Single-Party, Secured Multi-Channel Authentication

• US 20080086764A1
• Filed: 05/22/2007
• Published: 04/10/2008
• Est. Priority Date: 10/06/2006
• Status: Active Grant

• Current Assignee: FMR LLC
• Original Assignee: FMR LLC
• Inventors: Thornton, William A., Marotto, Anthony M., Kulkarni, Rajandra Luxman, Greenberg, Adam
• Granted Patent: US 8,434,133 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A method for using multiple channels to authenticate a user, wherein a first authentication parameter from a first device associated with a user is received over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is authenticated on the first channel.

Claims

1. A method for using multiple channels to authenticate a user, the method comprising:

receiving a first authentication parameter from a first device associated with a user over a first channel, wherein the user is unauthenticated;

transmitting a token value;

receiving the token value and a second authentication parameter from a second device over a second channel, wherein the second device is associated with the user; and

using the token value to associate the first authentication parameter to the second authentication parameter.

2. The method of claim 1, further comprising:

authenticating the user based on the first authentication parameter and the second authentication parameter.

3. The method of claim 1, further comprising:

notifying the user over the second channel that the authentication is complete.

4. The method of claim 1, further comprising:

allowing the user to continue a user session on the first channel.

5. The method of claim 1 wherein the first channel is a phone line, a wireless connection or an online connection.

6. The method of claim 1 wherein the second channel is a phone line, a wireless connection, or an online connection.

7. The method of claim 1 wherein the first authentication parameter is a user ID, password, hard token, soft token, wireless applet, voiceprint, or any combination thereof.

8. The method of claim 1, wherein the second authentication parameter is a user ID, a password, a hard token, a soft token, a wireless applet, a voiceprint, or any combination thereof.

9. The method of claim 1, wherein the first authentication parameter and the second authentication parameter are channel specific.

10. The method of claim 1, further comprising:

receiving the token value and at least one additional authentication parameter over at least one additional channel.

11. The method of claim 10, wherein the additional authentication parameter is a user ID, a password, a partial password, a portion of the first authentication parameter, a portion of the second authentication parameter, or a combination of the first and the second authentication parameters, a hard token, a soft token, a wireless applet, a voiceprint, or any combination thereof.

12. The method of claim 10, further comprising using the token value to associate the first authentication parameter, the second authentication parameter, and the at least one additional authentication parameter.

13. The method of claim 10, further comprising using the first authentication parameter, the second authentication parameter, and the at least one additional authentication parameter to authenticate the user.

14. The method of claim 10, wherein the at least one additional channel is not the first or second channel.