METHODS, APPARATUS, AND COMPUTER PROGRAM PRODUCTS FOR SUBSCRIBER AUTHENTICATION AND TEMPORARY CODE GENERATION

• US 20110055909A1
• Filed: 08/31/2009
• Published: 03/03/2011
• Est. Priority Date: 08/31/2009
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Dowlatkhah, Sangar
• Granted Patent: US 8,375,432 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

Method, apparatus, and computer products are provided for providing temporary generated codes by a server. Responsive to triplet authentication of a device to service provider network, a server receives an initial code from the device to request a temporary generated code. The server verifies the triplet authentication of device. The server determines whether there is a user account match to the initial code. The server determines a corresponding application server based on the initial code and the user account match. The server generates a temporary generated code to access the application server. The temporary generated code is transmitted to both the application server and the communication device, is set to expire at a preset time, is generated to allow the user access to a single session on the application server, and is generated to expire after the temporary generated code is input to access the single session on application server.

Claims

1. A method for providing temporary generated codes by a portal authentication server for portal authentication, comprising:

in response to triplet authentication of a communication device to a service provider network for communications, receiving at a portal authentication server an initial code from a user utilizing the communication device to request a temporary generated code;

verifying by the portal authentication server the triplet authentication of the communication device to the service provider network;

in response to proper verification, determining by the portal authentication server whether there is a user account match to the initial code from the user;

in response to determining the user account match, determining by the portal authentication server a corresponding application server based on the initial code and the user account match;

in response to the user account match and determining the application server, generating by the portal authentication server a temporary generated code to access the application server;

transmitting the temporary generated code from the portal authentication server to both the application server and the communication device;

wherein the temporary generated code is set to expire at a preset time;

wherein the temporary generated code is generated to allow the user access to a single session on the application server; and

wherein the temporary generated code is generated to expire after the temporary generated code is input to access the single session on the application server.

2. The method of claim 1, wherein for each respective subsequent session on the application server, the portal authentication server must create new respective temporary generated codes;

and

wherein for the user to access respective subsequent sessions on the application server, the portal authentication server transmits the new respective temporary generated codes to both the application server and the communication device.

3. The method of claim 1, wherein to allow access to each subsequent session accessing the user account requires a new temporary generated code to be generated by the portal authentication server;

wherein the new temporary generated code is different from any previous temporary generated code; and

wherein the new temporary generated code is transmitted to both the application server and the communication device.

4. The method of claim 1, wherein the portal authentication server sets the temporary generated code to expire at the preset time by utilizing a script associated with the temporary generated code;

wherein the script causes the application server to deny access to the session at the preset time; and

wherein the portal authentication server transmits the script to the application server along with the temporary generated code.

5. The method of claim 1, wherein receiving the temporary generated code from the portal authentication server causes the application server to start an expiration timer that causes the temporary generated code to expire at the preset time.

6. The method of claim 1, wherein the temporary generated code is generated by the portal authentication server to cause the application server to set an expiration timer at the time of receiving the temporary generated code, the expiration timer being associated with the temporary generated code to cause the temporary generated code to expire at the preset time.

7. The method of claim 6, wherein the temporary generated code is generated by the portal authentication server to cause the application server to deny access to the user account when the temporary generated code has previously been used for the single session.

8. The method of claim 7, wherein the portal authentication server is configured to repeatedly generate new temporary generated codes at the expiration of previous temporary codes by receiving the initial code from the user utilizing the communication device.

9. The method of claim 1, wherein the initial code corresponds to the only user account out of a plurality of user accounts for the user utilizing the communication device;

wherein each of the plurality of user accounts is respectively for different application servers; and

wherein the portal authentication server is configured to transmit the temporary generated code to the application server corresponding to the initial code and not the different application servers.

10. The method of claim of claim 1, wherein when the portal authentication server receives from the communication device a different initial code not being the initial code, the portal authentication server searches to locate a different user account;

wherein in response to the portal authentication server locating the different user account, the portal authentication server determines a different application server that corresponds to the different user account;

wherein the portal authentication server generates a different temporary generated code; and

wherein the portal authentication server transmits the different temporary generated code to both the communication device and the different application server, to allow the user of the communication device to access a different session on the different application server.

