Proximity Card Self-Service PIN Unblocking when used as a Primary Authentication Token to Stand-Alone or Network-Based Computer Systems

• US 20100193585A1
• Filed: 02/04/2009
• Published: 08/05/2010
• Est. Priority Date: 02/04/2009
• Status: Abandoned Application

• Current Assignee: Greg Salyards, Shaun Cuttill
• Original Assignee: Greg Salyards, Shaun Cuttill
• Inventors: Cuttill, Shaun, Salyards, Greg
• Application Number:
  US12/365,761
• Publication Number:
  US 20100193585A1
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A method or a process for unblocking a second factor of authentication, utilizing self-service processes, when required for use with a Proximity Card defined by ISO 14443 and ISO 15693 standards for PC or network-based authentication, such as when a user'"'"'s selected Personal Identification Number (PIN) becomes blocked due to excessive invalid attempts.

Claims

1. A method for user authentication, the method comprising a security application that requires two-factor authentication.

3. The method of claim 1, wherein the first factor of two-factor authentication is ‘

something the user has.’

4. The method of claim 1, wherein the second factor of two-factor authentication is ‘

something the user knows.’

5. The method of claim 1, wherein the security application requires two-factor authentication including ‘

something the user has’

in combination with ‘

something the user knows.’

9. The method of claim 3, wherein ‘

something the user has’

includes contact-less or proximity smart cards.

10. The method of claim 4, wherein ‘

something the user knows’

includes standard name and password as well as answers to questions the user selected during the enrollment process.

2. A method for user authentication, the method comprising a security application that enables Knowledge Based Authentication of a stand-alone or network-based computer system.

6. The method of claim 2, wherein the security application is for determining whether a person (hereinafter “

user”

) is authorized to have access to a stand-alone or network-based computer system.

7. The method of claim 2, wherein the security application requires ‘

something the user has’

in combination with ‘

something the user knows’

also known as the user'"'"'s PIN to achieve authorization to a stand-alone or network based computer system.

8. The method of claim 2, wherein if the user blocks their PIN due to an excess of invalid PIN entries the user may use Knowledge Based Authentication to unblock their PIN.

11. The method of claim 8, wherein the security application will contain a system setting that provides users with self-service emergency access when access has been blocked due to excessive invalid attempts.

12. The method of claim 8, wherein a PIN has been blocked the system allows the user to answer questions previously chosen by them in order to unblock their PIN therefore utilizing Knowledge Based Authorization.

13. The method of claim 12, wherein self-service access diminishes the requirement of administration in order to unblock a user from a stand-alone or network based computer.

14. A system for authenticating the authorization of a user in the event of a blocked PIN comprising:

(a) items in the users possession;

(b) information that the user is aware of;

(c) elimination of the need for administration to unblock the user.