User Provisioning With Multi-Factor Authentication

• US 20080282331A1
• Filed: 10/08/2004
• Published: 11/13/2008
• Est. Priority Date: 10/08/2004
• Status: Abandoned Application

• Current Assignee: Antlabs Pte Ltd.
• Original Assignee: Antlabs Pte Ltd.
• Inventors: Teo, Wee Tuck
• Application Number:
  US11/664,674
• Publication Number:
  US 20080282331A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 7/0012 Details of application programming interfaces [API] for telephone networks; Arrangements which combine a telephonic communication equipment and a computer, i.e. computer telephony integration [CPI] arrangements
• CPC Class Codes: H04W 12/062 Pre-authentication

Abstract

A method and system for authenticating a user in a network includes a network software client of a computing device requesting network software services from a service gateway. A call between a user phone and an IVR phone login system is initiated in response to the user phone and the computing device being within a coverage area of the service gateway. A location of a user uniquely assigned to the computing device is identified within the coverage area. A first information received in the network software services from the computing device is correlated with a second information received from the IVR phone login system. When the first and second information match, access by the computing device to services of the service gateway is allowed.

Claims

1. A method for authenticating a user in a network, comprising:

requesting from a network software client of a computing device a network software service on a service gateway;

initiating a call between a user phone and an IVR phone login system in response to the user phone and the computing device being within a coverage area of the service gateway;

identifying the user associated with a location within the coverage area of the service gateway as uniquely assigned to the computing device;

completing the collection of a first information received by the network software service from the computing device before asynchronously initiating the collection of a second information received from the IVR phone login system;

correlating the first information and the second information; and

when the first and second information match, allowing access by the computing device to services of the service gateway.

2. The method of claim 1, wherein the network software client is a web browser and the network software service is a web server.

3. The method of claim 2, further comprising entering a room number into the network software service to identify the location uniquely assigned to the computing device.

4. The method of claim 3, wherein initiating a call comprises said IVR phone login system initiating a call to a user phone in response to the room number entered in the network software service.

5. The method of claim 3, wherein the user phone confirms a login request during the call with the IVR phone login system.

6. The method of claim 4, wherein correlating comprises the IVR phone login system comparing the room number received from the network software service with a phone number used to initiate the call by the IVR phone login system to the user phone.

7. The method of claim 1, wherein the identifying the user associated with a location comprises divulging a room number assigned to the computing device.

8. The method of claim 1, wherein the network software service comprises a phone number designating the IVR phone login system.

9. The method of claim 8, wherein the initiating a call comprises the user phone initiating the call to the IVR phone login system according to the phone number.

10. The method of claim 9, wherein the initiating a call further comprises the IVR phone login system sending an access code to the user phone.

11. The method of claim 10, wherein the computing device enters the access code into the network software service.

12. The method of claim 8, wherein the identifying a location comprises the IVR phone login system correlating a callerid from the call originating from the user phone.

13. The method of claim 11, wherein correlating comprises the service gateway comparing the access code received at the network software service with the access code originating at the IVR phone login system.

14. The method of claim 1, wherein the user phone is wired within the location within the coverage area.

15. The method of claim 1, further comprising associating a wireless phone number with the location and wherein the user phone is a wireless phone.

16. The method of claim 1, wherein the computing device is a wireless computing device configured to wirelessly couple to the service gateway.

17. The method of claim 1, further comprising providing log in credentials to the user to access restricted network resources.

18. An authentication system, comprising:

a computing device including a network software client configured to request a network software services;

a gateway configured to host the network software services and further configured to redirect the network software client to request the network software services from the service gateway;

a user phone;

an IVR phone login system configured to support a call with the user phone when the user phone and the computing device is located within a coverage area of the service gateway as uniquely assigned to the computing device; and

the service gateway and the IVR phone login system further configured to correlate a first information received in the network software services from the computing device and a second information received from the IVR phone login system and when the first and second information match, allowing access by the computing device to services of the service gateway.

19. The authentication system of claim 18, wherein the network software client is a browser and the network software services is a web network software service.

20. The authentication system of claim 19, further comprising an access point coupled to the service gateway, the access point configured to generate the coverage area.

