US 12,149,937 B2
Systems and methods for providing extended authentication sessions on point of sale devices
Jasbir Banga, Swedesboro, NJ (US); Ryan S Yoder, Tampa, FL (US); Mizan Miah, Wilmington, DE (US); Muralidhar Somapalli, Tampa, FL (US); Neill Clayton-Smith, Claymont, DE (US); Reetu Bok, Philadelphia, PA (US); Sandeep Reddy Banala, Monroe, NJ (US); Scott R Moser, Safety Harbor, FL (US); Bipin More, Mumbai (IN); and Suresh Madhavan, Edison, NJ (US)
Assigned to JPMORGAN CHASE BANK, N.A., New York, NY (US)
Filed by JPMORGAN CHASE BANK, N.A., New York, NY (US)
Filed on May 19, 2022, as Appl. No. 17/664,190.
Claims priority of application No. 202211018329 (IN), filed on Mar. 29, 2022.
Prior Publication US 2023/0319566 A1, Oct. 5, 2023
Int. Cl. H04W 12/084 (2021.01); H04L 9/40 (2022.01)
CPC H04W 12/084 (2021.01) [H04L 63/0807 (2013.01); H04L 63/083 (2013.01); H04L 63/0876 (2013.01)] 14 Claims
OG exemplary drawing
 
1. A method for providing extended authentication sessions on a mobile electronic device, comprising:
receiving, at an authentication service computer program executed by an authentication service electronic device, a customer identifier for a customer and a unique identifier for a mobile electronic device;
authenticating, by the authentication service computer program, the customer based on the customer identifier and the unique identifier for the mobile electronic device;
setting, by the authentication service computer program, a device cookie that is specific to the mobile electronic device on the mobile electronic device;
providing, by the authentication service computer program, the device cookie and a client secret to an OAuth services backend, wherein the OAuth services backend validates the customer identifier and client secret and generates a first token and a second token, the first token having an expiration that is shorter than that of the second token, the second token including a public key and the unique identifier; and
determining, by a refresh token endpoint server, if the second token has not expired, if the second token is valid by both by the public key and a database record, and if the unique identifier in the second token matches the received unique identifier;
wherein the mobile electronic device is configured to receive, from the OAuth services backend, the first token and the second token and store the first token and the second token.