Patent SG-11201806789R-A (SG)
Title: Methods and systems for browser-based mobile device and user authentication
Inventor: KAMAL ASHFAQ
IPC: G06Q20/40
Filed: 2017-02-14
Abstract: FIGISSUER 1 FINANCIAL INSTITUTION 111A AUTHENTICATOR 1 124 AUTHENTICATOR 2 12¢ ISSUER N FINANCIAL INSTITUTION 111N ISSUER 2 FINANCIAL INSTITUTION 111B PAYMENT NETWORK 122 BROWSER 104 WEB APP V A ! LOCAL RELYING PARTY FUNCTIONALITY 116 OPERATING SYSTEM (OS PLAli'C2.4,PECIFIC CUSTnI1 1 / 70N FIDO CLIENT 122 W O 20 17 / 14286 4 Al (12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property Organization International Bureau (10) International Publication Number (43) International Publication Date WO 2017/142864 Al 24 August 2017 (24.08.2017) WIPO I PCT 11111111111111011101111111111101011111011101011111011111011001111111111111110111111 (51) International Patent Classification: G06Q 20/40 (2012.01) (21) International Application Number: PCT/US2017/017781 (22) International Filing Date: 14 February 2017 (14.02.2017) (25) Filing Language: English (26) Publication Language: English (30) Priority Data: 15/047,129 18 February 2016 (18.02.2016) US (71) Applicant: MASTERCARD INTERNATIONAL IN- CORPORATED [US/US]; 2000 Purchase Street, Pur- chase, NY 10577 (US). (72) Inventor: KAMAL, Ashfaq; 42 Fox Ridge Road, Stam- ford, CT 06903 (US). (74) Agent: DOBBYN, Colm J.; Mastercard International In- corporated, 2000 Purchase Street, Purchase, NY 10577 (US). (81) Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). Published: with international search report (Art. 21(3)) (54) Title: METHODS AND SYSTEMS FOR BROWSER-BASED MOBILE DEVICE AND USER AUTHENTICATION 100 102 s ' 110 (57) : Methods and systems for authenticating both a browser-based user mobile device and the user in association with an online transaction. In an embodiment, the process includes receiving, by a cloud-based authentication service computer, a user au- thentication request from a user mobile device. A mobile transaction application determines that the user and the entity involved in the online transaction are enrolled in a cloud-based authentication service, identifies a user data structure and a user profile, determ - ines that the received user authentication data and user mobile device identification data matches data stored in the user profile, and determines that a requirement of the entity is satisfied. The mobile transaction application then transmits a positive user authentica- tion message to an entity computer.