PROVIDING REMOTE USER AUTHENTICATION

• US 20100100725A1
• Filed: 10/20/2008
• Published: 04/22/2010
• Est. Priority Date: 10/20/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Galvin, Thomas A., Ozzie, Jack, Patey, Eric M., Ozzie, Raymond
• Granted Patent: US 8,522,010 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Providing a remote computer user authentication service involves providing a reference to a user authentication service in a host server'"'"'s source code (e.g., website source code). Further, integration code that may be used in an application programming interface (API) on the host server for interaction with a user authentication service can be provided. Additionally, a user interface (UI) for user authentication on the host server, and an authentication-test message on the host server using the UI may be provided. Also, providing authentication can comprise sending an authentication-request message to a mobile device designated by the user; and/or can comprise the user responding with information from the authentication-test message. The host server can be notified of the user'"'"'s authentication after a correct response is received by the user authentication service.

Claims

1. A method for providing a remote computer user authentication service, comprising:

providing a reference to the user authentication service for installation in a host server'"'"'s source code;

providing integration code for utilization by an application programming interface (API) on the host server for notifying the user authentication service to initiate user authentication;

providing a user interface (UI) for user authentication on the host server;

providing an authentication-test message for the host server;

performing at least one of;

sending an authentication-request message to a mobile device designated by the user; and

receiving a user response from a mobile device designated by the user to an authentication request, the user response comprising information from the authentication-test message; and

providing a notification of the user'"'"'s authentication after an appropriate user response to the authentication-request message is received by the user authentication service.

2. The method of claim 1, providing a reference to the user authentication service for installation in a host server'"'"'s source code associated with an Iframe in a host website.

3. The method of claim 2, the UI provided inside the Iframe in the host website.

4. The method of claim 1, the authentication-request message comprising sending a short message service (SMS) message.

5. The method of claim 4, the user response to the authentication-request message comprising an SMS message.

6. The method of claim 1, the authentication-test message comprising a challenge-response test comprising an image of data to be included in the user'"'"'s response to the authentication-request message.

7. The method of claim 6, the authentication-test message comprising an authentication key to be included in the user'"'"'s response to the authentication-request message.

8. The method of claim 1, providing an authentication-test message, to a user of the host server, using the UI;

9. The method of claim 1, user authentication on the host server to determine whether the user is a human.

10. The method of claim 1, the notification to the host server of the user'"'"'s authentication comprising the UI requesting the user to activate an event in the UI after a correct user response to the authentication-request message is received by the user authentication service.

11. The method of claim 1, the appropriate user response to the authentication-request message comprising an authentication key.

12. The method of claim 1, comprising receiving a secret code from the user when authenticating with the designated mobile device.

14. The system of claim 12, the user authentication service configured to provide integration code for utilization in an API to the host website.

15. The system of claim 12, the host website comprising source code for instantiating an Iframe on the host website for hosting content from the user authentication service.

16. The system of claim 14, the user interface (UI) provider configured to provide a user authentication UI in the Iframe on the host website.

17. The system of claim 12, the authentication-test message provider comprising an authentication-test generator configured to generate random authentication tests.

18. The system of claim 15, the user authentication user interface comprising:

an authentication-test message display component configured to display an authentication-test message from the authentication-test message provider; and

a status display component configured to display authentication status messages.

19. The system of claim 17, the user authentication user interface comprising an authentication complete component configured to provide a request in the UI that the user activate an event to notify the host website the user has been authenticated.

13. A system for providing remote Internet user authentication service, comprising:

a user authentication service comprising;

a user interface (UI) provider configured to provide a user authentication UI on a host website;

an authentication-test message provider configured to provide an authentication-test message;

an authentication-test message response receiver configured to receive a response to the authentication-test message;

a message transmitter configured to transmit an authentication-request message to a user'"'"'s designated mobile device;

a mobile device response receiver configured to receive a response to an authentication request from the user'"'"'s designated mobile device;

an authenticator configured to authenticate a user'"'"'s response to the authentication request; and

an authentication notifier configured to provide for notification of user authentication to the host website;

source code in the host website comprising a reference to the user authentication service; and

an application programming interface (API) on the host website configured to facilitate interaction between the host website and the user authentication service.

20. A method for providing remote user short message service (SMS)-based authentication, comprising:

providing a reference to the user authentication service for installation in a host server'"'"'s source code, the reference to a user authentication service associated with source code for an Iframe in a browser accessing the host server;

providing a user interface (UI) in the Iframe in the browser accessing the host server for user authentication on the host server, the UI comprising;

an authentication-test message; and

updated authentication status information;

providing integration code to the host server for use in an application programming interface for notifying the user authentication service to initiate user authentication upon a request from the UI;

providing an authentication-test message, the authentication-test message comprising a challenge-response test specific to a user'"'"'s session in the host server;

performing at least one of;

sending an SMS-based authentication-request message to a mobile device designated by the user requesting a response;

receiving an SMS-based user response from a mobile device designated by the user to an authentication request, the user response comprising an authentication key from the authentication-test message; and

providing a notification the host server of the user'"'"'s authentication after an appropriate user response to the authentication-request message is received by the user authentication service.