METHOD AND SYSTEM FOR MULTIPLE PASSCODE GENERATION

• US 20110202984A1
• Filed: 02/04/2011
• Published: 08/18/2011
• Est. Priority Date: 02/15/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Arcot Systems, Inc. (Broadcom, Inc.)
• Inventors: Varadarajan, Rammohan, Hird, Geoffrey, Reno, James D.
• Granted Patent: US 8,613,065 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention relates to a method and a system for generating user passcodes for each of a plurality of transaction providers from a mobile user device. A method and system for activating a plurality of passcode generators on a user device configured with a passcode application installed on the user device is provided. Each of the passcode generators may correspond to a different user account or transaction provider, such that each passcode generator provides a user passcode configured for the corresponding account or transaction provider. One or more of the passcode generators may include a passcode generating algorithm and a passcode key. Access to one or more of the passcode generators may require providing a PIN or a challenge.

Claims

1. A method for activating a plurality of passcode generators on a user device, comprising:

installing a passcode application on the user device;

activating a first passcode generator on the user device using the passcode application;

obtaining a first passcode from the first passcode generator, wherein the first passcode is configured as a user passcode for a transaction between a user and a first provider;

activating at least one additional passcode generator on the user device using the passcode application; and

obtaining at least one additional passcode from said at least one additional passcode generator, wherein said at least one additional passcode is configured as a user passcode for a transaction between the user and at least one additional provider.

2. The method of claim 1, further comprising:

obtaining a second passcode from one of the first passcode generator and said at least one additional passcode generator, wherein the second passcode is configured as a user passcode for a transaction between the user and a second provider.

3. The method of claim 1, wherein installing the passcode application includes installing at least one algorithm.

4. The method of claim 1, further comprising:

accessing a first provider interface via the user device and receiving information from the first provider interface, wherein the information is configured to activate the first passcode generator on the user device; and

accessing at least one additional provider interface via the user device and receiving information from the at least one additional provider interface, wherein the information is configured to activate said at least one additional passcode generator on the user device.

5. The method of claim 4, wherein the information received includes at least one of a passcode key and an algorithm.

6. The method of claim 4, wherein the information received includes a passcode key, and wherein the passcode key is cryptographically camouflaged.

7. The method of claim 1,

wherein activating the first passcode generator includes activating at least one of a first algorithm and a first passcode key on the user device, wherein each of the first algorithm and the first password key is configured to generate the first passcode;

and

wherein activating said at least one additional passcode generator includes activating one of at least one additional algorithm and at least one additional passcode key on the user device, wherein each of said at least one additional algorithm and said at least one additional passcode key is configured to generate the at least one additional passcode.

8. The method of claim 7, further comprising:

activating a second passcode key on one of the first passcode generator and said at least one additional passcode generator, wherein the second passcode key is configured to generate a second passcode, and wherein the second passcode is configured as a user passcode for a transaction between the user and a second provider.

9. The method of claim 8, wherein one of the first algorithm and said at least one additional algorithm is configured as a non-standard algorithm.

10. The method of claim 1, further comprising:

inputting at least one PIN into the user device, wherein said at least one PIN is at least one of an access PIN to access the passcode application, a first PIN to obtain the first passcode, and at least one additional PIN to obtain said at least one additional passcode.

11. The method of claim 10, wherein two or more of the access PIN, the first PIN and said at least one additional PIN are the same PIN.

12. The method of claim 1, further comprising one of inputting a challenge into the first passcode generator to obtain the first passcode, and inputting a challenge into said at least one additional passcode generator to obtain said at least one additional passcode.

13. A system for activating a plurality of passcode generators on a user device, the system including:

a passcode application configured to activate a plurality of passcode generators;

a user device configured to receive the passcode application;

a provisioning server configured to provide the passcode application to the user device;

a first provider interface configured to provide first passcode information;

at least one additional provider interface configurable to provide at least one additional passcode information;

a first passcode generator configured for activation on the user device;

at least one additional passcode generator configured for activation on the user device;

wherein;

the user device is configured to communicate with the provisioning server;

at least one of the user device and the provisioning server are configured to communicate with each of the first provider server and the at least one additional provider server;

the passcode application uses the first passcode information to activate the first passcode generator on the user device such that the user can obtain a first passcode configured as a user passcode for a first provider; and

the passcode application uses the at least one additional passcode information to activate said at least one additional passcode generator on the user device such that the user can obtain at least one additional passcode configurable as a user passcode for at least one additional provider.

14. The system of claim 13, further comprising:

a second provider interface configured to provide second passcode information;

wherein the passcode application uses the second passcode information to activate one of the first passcode generator and said at least one additional passcode generator such that the user can obtain a second passcode configured as a user passcode for a second provider.

15. The system of claim 13, further comprising:

at least one algorithm recorded on the user device;

wherein said at least one algorithm is one of a first algorithm executable by the passcode application on the user device to generate the first passcode and at least one additional algorithm executable by the passcode application on the user device to generate said at least one additional passcode.

16. The system of claim 13, further comprising:

at least one key;

wherein the at least one key is at least one of a first key configured to generate the first passcode and at least one additional key configured to generate said at least one additional passcode.

17. The system of claim 13, further including at least one PIN, wherein said at least one PIN is configured for input as one of an access PIN to access the passcode application, a first PIN to obtain the first passcode, and at least one additional PIN to obtain said at least one additional passcode.

18. The system of claim 13, further including at least one challenge, wherein said at least one challenge is configured for input as one of a first challenge to obtain the first passcode, and at least one additional challenge to obtain said at least one additional passcode.

19. A method for activating a plurality of passcode generators on a user device, comprising:

installing a passcode application on the user device;

activating at least one passcode generator on the user device;

installing at least two algorithms on the user device;

providing a first key on the user device, wherein the first key is defined by a first provider account;

providing a second key on the user device, wherein the second key is defined by a second provider account;

providing a third key on the user device, wherein the third key is defined by a third provider account;

obtaining a first passcode from said at least one passcode generator using one of said at least two algorithms and the first key, wherein the first passcode is configured as a user passcode for a transaction between a user and a first provider;

obtaining a second passcode from said at least one passcode generator using one of said at least two algorithms and the second key, wherein the second passcode is configured as a user passcode for a transaction between a user and a second provider; and

obtaining a third passcode from said at least one passcode generator using one of said at least two algorithms and the third key, wherein the third passcode is configured as a user passcode for a transaction between a user and a third provider.

20. The method of claim 19, wherein at least one of at least two algorithms is proprietary to one of the first provider, the second provider, and the third provider.