AUTHENTICATION AND FRAUD PREVENTION ARCHITECTURE

摘要

Embodiments of the invention are directed to authentication and authorization methods. The authentication process can involve a user device interacting with an access device that is within a proximity of the user device to help ensure that the user device is near a location of the access device. The access device can assist with the authentication, either at the access device or via a communications network to an authentication computer. For example, embodiments can provide mechanisms for authentication of a user device at an access device before the user device is authenticated and authorized access to a building.

主权项

1. A method of authentication using an access device that stores an access device identifier, the method comprising:
receiving, at the access device from a user device, a user device identifier and a user device cryptogram of the access device identifier and a user device credential, the user device identifier corresponding to the user device, wherein the user device credential is registered with an authentication computer, and wherein the access device identifier is obtained by the user device at the access device; generating an authentication request message using the user device cryptogram, wherein the authentication request message includes the user device identifier and an access device cryptogram; and transmitting, by the access device for receipt by the authentication computer, the authentication request message for determining an authentication by the authentication computer, wherein the authentication computer verifies the authentication of the user device using the user device identifier, the access device identifier, and the access device cryptogram.