METHOD AND APPARATUS FOR PROVIDING AUTHENTICATION

• US 20090144810A1
• Filed: 12/03/2007
• Published: 06/04/2009
• Est. Priority Date: 12/03/2007
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: AT&T Services Incorporated (AT&T, Inc.)
• Inventors: GILBOY, CHRISTOPHER P.
• Granted Patent: US 8,839,386 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

A method and apparatus for providing authentication are disclosed. For example, the method receives a request from a customer to access a service via a first user endpoint device, and sends a first authentication request to the customer for first authentication information. The method then sends a second authentication request to the customer for second authentication information via a second user endpoint device if the first authentication information is received, wherein the first user endpoint device is different from the second user endpoint device. The method then enables the customer to proceed with accessing the service if the second authentication information is received.

Claims

1. A method for providing authentication, comprising:

receiving a request from a customer to access a service via a first user endpoint device;

sending a first authentication request to said customer for a first authentication information;

sending a second authentication request to said customer for a second authentication information via a second user endpoint device if said first authentication information is received, wherein said first user endpoint device is different from said second user endpoint device; and

enabling said customer to proceed with accessing said service if said second authentication information is received.

2. The method of claim 1, wherein said first authentication information comprises at least one of:

a user name, a password, an Identification (ID), or a Personal Identification Number (PIN).

3. The method of claim 1, wherein said second authentication information comprises at least one of:

a user name, a password, an Identification (ID), or a Personal Identification Number (PIN).

4. The method of claim 3, wherein said second authentication information is previously defined by said customer.

5. The method of claim 1, wherein said second authentication request comprises a string of characters.

6. The method of claim 5, wherein said second authentication information comprises said string of characters.

7. The method of claim 6, wherein said second authentication information is received via said first user endpoint device.

8. The method of claim 1, wherein said second user endpoint device is a wireless user endpoint device.

9. The method of claim 1, wherein a format of said second authentication request is defined by said customer.

10. The method of claim 9, wherein said format of said second authentication request comprises at least one of:

a message, or a telephone call.

11. The method of claim 1, wherein a type of said second user endpoint device is defined by said customer.

12. The method of claim 1, further comprising:

notifying said customer if either said first authentication information or said second authentication information is not received.

13. A computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, cause the processor to perform the steps of a method for authentication, comprising:

receiving a request from a customer to access a service via a first user endpoint device;

sending a first authentication request to said customer for a first authentication information;

sending a second authentication request to said customer for a second authentication information via a second user endpoint device if said first authentication information is received, wherein said first user endpoint device is different from said second user endpoint device; and

enabling said customer to proceed with accessing said service if said second authentication information is received.

14. The computer-readable medium of claim 13,

wherein said first authentication information comprises at least one of:

a user name, a password, an Identification (ID), or a Personal Identification Number (PIN); and

wherein said second authentication information comprises at least one of;

a user name, a password, an Identification (ID), or a Personal Identification Number (PIN).

15. The computer-readable medium of claim 14, wherein said second authentication information is previously defined by said customer.

16. The computer-readable medium of claim 13, wherein said second authentication request comprises a string of characters.

17. The computer-readable medium of claim 16, wherein said second authentication information comprises said string of characters.

18. The computer-readable medium of claim 17, wherein said second authentication information is received via said first user endpoint device.

19. The computer-readable medium of claim 13, wherein at least one of:

a format of said second authentication request, or a type of said second user endpoint device, is defined by said customer.

20. An apparatus for providing authentication, comprising:

means for receiving a request from a customer to access a service via a first user endpoint device;

means for sending a first authentication request to said customer for a first authentication information;

means for sending a second authentication request to said customer for a second authentication information via a second user endpoint device if said first authentication information is received, wherein said first user endpoint device is different from said second user endpoint device; and

means for enabling said customer to proceed with accessing said service if said second authentication information is received.