Voice-capable system and method for authentication using prior entity user interaction

• US 20070195726A1
• Filed: 09/30/2005
• Published: 08/23/2007
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Original Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Inventors: Jung, Edward, Malamud, Mark, Lord, Robert, Levien, Royce, Rinaldo, John
• Granted Patent: US 8,443,197 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A system and method for use with a voice-capable system, includes but is not limited to a method including accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system, obtaining one or more user interactions with the one or more entities and generating an authentication session using the one or more user interactions with the one or more entities.

Claims

1. A method for use with a voice-capable system, the method comprising:

accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system;

obtaining one or more user interactions with the one or more entities; and

generating an authentication session using the one or more user interactions with the one or more entities.

2. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

regularly accessing the one or more entities computationally networked to the voice-capable system.

3. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

accessing the one or more entities computationally networked to the voice-capable system upon detection of a user authentication request.

4. The method of claim 1 wherein the obtaining one or more user interactions with the one or more entities includes:

substantially independent of user interaction, receiving data from the one or more entities computationally networked to the voice-capable system via a login process.

5. The method of claim 1 wherein the obtaining one or more user interactions with the one or more entities includes:

obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time.

6. The method of claim 5 wherein the obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

logging that the voice-capable system lacks secure access for future reference to enable the user to provide express permission for the voice-capable system to obtain data concerning the user if the voice-capable system lacks secure access to the one or more internet sites.

7. The method of claim 5 wherein the obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

determining whether a relationship exists between the voice-capable system and an entity known to have logged the one or more user interactions; and

if no relationship exists between the voice-capable system and the entity known to have logged the one or more user interactions, performing an authentication to enable receiving the one or more user interactions.

8. The method of claim 5 wherein the obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

using a predetermined security access to login to the one or more internet sites.

9. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

determining the one or more entities computationally networked to the voice-capable system.

10. The method of claim 9 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving an indication from the one or more entities previously identified as having had interactions with the user regarding an authentication status with the one or more entities computationally networked to the voice-capable system.

11. The method of claim 9 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving login data from a database coupled to the voice-capable system, the database storing the login data for the one or more entities computationally networked to the voice-capable system; and

attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system.

12. The method of claim 11 wherein the attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system includes:

using the login data as an authentication token for one or more secure transactions with one or more of the one or more entities.

13. The method of claim 9 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

during an authenticated session with the user, determining the one or more entities visited by the user via one or more of a system scan and/or an interrogatory with the user and/or an entity representing the user, the one or more entities including the one or more internet sites; and

storing the system scan in a database to enable generating one or more authentication questions for a subsequent authenticated session.

14. The method of claim 9 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving an indication identifying the one or more entities computationally networked from the user.

15. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating questions based on one or more of past purchases by the user.

16. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating questions based on one or more habits of the user.

17. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating questions based on one or more past user transactions over an internet connection.

18. The method of claim 17 wherein the generating questions based on one or more past user transactions over an internet connection includes:

generating questions based on the one or more past transactions with a financial internet site.

19. The method of claim 17 wherein the generating questions based on one or more past user transactions over an internet connection includes:

generating questions based on the one or more past user transactions with a search engine type internet site.

20. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating one or more multiple choice type questions from which the user can determine an answer from a set of two or more possible answers.

21. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating one or more single-answer questions for which answers having defined levels of precision are acceptable.

22. The method of claim 1 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

generating one or more questions based on the one or more user interactions with the one or more entities over a number of days, weeks, or months.

23. A computer program product comprising:

a signal bearing medium bearing;

one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system;

one or more instructions for obtaining one or more user interactions with the one or more entities; and

one or more instructions for generating an authentication session using the one or more user interactions with the one or more entities.

24. The computer program product of claim 23 wherein the signal bearing medium comprises:

a recordable medium.

25. The computer program product of claim 23 wherein the signal bearing medium comprises:

a transmission medium.

26. The computer program product of claim 23 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for regularly accessing the one or more entities computationally networked to the voice-capable system.

27. The computer program product of claim 23 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for accessing the one or more entities computationally networked to the voice-capable system upon detection of a user authentication request.

28. The computer program product of claim 23 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for, substantially independent of user interaction, receiving data from the one or more entities computationally networked to the voice-capable system via a login process.

