The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 06, 2023

Filed:

May. 22, 2020
Applicant:

Capital One Services, Llc, McLean, VA (US);

Inventors:

Dinesh Sundaram, Plano, TX (US);

Jacob Creech, McKinney, TX (US);

Assignee:

Capital One Services, LLC, McLean, VA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 9/54 (2006.01); G06F 21/60 (2013.01); G06F 9/445 (2018.01); G06F 16/25 (2019.01); G06F 21/62 (2013.01); H04L 9/08 (2006.01); G06Q 10/10 (2023.01); G06Q 30/0201 (2023.01); G06F 16/955 (2019.01); G06N 20/00 (2019.01); G06N 3/02 (2006.01); G06Q 20/40 (2012.01); G06Q 30/018 (2023.01); G06Q 30/0601 (2023.01); G06F 40/103 (2020.01); G06F 40/174 (2020.01); G06F 40/18 (2020.01); G06Q 40/02 (2023.01); G06F 21/53 (2013.01); G06N 5/025 (2023.01); G06Q 20/38 (2012.01); H04L 67/01 (2022.01); G06F 18/24 (2023.01); G06Q 40/03 (2023.01); G06F 8/65 (2018.01); G06F 8/71 (2018.01); G06K 7/14 (2006.01); G06Q 50/26 (2012.01);
U.S. Cl.
CPC ...
G06Q 10/10 (2013.01); G06F 9/44505 (2013.01); G06F 9/54 (2013.01); G06F 9/547 (2013.01); G06F 16/258 (2019.01); G06F 16/9558 (2019.01); G06F 16/9562 (2019.01); G06F 18/24 (2023.01); G06F 21/53 (2013.01); G06F 21/602 (2013.01); G06F 21/604 (2013.01); G06F 21/6227 (2013.01); G06F 21/6245 (2013.01); G06F 40/103 (2020.01); G06F 40/174 (2020.01); G06F 40/18 (2020.01); G06N 3/02 (2013.01); G06N 5/025 (2013.01); G06N 20/00 (2019.01); G06Q 20/382 (2013.01); G06Q 20/4014 (2013.01); G06Q 30/0185 (2013.01); G06Q 30/0206 (2013.01); G06Q 30/0601 (2013.01); G06Q 30/0613 (2013.01); G06Q 30/0619 (2013.01); G06Q 30/0637 (2013.01); G06Q 30/0643 (2013.01); G06Q 40/02 (2013.01); G06Q 40/03 (2023.01); H04L 9/0825 (2013.01); H04L 63/0435 (2013.01); H04L 63/08 (2013.01); H04L 63/0815 (2013.01); H04L 63/102 (2013.01); H04L 63/123 (2013.01); H04L 63/166 (2013.01); H04L 63/168 (2013.01); H04L 67/01 (2022.05); G06F 8/65 (2013.01); G06F 8/71 (2013.01); G06F 2221/2107 (2013.01); G06K 7/1417 (2013.01); G06Q 50/265 (2013.01); G06Q 2220/00 (2013.01); H04L 9/0822 (2013.01);
Abstract

Described herein is a system, method, and non-transitory computer readable medium related to a service provider using a third party identity provider to authenticate a user with improved security. An authentication token is received from the identity provider, and can be verified against internal configuration information. The internal configuration information includes data that is not included in the authentication token, and therefore, is not vulnerable to some security attacks, such as a man-in-the-middle attack. After the authentication token is verified, the internal configuration information and authentication token may be used to create a custom identifier, referred to as an identity ID. The identity ID may be used by the service provider to verify user access to resources.


Find Patent Forward Citations

Loading…