Method for authenticating a user access request

• US 20060112276A1
• Filed: 12/29/2005
• Published: 05/25/2006
• Est. Priority Date: 02/06/1996
• Status: Active Grant

• Current Assignee: Christopher D. Coley, Ralph E. Wesinger Jr
• Original Assignee: Christopher D. Coley, Ralph E. Wesinger Jr
• Inventors: Coley, Christopher D., Wesinger, Ralph E. Jr.
• Granted Patent: US 7,380,273 B2
• Time in Patent Office: Days
• US Class Current: 713/183
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A firewall for authenticating a user access request is disclosed. The firewall device may include a proxy process for processing incoming connection requests. The proxy is configured to receive an access request from a user over a first communication medium and prompt the user for a username over the first communication medium. The firewall may then send a password to the user over a communication medium other than said first communication medium responsive to receiving a valid username from the user. The firewall may then verify the access request responsive to receiving the password from the user through the first communication medium. The firewall may send passwords to a mobile device for verification.

Claims

1. A method for authenticating a user access request comprising:

receiving an access request from a user over a first communication medium;

prompting the user a username over the first communication medium;

sending a password to the user over a communication medium other than said first communication medium responsive to receiving at least a valid user name from the user; and

verifying the access request responsive to receiving said password from the user through said first communication medium.

2. The method of claim 1, wherein said password is sent to a mobile device.

3. The method of claim 1, wherein said password is generated by a firewall system.

4. The method of claim 3, wherein said password is generated by proxy means operable in said firewall means.

5. An apparatus for authenticating a user access request comprising:

means for receiving an access request from a user over a first communication medium;

means for prompting the user a username over the first communication medium;

means for sending a password to the user over a communication medium other than said first communication medium responsive to receiving at least a valid user name from the user; and

means for verifying the access request responsive to receiving said password from the user through said first communication medium.

6. The apparatus of claim 5, wherein said password is sent to a mobile device.

7. The apparatus of claim 5, wherein said password is generated by a firewall system.

8. The apparatus of claim 7, wherein said password is generated by proxy means operable in said firewall means.

9. A firewall for authenticating a user access request comprising:

a firewall device including at least one proxy process for processing incoming connection requests;

the at least one proxy configured to;

receive an access request from a user over a first communication medium;

prompt the user for a username over the first communication medium;

send a password to the user over a communication medium other than said first communication medium responsive to receiving a valid username from the user; and

verify the access request responsive to receiving said password from the user through said first communication medium.

10. The firewall of claim 9, wherein said password is sent to a mobile device.