COMMUNICATION AUTHENTICATION

• US 20090327719A1
• Filed: 06/27/2008
• Published: 12/31/2009
• Est. Priority Date: 06/27/2008
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Herley, Cormac E.
• Application Number:
  US12/163,517
• Publication Number:
  US 20090327719A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Systems and methods that establish trust between a receiver (e.g., a user) and a sender of a message by authenticating such sender through demonstration of knowledge for a shared secret—yet without revealing such secret. A messaging component can convey messages as directed by the shared secret to communication systems that are under control of the user. Accordingly, the user can readily determine that the sender of the message is what such sender claims to be, since the sender has demonstrated a knowledge of the shared secret by sending the message to the communication system as determined by the user. Moreover, by not actually revealing the shared secret during communication, robustness of the secret is typically ensured.

Claims

1. A computer implemented method comprising:

defining a shared secret between a sender and recipient of a message;

the shared secret associated with capability of the recipient to access a first communication account and a second communication account; and

hinting sender'"'"'s knowledge of the second communication account, when sending a message to the first communication account.

2. The computer implemented method of claim 1, the hinting act further employs a hash function that reveals partial information for the first or second communication accounts.

3. The computer implemented method of claim 1, the hinting act further comprising enabling the recipient to infer that sender has knowledge of the shared secret.

4. The computer implemented method of claim 1 further comprising converting speech to text.

5. The computer implemented system of claim 2 further comprising demonstrating knowledge of the shared secret without revelation thereof.

6. The computer implemented system of claim 1 further comprising leaving a voice mail by the sender upon sending an e-mail message, or sending an instant message, or a combination thereof.

7. The computer implemented system of claim 2 further comprising pairing the first and second communication accounts.

8. The computer implemented system of claim 2 further comprising designating an e-mail account as a primary account.

9. The computer implemented system of claim 1 further comprising verifying compliance with the shared secret.

10. The computer implemented system of claim 1 further comprising including in a portion of the message indication that the message has been sent to both communication accounts.

11. A computer implemented system comprising the following computer executable components:

a user interface component that receives a shared secret defined between a sender and recipient of a message, the shared secret associated with capability of the recipient to access a first communication account and a second communication account; and

a messaging component that hints to the recipient awareness regarding the shared secret.

12. The computer implemented system of claim 11, the first communication account and the second communication account are selected from a group of e-mail, voice mail, fax, instant messaging, text messaging, or telephone.

13. The computer implemented system of claim 11 further comprising a mapping function that reveals partial information for one of the first or second communication accounts.

14. The computer implemented system of claim 11, the user interface component with an importance level designation for the message.

15. The computer implemented system of claim 11 further comprising a verification component that verifies compliance with the shared secret.

16. The computer implemented system of claim 11 further comprising a conversion component that converts speech to text.

17. The computer implemented system of claim 11, the message with a segment for identification of one of the first or second communication accounts.

18. The computer implemented system of claim 11 further comprising a registration component for registration of the shared secret.

19. The computer implemented system of claim 12 further comprising a sending component that sends a message to two e-mail accounts.

20. A computer implemented system comprising the following computer executable components:

means for conveying messages to communication systems by demonstrating knowledge of a shared secret and without a revelation thereof; and

means for receiving the messages in the communication systems.