11. The method of claim of claim 1, wherein the portal authentication server is configured to receive a plurality of distinct initial codes from the communication device of the user;

wherein the portal authentication server is configured determine a plurality of different application servers that respectively correspond to each of the plurality of distinct initial codes;

wherein the portal authentication server is configured to generate a plurality of distinct temporary generated codes each respectively corresponding to the plurality of different application servers; and

wherein the portal authentication server is configured to transmit the plurality of distinct temporary generated codes to the respective plurality of different application servers and to the communication device of the user.

12. A portal authentication server, comprising:

software configured to cause the portal authentication server to provide temporary generated code services;

a processor responsive to computer-executable instructions of the software and operative for;

in response to triplet authentication of a communication device to a service provider network for communications, receiving an initial code from a user utilizing the communication device to request a temporary generated code;

verifying the triplet authentication of the communication device to the service provider network;

in response to proper verification, determining whether there is a user account match to the initial code from the user;

in response to determining the user account match, determining a corresponding application server based on the initial code and the user account match;

in response to the user account match and determining the application server, generating a temporary generated code to access the application server; and

transmitting the temporary generated code to both the application server and the communication device;

wherein the temporary generated code is set to expire at a preset time;

wherein the temporary generated code is generated to allow the user access to a single session on the application server; and

wherein the temporary generated code is generated to expire after the temporary generated code is input to access the single session on the application server.

13. The server of claim 12, wherein for each respective subsequent session on the application server, the server software must create new respective temporary generated codes;

and

wherein for the user to access respective subsequent sessions on the application server, the server software transmits the new respective temporary generated codes to both the application server and the communication device.

14. The server of claim 12, wherein to allow access to each subsequent session accessing the user account requires a new temporary generated code to be generated by the server software;

wherein the new temporary generated code is different from any previous temporary generated code; and

wherein the new temporary generated code is transmitted to both the application server and the communication device.

15. The server of claim 12, the server software sets the temporary generated code to expire at the preset time by utilizing a script associated with the temporary generated code;

wherein the script causes the application server to deny access to the session at the preset time; and

wherein the server software transmits the script to the application server along with the temporary generated code.

16. The server of claim 12, wherein receiving the temporary generated code from the server software causes the application server to start an expiration timer that causes the temporary generated code to expire at the preset time.

17. The sever of claim 12, wherein the temporary generated code is generated by the server software to cause the application server to set an expiration timer at the time of receiving the temporary generated code, the expiration timer being associated with the temporary generated code to cause the temporary generated code to expire at the preset time.

18. The server of claim 17, wherein the temporary generated code is generated by the server software to cause the application server to deny access to the user account when the temporary generated code has previously been used for the single session.

19. The server of claim 18, wherein the server software is configured to repeatedly generate new temporary generated codes at the expiration of previous temporary codes by receiving the initial code from the user utilizing the communication device.

20. A computer program product, tangibly embodied on a computer readable medium, the computer program product including instructions for causing a computer to execute a method for providing temporary generated codes for authentication, comprising:

in response to triplet authentication of a communication device to a service provider network for communications, receiving at a portal authentication server an initial code from a user utilizing the communication device to request a temporary generated code;

verifying by the portal authentication server the triplet authentication of the communication device to the service provider network;

in response to proper verification, determining by the portal authentication server whether there is a user account match to the initial code from the user;

in response to determining the user account match, determining by the portal authentication server a corresponding application server based on the initial code and the user account match;

in response to the user account match and determining the application server, generating by the portal authentication server a temporary generated code to access the application server;

transmitting the temporary generated code from the portal authentication server to both the application server and the communication device;

wherein the temporary generated code is set to expire at a preset time;

wherein the temporary generated code is generated to allow the user access to a single session on the application server; and

wherein the temporary generated code is generated to expire after the temporary generated code is input to access the single session on the application server.