Unified login biometric authentication support

Abstract

As disclosed herein, a token and/or a public/private key can be stored in a secure enclave that can be later used when a user logs into the payment provider's website. At that time, the user can simply swipe a fingerprint to complete a transaction. Thus, biometric authentication may be applied to complete the transaction. Moreover, the transaction can be completed across different browsers. In an implementation, a long-term token is not utilized. Instead, when a user opts into the disclosed implementation, a private and public key pair is generated on the client side device. The private key may be stored in the secure enclave and the public key may be sent to the payment provider. Thus, there may be no token involved to complete the transaction.

What is claimed is: 
     
         1 . A system, comprising:
 at least one non-transitory memory storing instructions and user account information;   one or more hardware processors that are coupled to the at least one non-transitory memory and that are configured to execute the instructions to cause the system to perform operations comprising:
 receiving a request from a device of a user to complete a transaction; 
 determining that the user has previously agreed to complete transactions utilizing only a fingerprint based on the stored user account information; 
 sending an instruction that directs the device of the user scan a fingerprint of the user; 
 receiving from the device of the user a token that is stored in a secure enclave on the device of the user, wherein the token is only provided if the fingerprint of the user provided in response to the instruction matches a previously registered fingerprint of the user associated with the device; 
 validating the token received from the user device; and 
 responsive to the validation of the token, completing the transaction. 
   
     
     
         2 . The system of  claim 1 , the system further configured to perform operations comprising:
 receiving a request from the device of the user to complete an initial transaction;   receiving an indication from the user to complete subsequent transactions using only a fingerprint;   sending an instruction to the device of the user that directs the user to provide a fingerprint to the device;   receiving from the device of the user an indication that the fingerprint provided by the user matches the previously registered fingerprint; and   responsive to the indication that the fingerprint provided by the user matches the previously registered fingerprint, sending the token to the device of the user, wherein the token is stored in the secure enclave of the device of the user.   
     
     
         3 . The system of  claim 2 , the system further configured to perform operations comprising:
 sending to the device of the user a message that is displayed on the device of the user, wherein the message offers the user the option to complete subsequent transaction using only a fingerprint.   
     
     
         4 . The system of  claim 2 , wherein the device of the user is configured to:
 subsequent to receipt of the instruction, obtain the fingerprint of the user with a fingerprint scanner connected to the device of the user;   compare the obtained fingerprint to the previously registered fingerprint; and   store the token in the secure enclave.   
     
     
         5 . The system of  claim 1 , wherein the transaction is initiated on a third party website with a first web browser, and the request for completion of the transaction is initiated on a second web browser. 
     
     
         6 . The system of  claim 1 , wherein the device of the user is selected from the group consisting of a tablet, a laptop, a smartphone, and a desktop computer. 
     
     
         7 . The system of  claim 1 , wherein a transaction is selected from the group consisting of: a payment, adding a bank account, a transfer of funds, and a request for funds. 
     
     
         8 . A computer-implemented method, comprising:
 receiving, by a processor of a payment provider, a request from a device of a user to complete a transaction;   determining that the user has previously agreed to complete transactions utilizing only a fingerprint;   sending an instruction that directs the device of the user scan a fingerprint of the user;   receiving from the device of the user a token that is stored in a secure enclave on the device of the user, wherein the token is only provided if the fingerprint of the user provided in response to the instruction matches a previously registered fingerprint of the user associated with the device;   validating the token received from the user device; and   responsive to the validation of the token, completing the transaction.   
     
     
         9 . The method of  claim 8 , further comprising:
 receiving a request from the device of the user to complete an initial transaction;   receiving an indication from the user to complete subsequent transactions using only a fingerprint;   sending an instruction to the device of the user that directs the user to provide a fingerprint to the device;   receiving from the device of the user an indication that the fingerprint provided by the user matches the previously registered fingerprint; and   responsive to the indication that the fingerprint provided by the user matches the previously registered fingerprint, sending the token to the device of the user, wherein the token is stored in the secure enclave of the device of the user.   
     
     
         10 . The method of  claim 9 , further comprising:
 sending to the device of the user a message that is displayed on the device of the user, wherein the message offers the user the option to complete subsequent transaction using only a fingerprint.   
     
     
         11 . The method of  claim 9 , further comprising:
 subsequent to receipt of the instruction, obtaining the fingerprint of the user with a fingerprint scanner connected to the device of the user;   comparing the obtained fingerprint to the previously registered fingerprint; and   storing the token in the secure enclave.   
     
     
         12 . The method of  claim 8 , wherein the transaction is initiated on a third party website with a first web browser, and the request for completion of the transaction is initiated on a second web browser. 
     
     
         13 . The method of  claim 8 , wherein the device of the user is selected from the group consisting of a tablet, a laptop, a smartphone, and a desktop computer. 
     
     
         14 . The method of  claim 8 , wherein a transaction is selected from the group consisting of: a payment, adding a bank account, a transfer of funds, and a request for funds. 
     
     
         15 . A system, comprising:
 at least one non-transitory memory storing instructions and a public key, wherein the public key and a private key are a part of a key pair and the private key is stored on a device;   one or more hardware processors communicatively coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations comprising:
 receiving the public key from the device, wherein the public key is stored to the at least one non-transitory memory; 
 receiving a request to complete a transaction; 
 generating a nonce; 
 sending, to the device, the nonce and instructions that direct the device to obtain a fingerprint of the user; 
 receiving an encrypted nonce from the device, wherein the nonce is encrypted with the private key stored in the secure enclave that can only be accessed if the obtained fingerprint matches a previously registered fingerprint associated with the device; 
 decrypting the encrypted nonce with the public key stored in the at least one non-transitory memory; 
 comparing the decrypted nonce to the nonce sent to the device; 
 based upon the comparison, completing the transaction if the decrypted nonce matches the nonce sent to the device. 
   
     
     
         16 . The system of  claim 15 , wherein the device configured to encrypt the nonce utilizing the private key. 
     
     
         17 . The system of  claim 15 , wherein the public key and private key are generated by the device. 
     
     
         18 . The system of  claim 15 , wherein the transaction is initiated on a third party website with a first web browser, and the request for completion of the transaction is initiated on a second web browser. 
     
     
         19 . The system of  claim 15 , wherein the device of the user is selected from the group consisting of a tablet, a laptop, a smartphone, and a desktop computer. 
     
     
         20 . The system of  claim 15 , wherein a transaction is selected from the group consisting of: a payment, adding a bank account, a transfer of funds, and a request for funds. 
     
     
         21 . A system, comprising:
 at least one non-transitory memory storing instructions and a public key, wherein the public key and a private key are a part of a key pair and the private key is stored on a device;   one or more hardware processors communicatively coupled to the non-transitory memory and that are configured to execute the instructions to cause the system to perform operations comprising:
 receiving the public key from the device, wherein the public key is stored to the at least one non-transitory memory; 
 subsequently, receiving a login credential from the device from a first user; 
 receiving a request from the device from the first user to complete a transaction 
 generating a nonce; 
 sending, to the device, the nonce; 
 receiving an encrypted nonce from the device, wherein the nonce is encrypted with the private key stored in the secure enclave; 
 decrypting the encrypted nonce with the public key stored in the at least one non-transitory memory; 
 comparing the decrypted nonce to the nonce sent to the device; 
 determining whether the device is trustworthy based upon the comparison of the decrypted nonce to the nonce sent to the device; 
 based upon the determination of whether the device is trustworthy, presenting an additional challenge to the user to complete the transaction; and 
 responsive to a successful response to the additional challenge, completing the transaction.