System and method for authentication with out-of-band user interaction

Abstract

Systems and methods for authenticating a party to a secure transaction may include receiving, from a first computing device on behalf of a first party at a second computing device of a second party, information associated with a secure transaction between the parties, receiving, from the first device at the second device, video or audio evidence of actions taken by the first party, capturing, by the second computing device during presentation of the video or audio evidence, acknowledgement of actions taken by the first party as observed or heard by the second party in the evidence, determining, dependent on the acknowledgement, whether the actions observed or heard by the second party match expected actions of the first party in accordance with an out-of-band user interaction protocol, and determining whether to accept the information associated with the secure transaction dependent on whether the observed or heard actions match the expected actions.

1 - 16 . (canceled) 
     
     
         17 . A system, comprising:
 a processor; and   a memory storing instructions executable by a processor for:
 receiving, from a first computing device on behalf of a first party, first information associated with a secure transaction between the first party and a second party; 
 transmitting the first information to a second computing device of the second party; 
 receiving, from the first computing device, first video or audio evidence of one or more actions taken by the first party; 
 transmitting the first video or audio evidence to the second computing device; 
 receiving, from the second computing device, an indication of whether or not actions observed or heard by the second party in the first video or audio evidence match actions expected to have been taken by the first party in accordance with an out-of-band user interaction protocol; and 
 transmitting the indication of whether or not the actions observed or heard by the second party in the first video or audio evidence match the actions expected to have been taken by the first party in accordance with the out-of-band user interaction protocol to the first computing device. 
   
     
     
         18 . The system of  claim 17 , wherein the first video or audio evidence received from the first device comprises a video stream transmitted during performance of the one or more actions by the first party, a video memo recorded during performance of the one or more actions by the first party, an audio stream transmitted to the second device during performance of the one or more actions by the first party, or an audio memo recorded during performance of the one or more actions by the first party. 
     
     
         19 . The system of  claim 17 , wherein the instructions are further executable by the processor for:
 receiving, from the first computing device, a sequence of tokens generated in accordance with the out-of-band user interaction protocol;   receiving, from the second computing device, an acknowledgement of actions taken by the first party as observed or heard by the second party in the first video or audio evidence;   creating a transcript of the out-of-band user interaction protocol performed by the first party and the second party, the transcript including:
 the sequence of tokens received from the first computing device; 
 the acknowledgment received from the second computing device; and 
 the first video or audio evidence; and 
   storing the transcript in the memory.   
     
     
         20 . The system of  claim 17 , wherein the instructions are further executable by the processor for:
 receiving, from the second computing device, second video or audio evidence of one or more actions taken by the second party in accordance with the out-of-band user interaction protocol;   providing, to the first computing device, the second video or audio evidence of the one or more actions taken by the second party;   receiving, from the first computing device, an indication of whether or not actions observed or heard by the first party in the second video or audio evidence match actions expected to have been taken by the second party in accordance with the out-of-band user interaction protocol; and   transmitting the indication of whether or not the actions observed or heard by the first party in the second video or audio evidence match the actions expected to have been taken by the second party in accordance with the out-of-band user interaction protocol to the second computing device.