29. The computer program product of claim 23 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time.

30. The computer program product of claim 29 wherein the one or more instructions for obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

one or more instructions for logging that the voice-capable system lacks secure access for future reference to enable the user to provide express permission for the voice-capable system to obtain data concerning the user if the voice-capable system lacks secure access to the one or more internet sites.

31. The computer program product of claim 29 wherein the one or more instructions for the obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

one or more instructions for determining whether a relationship exists between the voice-capable system and an entity known to have logged the one or more user interactions; and

one or more instructions for, if no relationship exists between the voice-capable system and the entity known to have logged the one or more user interactions, performing an authentication to enable receiving the one or more user interactions.

32. The computer program product of claim 29 wherein the one or more instructions for the obtaining the one or more user interactions from one or more internet sites known to have been visited by the user within a predetermined period of time includes:

one or more instructions for using a predetermined security access to login to the one or more internet sites.

33. The computer program product of claim 23 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for determining the one or more entities computationally networked to the voice-capable system.

34. The computer program product of claim 33 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving an indication from the one or more entities previously identified as having had interactions with the user regarding an authentication status with the one or more entities computationally networked to the voice-capable system.

35. The computer program product of claim 33 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving login data from a database coupled to the voice-capable system, the database storing the login data for the one or more entities computationally networked to the voice-capable system; and

one or more instructions for attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system.

36. The computer program product of claim 35 wherein the one or more instructions for attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system includes:

one or more instructions for using the login data as an authentication token for one or more secure transactions with one or more of the one or more entities.

37. The computer program product of claim 33 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for during an authenticated session with the user, determining the one or more entities visited by the user via one or more of a system scan and/or an interrogatory with the user and/or an entity representing the user, the one or more entities including the one or more internet sites; and

one or more instructions for storing the system scan in a database to enable generating one or more authentication questions for a subsequent authenticated session.

38. The computer program product of claim 33 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving an indication identifying the one or more entities computationally networked from the user.

39. The computer program product of claim 23 wherein the one or more instructions for generating an authentication session using the one or more user interactions with the one or more entities includes:

one or more instructions for generating questions based on one or more of past purchases by the user.

40. The computer program product of claim 23 wherein the one or more instructions for generating an authentication session using the one or more user interactions with the one or more entities further comprises:

one or more instructions for generating questions based on one or more habits of the user.

41. The computer program product of claim 23 wherein the one or more instructions for generating an authentication session using the one or more user interactions with the one or more entities further comprises:

one or more instructions for generating questions based on one or more past user transactions over an internet connection.

42. The computer program product of claim 41 wherein the one or more instructions for said generating questions based on one or more past user transactions over an internet connection further comprises:

one or more instructions for generating questions based on the one or more past transactions with a financial internet site.

43. The computer program product of claim 41 wherein the one or more instructions for said generating questions based on one or more past user transactions over an internet connection further comprises:

one or more instructions for generating questions based on the one or more past user transactions with a search engine type internet site.

44. The computer program product of claim 23 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

one or more instructions for generating one or more multiple choice type questions from which the user can determine an answer from a set of two or more possible answers.

45. The computer program product of claim 23 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

one or more instructions for generating one or more single-answer questions for which answers having defined levels of precision are acceptable.

46. The computer program product of claim 23 wherein the generating an authentication session using the one or more user interactions with the one or more entities includes:

one or more instructions for generating one or more questions based on the one or more user interactions with the one or more entities over a number of days, weeks, or months.

47. A voice-capable system comprising:

a processor;

audio input and/or output circuitry coupled to the processor;

a memory coupled to the processor; and

a security module coupled to the processor, the security module configured to implement a secure protocol, the secure protocol configured to implement an automated system with one or more questions related to security/authentication, the security module configured to include;

an access module for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system;

a logging module for obtaining one or more user interactions with the one or more entities; and

an authentication generation module for generating an authentication session using the one or more user interactions with the one or more entities.

48. The voice-capable system of claim 47 wherein the security module is coupled to the processor, located within the processor, and/or located in the memory.

49. The voice-capable system of claim 47 wherein the memory is one or more of a random access memory, a read only memory, an optical memory, or a subscriber identity module memory.

50. The voice-capable system of claim 47 wherein the audio input and/or output circuitry includes one or more of a microphone, a speaker, a transducer, and/or audio input and/or output circuitry.

51. The voice-capable system of claim 47 further comprising a housing coupled to the processor, the housing encasing the memory, the processor, and/or the audio input and/or output circuitry.