Multi-Factor Authentication

• US 20130055368A1
• Filed: 08/23/2011
• Published: 02/28/2013
• Est. Priority Date: 08/23/2011
• Status: Active Grant

• Current Assignee: ZixCorp Systems, Inc. (Open Text Corporation)
• Original Assignee: ZixCorp Systems, Inc. (Open Text Corporation)
• Inventors: Bauckman, Dena Terry, Johnson, Nigel Paul, Robertson, David Joseph
• Granted Patent: US 8,984,605 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

According to some embodiments, a method provides a designated link in a notification to an intended recipient of the message. The designated link includes a unique identifier associated with the message. Upon receiving a request to access the message, the method authenticates the request. Authentication includes verifying whether the request corresponds to the designated link provided in the notification. If the request passes authentication, the method communicates the message.

Claims

1. A method, comprising:

providing a notification to an intended recipient of a message, the notification including a designated link operable to facilitate access to the message, the designated link including a unique identifier associated with the message;

receiving a request to access the message;

authenticating the request according to an authentication procedure, the authentication procedure including verifying whether the request corresponds to the designated link provided to the intended recipient; and

communicating the message if the request passes authentication.

2. The method of claim 1, further comprising:

sending a request for login credentials associated with a user, the request for login credentials sent in response to the request to access the message;

receiving the login credentials; and

determining that the request passes authentication if the login credentials are valid and the request corresponds to the designated link.

3. The method of claim 1, wherein verifying whether the request corresponds to the designated link comprises verifying that the request includes the unique identifier associated with the message.

4. The method of claim 1, wherein the recipient corresponds to an email account.

5. The method of claim 1, wherein:

the designated link comprises a user-readable portion and a machine-readable portion, the machine-readable portion including the unique identifier; and

the notification configured to display the user-readable portion to a user and to hide the machine-readable portion from the user.

6. The method of claim 1, wherein:

the message comprises an encrypted message; and

communicating the message comprises;

decrypting the message; and

communicating the message over a secure connection.

7. The method of claim 1, further comprising:

determining that the request fails to correspond to the designated link provided to the intended recipient; and

initiating a fallback authentication procedure.

8. One or more non-transitory computer-readable media comprising logic, the logic when executed by one or more processing units operable to perform operations comprising:

providing a notification to an intended recipient of a message, the notification including a designated link operable to facilitate access to the message, the designated link including a unique identifier associated with the message;

receiving a request to access the message;

authenticating the request according to an authentication procedure, the authentication procedure including verifying whether the request corresponds to the designated link provided to the intended recipient; and

communicating the message if the request passes authentication.

9. The media of claim 8, the logic further operable to perform the operations comprising:

sending a request for login credentials associated with a user, the request for login credentials sent in response to the request to access the message;

receiving the login credentials; and

determining that the request passes authentication if the login credentials are valid and the request corresponds to the designated link.

10. The media of claim 8, wherein verifying whether the request corresponds to the designated link comprises verifying that the request includes the unique identifier associated with the message.

11. The media of claim 8, wherein the intended recipient corresponds to an email account.

12. The media of claim 8, wherein:

the designated link comprises a user-readable portion and a machine-readable portion, the machine-readable portion including the unique identifier; and

the notification configured to display the user-readable portion to a user and to hide the machine-readable portion from the user.

13. The media of claim 8, wherein:

the message comprises an encrypted message; and

communicating the message comprises;

decrypting the message; and

communicating the message over a secure connection.

14. The media of claim 8, the logic further operable to perform the operations comprising:

determining that the request fails to correspond to the designated link provided to the intended recipient; and

initiating a fallback authentication procedure.

15. A system, comprising:

one or more processors operable to;

provide a notification to an intended recipient of a message, the notification including a designated link operable to facilitate access to the message, the designated link including a unique identifier associated with the message;

receive a request to access the message;

authenticate the request according to an authentication procedure, the authentication procedure including verifying whether the request corresponds to the designated link provided to the intended recipient; and

communicate the message if the request passes authentication.

16. The system of claim 15, the one or more processors further operable to:

send a request for login credentials associated with a user, the request for login credentials sent in response to the request to access the message;

receive the login credentials from the user; and

determine that the request passes authentication if the login credentials are valid and the request corresponds to the designated link.

17. The system of claim 15, wherein verifying whether the request corresponds to the designated link comprises verifying that the request includes the unique identifier associated with the message.

18. The system of claim 15, wherein:

the designated link comprises a user-readable portion and a machine-readable portion, the machine-readable portion including the unique identifier; and

the notification configured to display the user-readable portion to a user and to hide the machine-readable portion from the user.

19. The system of claim 15, the authentication procedure further including verifying authentication information corresponding to at least one of a username, a passcode, personal information, device information, or biometric data.

20. The system of claim 15, wherein:

the message comprises an encrypted message; and

the one or more processors further operable to;

decrypt the message; and

establish a secure connection for communicating the message.

21. The system of claim 15, the one or more processors further operable to:

determine that the request fails to correspond to the designated link provided to the intended recipient; and

initiate a fallback authentication procedure.