Secure authentication between multiple parties

摘要

Systems and methods are disclosed herein to allow a party to a multiple-party transaction to perform authentications using identification information received from another party while allowing the party generating the identification information to maintain confidentiality of information. A user may enter an access code to identify the user to a first party that will be generating identification information to a second party in the transaction. The access code may be entered without requiring the entry of an alphanumeric PIN (Personal Identification Number). The first party may convert the access code to a second code for transmission to the second party so that the access code is not revealed to the second party. The second party may use the second code to authenticate the user, to authenticate a payment transaction or other types of communications from the user or the first party. Thus, parties in a multiple-party transaction may perform authentications while maintaining the confidentiality of information.

主权项

1. A payment authentication apparatus comprising:
a processor on a server; and a memory adapted to store a plurality of machine-readable instructions of a payment authentication application for the server wherein the instructions are executed by the processor to:
receive a payment pre-approval request from a pre-approval requester;process the payment pre-approval request to generate a pre-approval key, wherein the pre-approval key uniquely identifies the pre-approval request;transmit the pre-approval key to the pre-approval requester;receive credential information comprising an account name and a password for an account holder from a user device;verify the account holder based on the credential information;request a PIN (Personal Identification Number) from the user device, wherein the PIN is used to authenticate use of the pre-approval key for one or more future payments made from an account of the account holder;receive the pre-approval key and the PIN generated by the user device, wherein the PIN is derived from an access code entered into the user device;associate the PIN with the pre-approval key to pre-approve one or more future payments made from the account of the account holder;receive a payment request including the PIN and the pre-approval key;verify that the PIN is associated with the pre-approval key to authenticate the payment request to approve a payment made from the account of the account holder without requiring the credential information of the account holder from the payment requester; andtransfer a payment from the account of the account holder.