System and method for augmented user and site authentication from mobile devices

• US 20090235346A1
• Filed: 07/18/2008
• Published: 09/17/2009
• Est. Priority Date: 07/19/2007
• Status: Abandoned Application

• Current Assignee: Green Armor Solutions, Inc.
• Original Assignee: Green Armor Solutions, Inc.
• Inventors: Steinberg, Joseph
• Application Number:
  US12/218,990
• Publication Number:
  US 20090235346A1
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

A system and method for augmented user and site authentication from mobile devices is disclosed herein. The system and method provides for the performing of strong authentication of users, whether human or otherwise, as well as of site authentication, which is optimized for use when such users access a system from a mobile device using a web browser or mini-web browser. In doing so the claimed invention utilizes multiple different heuristic algorithms and/or scoring values for device identification based on the type of mobile device, and may further identify the specific type of device attempting such access.

Claims

1. A method of performing optimized authentication from a mobile device comprising the steps of:

providing multiple forms of strong authentication to a mobile device as part of at least a single authentication model when said mobile device is accessing a system;

optimizing said strong authentication so as to leverage unique particulars of a mobile environment according to at least the steps comprising;

testing said mobile device accessing said system to make a determination as to specific capabilities of said mobile device; and

using more than one user-experience for multi-factor authentication according to said determination as to specific capabilities of said mobile device.

2. The method of performing optimized authentication from a mobile device of claim 1 further comprising the step of:

performing site authentication.

3. The method of claim 2 further comprising the step of:

refreshing smaller cookies or other time stamps used during authentication on said mobile device at substantially every login to prevent said cookies or other timestamps used during authentication from circling out.

4. The method of claim 3 further comprising the step of:

utilizing multiple different heuristic algorithms or scoring values for device identification based upon a determined type of access device.

5. The method of claim 4 wherein said step of using more than one user-experience for site and multi-factor authentication further comprising the step of:

pre-fetching site authentication web pages for said mobile device without storing user information on the device.

6. A system for performing optimized authentication from a mobile device comprising:

a module for providing multiple forms of strong authentication to a mobile device as part of at least a single authentication model when said mobile device is accessing a system;

a module for optimizing said strong authentication so as to leverage unique particulars of a mobile environment according to at least the steps comprising;

a module for testing said mobile device accessing said system to make a determination as to specific capabilities of said mobile device; and

a module for using more than one user-experience for multi-factor authentication according to said determination as to specific capabilities of said mobile device.

7. The system of performing optimized authentication from a mobile device of claim 6 further comprising:

a module for performing site authentication.

8. The system of claim 7 further comprising:

a module for refreshing smaller cookies or other time stamps used during authentication on said mobile device at substantially every login to prevent said cookies or other timestamps used during authentication from circling out.

9. The system of claim 8 further comprising:

a module for utilizing multiple different heuristic algorithms or scoring values for device identification based upon a determined type of access device.

10. The system of claim 9 wherein said step of using more than one user-experience for site and multi-factor authentication further comprising:

a module for pre-fetching site authentication web pages for said mobile device without storing user information on the device.