Dual-path pre-approval authentication method

• US 20060005024A1
• Filed: 11/02/2004
• Published: 01/05/2006
• Est. Priority Date: 06/16/2004
• Status: Abandoned Application

• Current Assignee: Pccw-Hkt Datacom Services Limited
• Original Assignee: Pccw-Hkt Datacom Services Limited
• Inventors: Law, Eric Chun Wah
• Application Number:
  US10/978,583
• Publication Number:
  US 20060005024A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An authentication method for use between a first party and a second party for performing a transaction, includes establishing a second communication path and sending by the first party of an approval code via the second communication path receiving by the second party of the approval code; establishing a first communication path by the first party to the second party for performing authentication and then the transaction; and authenticating the first party by the second party via the first communication path using the received approval code before performing the transaction.

Claims

1. An authentication method for use between a first party and a second party for performing a transaction, comprising:

(a) establishing a second communication path and sending by the first party of an approval code via the second communication path;

(b) receiving by the second party of the approval code;

(c) establishing a first communication path by the first party to the second party for performing authentication and, thereafter, the transaction; and

(d) authenticating the first party by the second party via the first communication path using the received approval code before performing the transaction.

2. The authentication method as claimed in claim 1, wherein the approval code includes an identification reference identifying the first party.

3. The authentication method as claimed in claim 2, including, before (a), registering the first party with the second party with registration particulars comprising the identification reference.

4. The authentication method as claimed in claim 3, wherein the registration particulars include first party identifying means, and (d) includes requiring, by the second party, the first party to implement the first party identifying means for authentication of the first party.

5. The authentication method as claimed in claim 4, wherein the first party identifying means comprises a specific PIN, and (d) comprises requiring, by the second party, the first party to provide the PIN for authentication.

6. The authentication method as claimed in claim 3, wherein the registration particulars include second party identifying means, and (d) includes requiring, by the first party, the second party to implement the second party identifying means for authentication of the second party.

7. The authentication method as claimed in claim 6, wherein the second party identifying means comprises a random element in the approval code in (a), and (d) comprises requiring, by the first party, the second party to provide the random element for authentication.

8. The authentication method as claimed in claim 1, wherein (a) includes composing by the first party a random element in the approval code for sending, and (d) includes requiring, by the first party, the second party to provide the random element for authentication of the second party.

9. The authentication method as claimed in claim 1, wherein (b) includes subsequently maintaining the approval code valid for a predetermined period of time, during which (c) and (d) are performed.

10. The authentication method as claimed in claim 3, wherein registering the first party includes specifying, by the first party, a threshold for monetary value to be involved in the transaction for skipping (a) to (d) if the transaction value is below the threshold.

11. The authentication method as claimed in claim 1, wherein the second party includes a storage system for receiving the approval code in (b), and (d) includes retrieving by the second party of the received approval code from the storage system for use in authenticating the first party.

12. The authentication method as claimed in claim 11, including, before (a), setting up the storage system and designating the storage system by the second party for receiving the approval code in (a).

13. The authentication method as claimed in claim 2 wherein (a) includes composing by the first party a random element in the approval code for sending, and (d) includes requiring, by the first party, the second party to provide the random element for authentication of the second party.

14. The authentication method as claimed in claim 4, wherein registering the first party includes specifying, by the first party, a threshold for monetary value to be involved in the transaction for skipping (a) to (d) if the transaction value is below the threshold.

15. The authentication method as claimed in claim 5, wherein registering the first party includes specifying, by the first party, a threshold for monetary value to be involved in the transaction for skipping (a) to (d) if the transaction value is below the threshold.

16. The authentication method as claimed in claim 6, wherein registering the first party includes specifying, by the first party, a threshold for monetary value to be involved in the transaction for skipping (a) to (d) if the transaction value is below the threshold.

17. The authentication method as claimed in claim 7, wherein registering the first party includes specifying, by the first party, a threshold for monetary value to be involved in the transaction for skipping (a) to (d) if the transaction value is below the threshold.