CPC G06Q 20/388 (2013.01) [G06Q 20/3829 (2013.01); G06Q 20/401 (2013.01); G06Q 2220/00 (2013.01)] | 15 Claims |
1. A computer-implemented method of authenticating a user device via a device credential scoped to a common domain shared among a plurality of payment networks, each payment network having a respective domain name different than the common domain and each payment network being assigned with a respective sub-domain of the common domain, the method comprising:
receiving, by a server of a payment network of the plurality of payment networks, a first request redirected from a sub-domain assigned to the payment network to a domain name associated with the payment network;
responsive to the first request, transmitting, by the server to the user device, an authentication request comprising a challenge, a user identifier that identifies a user, and the common domain to which the device credential is scoped;
receiving, by the server from the user device, a response;
accessing, by the server, the device credential, the device credential having been stored by the payment network, the payment network being assigned with the sub-domain of the common domain to share the scope with other ones of the plurality of payment networks;
validating, by the server, the response based on the device credential; and
causing, by the server, the user identifier and the device credential to be federated to the other ones of the plurality of payment networks based on the validating.
|