US 12,245,035 B2
User authentication at access control server using mobile device
Christian Aabye, Redwood City, CA (US); Alexandre Pierre, San Mateo, CA (US); and Pawel Chrobok, Alameda, CA (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Appl. No. 17/800,198
Filed by Visa International Service Association, San Francisco, CA (US)
PCT Filed Mar. 5, 2021, PCT No. PCT/US2021/021044
§ 371(c)(1), (2) Date Aug. 16, 2022,
PCT Pub. No. WO2021/178773, PCT Pub. Date Sep. 10, 2021.
Claims priority of provisional application 62/985,449, filed on Mar. 5, 2020.
Prior Publication US 2023/0062507 A1, Mar. 2, 2023
Int. Cl. H04W 12/08 (2021.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01); H04W 12/06 (2021.01)
CPC H04W 12/08 (2013.01) [H04L 9/3271 (2013.01); H04L 63/0838 (2013.01); H04W 12/06 (2013.01); H04W 12/068 (2021.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by an access device, a credential or a token from a portable device associated with a user in an interaction;
responsive to receiving the credential or the token from the portable device, transmitting, by the access device, a first authentication request message comprising the credential or the token to an access control server via a directory server, wherein the access control server transmits a one-time password to a user device associated with the user;
receiving, by the access device, the one-time password from the user;
transmitting, by the access device, a second authentication request message comprising the credential or the token, and the one-time password to the directory server, which then transmits the second authentication request message to the access control server via the directory server, wherein the access control server generates an authentication response message comprising an authentication indicator after validating the one-time password;
receiving, by the access device from the access control server, the authentication response message comprising the authentication indicator from the access control server via the directory server; and
transmitting, by the access device, an authorization request message comprising the authentication indicator, and the credential or the token to a processing network computer.