REMOTE VERIFICATION OF USER PRESENCE AND IDENTITY

• US 20120102324A1
• Filed: 10/21/2011
• Published: 04/26/2012
• Est. Priority Date: 10/21/2010
• Status: Abandoned Application

• Current Assignee: Laz Rod Inc.
• Original Assignee: Lazaro Rodriguez, Mr. Michael James Mcneely
• Inventors: McNeely, Michael James, Rodriguez, Lazaro
• Application Number:
  US13/279,244
• Publication Number:
  US 20120102324A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A system for verifying presence and identity of a user on a remote computer comprises a server connected to a networked communication system; a remote computer including an interface for a digital key, wherein the remote computer is connected to the networked communication system; a digital key that connects to the remote computer via the interface, wherein the digital key contains an encrypted key; a processor on the remote computer for reading digital key from the digital key and transmitting the encrypted key to the server over the networked communications system; and a computer program executing on the remote computer that captures behavioral data of the user and transmits the behavioral data to the server over the networked communications system.

Claims

1. A system for verifying presence and identity of a user on a remote computer, comprising:

a server connected to a networked communication system;

a remote computer including an interface for a digital key, wherein the remote computer is connected to the networked communication system;

a digital key that connects to the remote computer via the interface, wherein the digital key contains an encrypted key;

a processor on the remote computer for reading digital key from the digital key and transmitting the encrypted key to the server over the networked communications system; and

a computer program executing on the remote computer that captures behavioral data of the user and transmits the behavioral data to the server over the networked communications system.

2. The system of claim 1, wherein the server further comprises a database for storing user records and user credentials.

3. The system of claim 2, wherein the interface on the remote computer for the digital key comprises a USB port.

4. The system of claim 3, wherein the digital key comprises a device that acts as a USB keyboard and provides secure authentication by a one-time password.

5. The system of claim 4, wherein the behavioral data recorded includes:

session identifiers, a number of times the digital key has powered up, a session count, user names, time deltas between events, and device identifiers.

6. A method for verifying presence and identity of a user on a remote computer, comprising:

receiving, by a remote computer connected to the networked communication system, an encrypted key from a digital key connected to an interface of the remote computer;

reading, by a processor on the remote computer, the encrypted key from the digital key;

transmitting, by the processor, the encrypted key to the server over the networked communications system;

capturing, by a computer program executing on the remote computer, behavioral data of the user; and

transmitting, by the computer program, the behavioral data of the user to the server over the networked communications system.