Paypal, Inc.

Ebay, Incorporated

Synaptics Corporation

Sebastien Ludovic Jean Taveau

Upendra S Mardikar

Hadi Nahari

Frank Schwab

Larry E Hattery

Marcia Tsuchiya

Methods and systems allow a user to log in to a device so that a number of apps become accessible on the device without the user repeatedly logging in to each different app as the user launches multiple apps. A mechanism of providing a master token with a quality score and providing sub-tokens for each app that can use the sub-token and the score quality to evaluate the level of security provided by the initial login allows each app to skip its own login process and provides a level of enhanced efficiency and convenience for the user. A method includes authenticating a user; creating a master token on the user device; creating a sub-token of the master token for an app launched on the device; the app skipping the login process of the app in response to the sub-token so that the app proceeds directly to validating a transaction.

Applications login using a mechanism relating sub-tokens to the quality of a master token

Various embodiments include a first detection being made that a first program residing on a device is requesting authentication. The first program resides in a first portion of the device. An authentication step can be performed by referencing a unique identifier accessible via a request sent by the first program to a second program residing on the device, where the second program resides in a second portion of the mobile device. The second portion has a greater level of security than the first portion (e.g. physical separation may exist between the first and second portions). Accordingly, integrity of the first program can be verified (e.g. an authentic, authorized version of a program is making a transaction request rather than an unauthorized version).

System and method for transaction security enhancement

An initial communication pathway is established between a first execution environment of a mobile device and a second execution environment of the mobile device. The first and second execution environments are executed in parallel with each other. The second execution environment has a higher level of security than the first execution environment. A request is received from a first entity to authenticate itself. The first entity resides in the first execution environment of the mobile device. The first entity is authenticated in response to the request. The authentication is performed by a second entity that resides in the second execution environment of the mobile device. The receiving of the request and the authenticating are performed using a direct communication link between the first execution environment and the second execution environment while bypassing the initial communication pathway.

A detection is made that a first entity residing on a mobile device is requesting authentication. The first entity resides in a first portion of the mobile device. A determination is made that the mobile device is unable to establish network connections with a remote authentication server that is configured to authenticate the first entity. A local authentication process is performed in response to the determination that the mobile device is unable to establish network connections with the remote authentication server. Without accessing the remote authentication server, the local authentication process is performed by a second entity that resides in a second portion of the mobile device. The second portion has a greater level of security than the first portion.

An authentication risk management system and method are disclose which may comprise a biometric identification unit configured to sense biometric data from a user and produce an image of the sensed biometric data with a stored template associated with the user; and a biometric identification unit natural identification evaluation engine configured to provide a natural identification authentication score. The system and method may further comprise a credentials quality assessment engine ('CQAE') configured to receive the natural identification authentication score and to provide a CQAE authentication score based one of the natural ID score and a combination of the natural ID score and a received computed authentication score. The CQAE may comprise at least a part of a user authentication profile engine.

Credential quality assessment engine systems and methods

The present disclosure involves a system that includes a computer memory storage component configured to store computer programming instructions and a computer processor component operatively coupled to the computer memory storage component. The computer processor component is configured to run a secure operating system and a non-secure operating system in parallel. The secure and non-secure operating systems are isolated from each other. The computer processor component is configured to execute code to perform the following operations: receiving an authentication request from an application that is run by the non-secure operating system, wherein the authentication request contains credentials of the application; communicating with a secure applet that is run by the secure operating system, and wherein the communicating includes transferring the credentials of the application to the secure applet; and authenticating and vetting the application based on the credentials of the application.

A system and method may comprise providing a database comprising a user list and a user device list, the user list comprising a list of user biometric identifiers, each extracted from and unique to a respective template of a user biometric of a verified user, and the user device list comprising a list of user biometric identifiers each extracted from and unique to a respective template of a user biometric of a verified user device associated with the verified user; and determining one of (1) whether a user biometric identifier of a known user biometric received from an unverified user device matches a user biometric identifier on the user device list and (2) whether a user biometric identifier extracted from and unique to a new user biometric template received from a verified user device matches a user biometric identifier in the stored user list.

Growing community of inventors

Redwood City, CA, United States of America

Sebastien Ludovic Jean Taveau