Zhitao Steve Xu

US Patent:

20180309752, Oct 25, 2018

Filed:

Apr 20, 2017

Appl. No.:

15/492968

Inventors:

- Roseland NJ, US
Zhitao Xu - Guttenberg NJ, US
Vincent Civetta - Randolph NJ, US
Deepak Kaushal - Mendham NJ, US
Nishant Kaushik - Jersey City NJ, US

International Classification:

H04L 29/06
H04W 12/06

Abstract:

A method, a computer system, and a computer program product for authenticating a transaction are provided. An authentication system receives the transaction over a particular channel of a plurality of support channels. A risk score is determined for the transaction based on a number of contextual risk factors. An authentication scheme is determined from a number of authentication schemes for authenticating an identity of the user within an authentication context. The authentication scheme is determined based on the particular channel and the risk score. In response to successfully authenticating the identity of the user within the authentication context, the authentication system determines whether the transaction is a permitted transaction based on an assurance level associated with the authentication context. In response to determining that the transaction is the permitted transaction, the transaction is authenticated.

US Patent:

20180234411, Aug 16, 2018

Filed:

Feb 15, 2017

Appl. No.:

15/433921

Inventors:

- Roseland NJ, US
Justo D. Pastor - Fairfield NJ, US
Vincent Civetta - Randolph NJ, US
Deepak Kaushal - Mendham NJ, US
Francisco Villavicencio - Tenafly NJ, US
Sanjoli Ahuja - Bridgewater NJ, US
Michael Nepomnyashy - Woodbridge NJ, US
Krishna Chaitanya Pinnamaneni - Parsippany NJ, US
Nishant Kaushik - Jersey City NJ, US
Zhitao Steve Xu - Guttenberg NJ, US
Neha Pahwa - White Plains NY, US

International Classification:

H04L 29/06
G06F 21/36

Abstract:

A method, computer system and computer program product for authenticating a transaction is provided. A service provider receives a transaction between a user and a website displayed on a first device. The service provider identifies a first geolocation of the first device. The service provider generates a code for display on the first device. The service provider receives credential information to identify the user and the code from a second device. The service provider identifies a second geolocation of the second device, and determines a level of risk for the transaction based at in part on the first geolocation and the second geolocation. In response to the level of risk being an acceptable level of risk, the service provider authenticates the user. The service provider generates information to enable the user on the first device to perform the transaction with the website, and sends the information to the website.