US 12,469,032 B1
Multi-factor authentication based on audio message
Richard Davey, San Antonio, TX (US); and Patrick Sturdivant, San Antonio, TX (US)
Assigned to United Services Automobile Association (USAA), San Antonio, TX (US)
Filed by United Services Automobile Association (USAA), San Antonio, TX (US)
Filed on May 7, 2019, as Appl. No. 16/405,684.
Claims priority of provisional application 62/669,789, filed on May 10, 2018.
Int. Cl. G06Q 20/40 (2012.01); G06F 21/35 (2013.01); G06F 21/40 (2013.01); G06Q 20/10 (2012.01); G06Q 20/32 (2012.01); G06Q 20/38 (2012.01); H04B 11/00 (2006.01)
CPC G06Q 20/4012 (2013.01) [G06F 21/35 (2013.01); G06F 21/40 (2013.01); G06Q 20/1085 (2013.01); G06Q 20/3272 (2013.01); G06Q 20/3821 (2013.01); H04B 11/00 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
receiving, by a first device, an audible message from a portable computing device, wherein the audible message comprises a numeric code randomly generated based at least in part on a seed value stored on the portable first device;
extracting, by the first device, the numeric code from the audible message;
generating first communication data based on the audible message, wherein the first communication data comprises the numeric code or a variation of the numeric code and biometric information associated with a user of the first device;
sending, by the first device, the first communication data to at least one backend server;
analyzing, by the backend server, the first communication data to determine whether the portable computing device is an authorized device, wherein analyzing the first communication data comprises (1) verifying the biometric information, and (2) generating a local code from a local seed on the backend server and comparing the numeric code received in the first communication data and the local code;
identifying, by the backend server and using a location of the portable computing device, one or more additional devices that are located within a geographical distance from the portable computing device;
sending, by the backend server, second communication data to the first device and to the one or more additional devices, the second communication data indicating that the portable computing device is authorized to have an account access session with the first device and the one or more additional devices;
establishing, the account access session between the portable computing device and at least one of the first device or the additional devices; and
sending a confirmation message to the portable device confirming that the portable computing device is authorized to participate in the account access session.