US 11,676,148 B2
Methods and systems for leveraging transactions to dynamically authenticate a user
Debashis Ghosh, Charlotte, NC (US); and Randy Shuken, Westport, CT (US)
Assigned to MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed by MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed on Jun. 22, 2021, as Appl. No. 17/354,833.
Application 17/354,833 is a continuation of application No. 16/518,737, filed on Jul. 22, 2019, granted, now 11,068,891.
Application 16/518,737 is a continuation of application No. 15/676,739, filed on Aug. 14, 2017, granted, now 10,373,164, issued on Aug. 6, 2019.
Application 15/676,739 is a continuation of application No. 15/243,349, filed on Aug. 22, 2016, granted, now 9,734,500, issued on Aug. 15, 2017.
Application 15/243,349 is a continuation of application No. 14/100,789, filed on Dec. 9, 2013, granted, now 9,424,410, issued on Aug. 23, 2016.
Prior Publication US 2021/0319447 A1, Oct. 14, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/00 (2006.01); G06Q 20/40 (2012.01); G06F 21/31 (2013.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC G06Q 20/4014 (2013.01) [G06F 21/31 (2013.01); G06F 21/316 (2013.01); H04L 9/3271 (2013.01); H04L 63/0876 (2013.01); G06F 2221/2149 (2013.01); H04L 9/3213 (2013.01); H04L 9/3226 (2013.01); H04L 9/3273 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method for authenticating a request for access to a host computing device, the host computing device in communication with an authenticating computing device, said method comprising:
receiving, at the host computing device, the request by a candidate user for access to data stored on the host computing device;
sending, by the host computing device to the authenticating computing device, an authentication request including at least one of a media access control (MAC) address and an Internet protocol (IP) address of a user device associated with the candidate user, wherein the authenticating computing device has access to a database storing transaction data comprising a plurality of records each corresponding to one of a plurality of previously completed payment transactions;
receiving, at the host computing device from the authenticating computing device, a challenge question and a correct answer to the challenge question, wherein the challenge question and the correct answer correspond to at least one of the previously completed payment transactions associated with the at least one of the MAC address and the IP address, and wherein the transaction data is not exposed to the host computing device;
causing, by the host computing device, the challenge question and a plurality of answers to be displayed to the candidate user, the plurality of answers including the correct answer and at least one incorrect answer;
receiving, at the host computing device from the candidate user, a selected answer from among the plurality of answers; and
determining, by the host computing device, whether to grant the requested access based on whether the selected answer matches the correct answer.