Method of one time authentication response to a session-specific challenge indicating a random subset of password or PIN character positions

• US 20060136317A1
• Filed: 02/14/2006
• Published: 06/22/2006
• Est. Priority Date: 11/03/2000
• Status: Active Grant

• Current Assignee: Authernative
• Original Assignee: Authernative
• Inventors: Mizrah, Len L.
• Granted Patent: US 7,681,228 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof

Abstract

Financial institution back office computerized transaction-processing system with embedded privacy and security layer (EPSL) enables strong transaction authentication prior to a merchant or vendor contact, based on a user account number, transaction conditions like anticipated transaction time and money, user two-factor authentication with a static transaction PIN and a transaction session-specific random partial password or PIN recognition algorithm. User enters the user name and then, challenged by server with a random session-specific subset of a password or PIN character'"'"'s consecutive position numbers, enters based on cognitive association a one time authentication response. The authentication session is interactive, transaction session-specific, and followed by either a transaction denial or an alphanumeric transaction signature generated by EPSL for this specific transaction. Then, the user submits her request to a transaction counterpart along with the transaction signature. The merchant or vendor requests an authorization session with EPSL.

Claims

1. An interactive method for authentication of a client, comprising:

storing a client identifier (ACCOUNT NUMBER (406);

ACC#{XYZ}—

FIG. 8) for a client and an identification code (ID_PIN—

FIG. 6) for the client in a memory (606), the identification code comprising a set of password or PIN characters with each consecutive character position number in the set associated with a particular character;

supplying to the client via a data communication medium using a process (504) executed by a computer system, a prompt for entry of a client identifier;

accepting in the computer system data from the client via a data communication medium, the data indicating the client identifier (406) for the client, and verifying that the data indicating the client identifier matches the stored client identifier (502);

supplying to the client via a data communication medium using a process (508) executed by the computer system, a session-specific random subset of character position numbers from said identification code for the client, wherein the random subset of character position numbers does not include all of the character position numbers from the identification code;

accepting input data (408, ID_PIN SUBSET—

FIG. 8) in the computer system from the client via a data communication medium, the input data including a random subset of characters from the identification code, wherein the random subset of characters does not include all of the identification code; and

determining (505) in the computer system, whether the input data match characters from the stored identification code in a session-specific random subset of character positions.

2. The method of claim 1, including using a random subset generator (505) in the computer system to generate a random subset of character position numbers in the identification code, wherein the random subset comprises said the session-specific random subset of character position numbers.

3. The method of claim 1, including generating said a session-specific random subset of character position numbers after initiation of an authentication session in which it is used.

4. The method of claim 1, wherein said characters in the identification code (UD_PIN) comprise digits.

5. A transaction server, comprising:

memory (601, 606)) storing a client identifier (ACCOUNT NUMBER (406);

ACC#{XYZ}—

FIG. 8) for a client and an identification code (ID_PIN—

FIG. 6) for the client, the identification code comprising a set of password or PIN characters with each consecutive character position number in the set associated with a particular character;

a computer system coupled to the memory, the computer system including

a module (504) to supply to the client via a data communication medium, a prompt for entry of a client identifier;

a module (406) to accept data indicating the client identifier from the client via a data communication medium;

a module (502) to verify that the data indicating the client identifier matches the stored client identifier for the client;

a module (505) to supply to the client a session-specific random subset of character position numbers from said identification code for the client, wherein the random subset of character position numbers does not include all of the character position numbers from the identification code;

a module (408) to accept input data (ID_PIN SUBSET—

FIG. 8) from the client via a data communication medium, the input data including a random subset of characters from the identification code for the client, wherein the random subset of characters does not include all of the identification code; and

a module (505) to allow processing of a transaction to continue if the input data matches characters from the stored identification code for the client in the session-specific random subset of character positions.

6. The transaction server of claim 5, including a random subset generator (505) in the computer system to generate a random subset of position numbers in the identification code, wherein the random subset comprises said session-specific random subset of character position numbers.

7. The transaction server of claim 5, wherein said session-specific random subset of character position numbers is generated after initiation of an authentication session in which it is used.

8. The transaction server of claim 5, wherein said characters in the identification code (ID_PIN—

FIG. 6) comprise digits.