CPC G06F 21/6245 (2013.01) [G06F 21/45 (2013.01); G06F 21/6254 (2013.01); G06Q 10/02 (2013.01); G06Q 50/14 (2013.01); G06Q 50/265 (2013.01); H04L 63/0407 (2013.01); H04L 63/0853 (2013.01); H04L 63/0876 (2013.01); H04W 4/029 (2018.02); H04W 12/02 (2013.01); H04W 12/63 (2021.01); G06F 2221/2111 (2013.01)] | 12 Claims |
1. A method for authenticating a traveler using a mobile token application, the mobile token application for providing a token identifier representing personal identification data associated with the traveler, while securely maintaining anonymity of the traveler, the method comprising:
retrieving a payload from the a mobile device associated with the traveler at a point-of-travel (“POT”) computing device, the payload comprising a geolocation of the mobile device, the token identifier and a device identifier identifying the mobile device;
transmitting, to a central server, the payload from the mobile device and a geolocation of the POT computing device, to verify a travel reservation associated with a travel reservation file of the traveler, the central server being a single trusted source for the identification of the traveler, the POT computing device in direct communication with the central server;
confirming, by the central server, that the traveler is associated with the travel reservation file by verifying the payload, the verifying of the payload comprising verifying that:
the token identifier retrieved by the POT computing device maps to a token identifier stored in a record associated with a user identifier of the traveler;
the geolocation of the mobile device matches a geolocation of the POT computing device identified by the central server; and
the device identifier is equal to a stored device identifier associated with the user identifier of the traveler; and
confirming that the mobile device transmitting the payload is the mobile device of the traveler by:
transmitting a message from the central server to the mobile device, the message comprising a one-time password (“OTP”);
inputting the OTP, by the traveler, into a display box at the POT; and
confirming, by the central server, the mobile device of the traveler.
|