., bitcoin) based payment services, use of credit cards via the NFC transmission protocol, QR-based authentication and payment services, and/or other transactions which require sensitive data. Operation224may be performed at server(s)106. Operation224may be performed by one or more processors configured to execute a server-side transaction component that is the same as or similar to server-side transaction component148, in accordance with one or more implementations.

FIG. 3illustrates a method300for facilitating secure authentication of third-party applications and/or websites using a biometric-enabled transitory password authentication device, in accordance with one or more implementations. The operations of method300presented below are intended to be illustrative. In some implementations, method300may be accomplished with one or more additional operations not described, and/or without one or more of the operations discussed. Additionally, the order in which the operations of method300are illustrated inFIG. 3and described below is not intended to be limiting.

At an operation302, an application and/or website requiring authentication may be accessed. Operation302may be performed at user computing platform104. Operation302may be performed by one or more processors configured to execute a user-interface component that is the same as or similar to user interface component132, in accordance with one or more implementations.

At an operation304, a login requirement may be detected. Operation304may be performed at user computing platform104. Operation304may be performed by one or more processors configured to execute a login detection component that is the same as or similar to login detection component133, in accordance with one or more implementations.

At an operation306, a prompt may be provided for the user to swipe-to-authenticate in order to access the application and/or website. Operation306may be performed at user computing platform104. Operation306may be performed by one or more processors configured to execute a user prompt component that is the same as or similar to user prompt component134, in accordance with one or more implementations.

At an operation308, a secure authentication may be performed using a biometric enabled transitory password authentication device. In some implementations, operation308may include one or more operations of method200described in connection withFIG. 2. Operation308may be performed by coordination between authentication device102, user computing platform104, and server(s)106.

At an operation310, an authentication verification may be transmitted to the use computing platform (e.g., user computing platform104). The authentication verification may be transmitted from server(s)106to user computing platform104. Operation310may be performed by one or more processors configured to execute a server-side transaction component that is the same as or similar to server-side transaction component148, in accordance with one or more implementations.

At an operation312, access to the application and/or website may be provided. Operation312may be performed at user computing platform104. Operation312may be performed by one or more processors configured to execute a user-interface component that is the same as or similar to user interface component132, in accordance with one or more implementations.