USER-CENTRIC AUTHENTICATION SYSTEM AND METHOD

• US 20090037983A1
• Filed: 10/22/2007
• Published: 02/05/2009
• Est. Priority Date: 10/30/2006
• Status: Active Grant

• Current Assignee: Girish Chiruvolu
• Original Assignee: Girish Chiruvolu
• Inventors: Chiruvolu, Arpitha, Chiruvolu, Girish
• Granted Patent: US 8,112,817 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A system for authenticating a user in a network. The authentication system includes a computer resource having secure data, an authentication computing system providing dynamic authentication of a user accessing the computer resource, and a user communication device for communicating between the user and the computer resource. The computing system presents a challenge for which a specified response is required based upon a pre-determined function. Access is then granted by the computing system upon providing the correct response to the presented challenge by the user.

Claims

1. An authentication system for authenticating a user in a network, the authentication system comprising:

a secure computer resource;

an authentication computing system providing dynamic authentication of a user accessing the computer resource; and

a user communication device for communicating between the user and the computer resource;

wherein the computing system presents a challenge for which a specified response is required based upon a pre-determined function;

whereby access is granted by the computing system upon providing the correct response to the presented challenge by the user.

2. The authentication computing system of claim 1 further comprising an expert system adaptable to capabilities of the user to provide challenges and responses.

3. The authentication computing system of claim 1 wherein the authentication computing system provides a honey pot mode, wherein an unauthorized user is presented with false challenges to lure the unauthorized user.

4. The authentication system of claim 1 wherein the authentication computing system includes a profiler, the profiler having means for determining facts and preferences of the user.

5. The authentication system of claim 4 wherein the profiler includes a profile bank storing challenges, hints and functions, the profiler utilizing the profile bank to generate challenges and present hints to the user.

6. The authentication system of claim 4 wherein the profiler conducts a re-profiling of the user after a specified time period.

7. The authentication system of claim 1 wherein the authentication computing system includes a means for alerting the user of an authorized attempt at accessing the computer resource.

8. The authentication system of claim 1 wherein the authentication system is utilized in messaging between a first user and a second user.

9. The authentication system of claim 1 wherein the authentication system is utilized in financial transactions, wherein the user communication device is alerted to a financial transaction, the communication device being presented with a challenge prior to authorizing the transaction.

10. The authentication system of claim 1 wherein the authentication system is utilized for medical transactions, wherein the user communication device is alerted to a medical transaction, the communication device being presented with a challenge prior to authorizing the transaction.

11. The authentication system of claim 1 wherein the authentication computing system utilizes a plurality of functions, each function being associated with a predetermined hint known to the user, the hint providing an indicator of the current function to use when responding to a presented challenge.

12. The authentication system of claim 11 wherein the authentication computing system provides a two types of challenges, a first type of challenge being a master question for use for higher level security and a cruise question for a lesser level security.

13. The authentication system of claim 11 wherein the authentication computing system employs a tier-based presentation of challenges, a first tier based on a higher level of security and a second tier based on a lesser level of security.

14. The authentication system of claim 13 wherein the tiers are determined by the user for a specified event or situation.

15. The authentication system of claim 11 wherein a correct response is dependent upon time of the challenge.

16. The authentication computing system of claim 1 wherein the user is provided with a one time use internet hyperlink for use in authentication by the authenticating computing system.

17. The authentication computing system of claim 1 wherein the authentication computing system creates a profile of the user, the profile being transferable to other entities for authentication of other computer resources.

18. The authentication computing system of claim 1 wherein the authentication computing system provides second factor authentication and message notification to the user when access is attempted to the computer resource.

19. The authentication computing system of claim 1 wherein the authentication computing system is located within a standalone computer.

20. A method of authentication a user in a network, the method comprising the steps of:

securing data in a computer resource;

dynamically authenticating a user accessing the computer resource, wherein the user is presented a challenge for which a specified response is required based upon a pre-determined function; and

upon providing the correct response to the presented challenge by the user, granting access to the computer resource.

21. The method of authenticating a user of claim 20, wherein the step of dynamically authenticating a user includes utilizing a plurality of functions, each function being associated with a predetermined hint known to the user, the hint providing an indicator of the current function to use when responding to a presented challenge.

22. The method of authenticating a user of claim 20 the step of dynamically authenticating a user includes employing a tier-based presentation of challenges, a first tier based on a higher level of security and a second tier based on a lesser level of security.

23. An authentication computing system for authenticating a user in a network, the authentication computing system comprising:

means for dynamically authenticating a user accessing a computer resource; and

means for presenting a challenge for which a specified response is required based upon a pre-determined function;

whereby access is granted by the computing system upon providing the correct response to the presented challenge by the user.

24. The authentication computing system of claim 23 wherein the authentication computing system utilizes a plurality of functions, each function being associated with a predetermined hint know to the user, the hint providing an indicator of the current function to use when responding to a presented challenge.

25. The authentication computing system of claim 23 further comprising an expert system to provide non-triviality of challenges and responses.