21. The authentication system of claim 20, wherein the access point is further configured as a wireless access point and the computing device is further configured as a wireless computing device.

22. The authentication system of claim 19, wherein the IVR phone login system is further configured to initiate a call to a user phone in response to the room number entered in the web network software service.

23. The authentication system of claim 22, wherein the user phone is further configured to confirm a login request during the call with the IVR phone login system.

24. The authentication system of claim 23, wherein the IVR phone login system is further configured to compare the room number received from the network software service with a phone number used to initiate the call by the IVR phone login system to the user phone.

25. The authentication system of claim 19, wherein the web network software service comprises a phone number designating the IVR phone login system.

26. The authentication system of claim 25, wherein the user phone is further configured to initiate the call to the IVR phone login system according to the phone number.

27. The authentication system of claim 19, wherein the IVR phone login system is further configured to send an access code to the user phone.

28. The authentication system of claim 27, wherein the computing device is further configured to enter the access code into the network software service.

29. The authentication system of claim 26, wherein the IVR phone login system is further configured to correlate a callerID from the call when originating from the user phone.

30. The authentication system of claim 19, wherein the user phone is configured as a wired phone within the location within the coverage area.

31. The authentication system of claim 19, wherein the user phone is configured as a wireless phone.

32. A computer-readable medium having computer-executable instructions thereon for authenticating a user in a network, the computer-executable instructions for performing the acts of:

requesting from a network software client of a computing device a network software service on a service gateway;

initiating a call between a user phone and an IVR phone login system in response to the user phone and the computing device being within a coverage area of the service gateway;

identifying the user associated with a location within the coverage area of the service gateway as uniquely assigned to the computing device;

completing the collection of a first information received by the network software service from the computing device before asynchronously initiating the collection of a second information received from the IVR phone login system;

correlating the first information and the second information; and

when the first and second information match, allowing access by the computing device to services of the service gateway.

33. The computer-readable medium of claim 32, wherein the network software client is configured as a web browser and the network software service is configured as a web server.

34. The computer-readable medium of claim 33, further comprising computer-executable instructions for entering a room number into the network software service to identify the location uniquely assigned to the computing device.

35. The computer-readable medium of claim 34, comprising computer-executable instructions wherein initiating a call comprises the IVR phone login system initiating a call to a user phone in response to the room number entered in the network software service.

36. The computer-readable medium of claim 34, comprising computer-executable instructions wherein the user phone confirms a login request during the call with the IVR phone login system.

37. The computer-readable medium of claim 35, comprising computer-executable instructions wherein correlating comprises the IVR phone login system comparing the room number received from the network software service with a phone number used to initiate the call by the IVR phone login system to the user phone.

38. The computer-readable medium of claim 33, comprising computer-executable instructions wherein the identifying the user associated with a location comprises divulging a room number assigned to the computing device.

39. The computer-readable medium of claim 33, comprising computer-executable instructions wherein the network software service comprises a phone number designating the IVR phone login system.

40. The computer-readable medium of claim 39, comprising computer-executable instructions wherein the initiating a call comprises the user phone initiating the call to the IVR phone login system according to the phone number.

41. The computer-readable medium of claim 40, comprising computer-executable instructions wherein the initiating a call further comprises the IVR phone login system sending an access code to the user phone.

42. The computer-readable medium of claim 41, comprising computer-executable instructions wherein the computing device enters the access code into the network software service.

43. The computer-readable medium of claim 39, comprising computer-executable instructions wherein the identifying a location comprises the IVR phone login system correlating a callerId from the call originating from the user phone.

44. The computer-readable medium of claim 42, comprising computer-executable instructions wherein correlating comprises the service gateway comparing the access code received at the network software service with the access code originating at the IVR phone login system.

45. The computer-readable medium of claim 32, comprising computer-executable instructions wherein the user phone is wired within the location within the coverage area.

46. The computer-readable medium of claim 33, the computer-executable instructions further comprising associating a wireless phone number with the location and wherein the user phone is a wireless phone.

47. The computer-readable medium of claim 33, comprising computer-executable instructions for providing login credentials to the user to access restricted network resources.