CONTEXT-BASED ADAPTIVE AUTHENTICATION FOR DATA AND SERVICES ACCESS IN A NETWORK

• US 20100100950A1
• Filed: 05/18/2009
• Published: 04/22/2010
• Est. Priority Date: 10/20/2008
• Status: Abandoned Application

• Current Assignee: Honesty Online, LLC
• Original Assignee: Honesty Online, LLC
• Inventors: ROBERTS, JAY B.
• Application Number:
  US12/467,561
• Publication Number:
  US 20100100950A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A method includes sending a command set to a client module via a network, receiving via the network a context identifier and a data set associated with the command set, verifying the command set, and authenticating the client module. The command set is verified based on the data set. The client module is authenticated based on the context identifier. A service is made accessible to the client module after the authenticating, The service is inaccessible to the client module before the authenticating.

Claims

1. A method, comprising:

sending a command set to a client module via a network;

receiving from the client module via the network a data set associated with the command set and a context identifier;

verifying the command set based on the data set; and

authenticating the client module based on the context identifier such that a service is accessible to the client module after the authenticating, the service being inaccessible to the client module before the authenticating.

2. The method of claim 1, wherein:

the service is a data service configured to provide a validated identity credential associated with the context identifier to the client module; and

the command set is a script file including commands configured to cause the client module to send the data set and the context identifier and commands configured to cause a client module to request the validated identity credential.

3. The method of claim 1, wherein:

the data set includes a hash value based on the command set; and

the context identifier includes a portion of a uniform resource locator associated with a network resource accessible to the client module.

4. The method of claim 1, wherein the context identifier includes a uniform resource locator associated with a first portion of a network resource and not associated with a second portion of the network resource.

5. The method of claim 1, further comprising sending, after the verifying and the authenticating, to the client module via the network an indication that the client module is authorized, based on the authenticating, to send service requests.

6. The method of claim 1, further comprising sending, after the verifying and the authenticating, to the client module via the network a response based on a command from the command set, the response including an identity credential associated with the context identifier.

7. The method of claim 1, further comprising:

receiving, after the authenticating, a service request from the client module, the service request being based on a command from the command set executed at the client module; and

performing an action associated with the service request.

8. The method of claim 1, wherein:

the data set associated with the command set is a first data set; and

the authenticating includes receiving from the client module a second data set associated with the command set, the second data set different from the first data set.

9. A method, comprising:

receiving from a client module a first context identifier and a service request via a network;

determining whether the service request is valid based on the first context identifier;

requesting, after the determining, a second context identifier from the client module; and

authorizing the service request based on the second context identifier.

10. The method of claim 9, further comprising providing access to data associated with the service request to the client module after the authorizing, the data being inaccessible to the client module before the authorizing.

11. The method of claim 9, wherein the client module is an Internet browser plug-in configured to access an Internet resource associated with the first context identifier and the second context identifier.

12. The method of claim 9, wherein the service request includes a request for access to an identity credential associated with at least one of the first context identifier or the second context identifier.

13. The method of claim 9, wherein the service request includes a request for access to an identity credential associated with at least one of the first context identifier or the second context identifier, the method further comprising sending the identity credential to the client module after the authorizing.

14. The method of claim 9, further comprising receiving from the client module a first hash value, the first hash value being based on a command set including the service request,

the determining including comparing the first hash value with a second hash value, the second hash value being a valid hash value for the command set.

15. The method of claim 9, wherein:

the first context identifier includes a portion of a uniform resource locator of a network resource accessible to the client module; and

the second context identifier includes a data set associated with a password related to the network resource accessible to the client module.

16. A method, comprising:

receiving via a network a data set associated with a command set, a context identifier, and a service request;

verifying the command set based on the data set;

determining whether the service request is authorized based on the context identifier; and

performing an action associated with the service request if the service request is authorized.

17. The method of claim 16, wherein:

the data set is received from a client module; and

the command set is a file including executable instructions accessible to the client module at a network resource associated with the context identifier.

18. The method of claim 16, wherein:

the data set is received from an Internet browser plug-in module; and

the command set is a script file accessible to the Internet browser plug-in module at a network resource associated with the context identifier.

19. The method of claim 16, wherein the performing includes sending an identity credential associated with the context identifier to an Internet browser plug-in module via the network.

20. The method of claim 16, wherein the data set is received from a client module, the method further comprising requesting from the client module, before the performing, data associated with the context identifier and different from the data set.

21. The method of claim 16, wherein the data set associated with the command set is a hash value based on the command set.