Multi-Channel Multi-Factor Authentication

• US 20130080789A1
• Filed: 11/21/2012
• Published: 03/28/2013
• Est. Priority Date: 05/13/2008
• Status: Active Grant

• Current Assignee: Francine CANI 2002 Living Trust
• Original Assignee: Veritrix, Inc.
• Inventors: Headley, Paul
• Granted Patent: US 9,338,006 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Systems and methods for authenticating electronic transactions are provided. The authentication methods employ a combination of security features and communication channels. These security features can be based, for example, on unique knowledge of the person being authenticated, a unique thing that the person has, unique personal features and attributes of the person, the ability of the person to respond, and to do so in a fashion that a machine cannot, and so forth. Methods for enrolling the person prior to authentication are also provided, as well as systems for enrollment and authentication.

Claims

1. A method for authentication consisting of:

a claimant submitting a unique identifier over a first channel;

the claimant receiving a prompt on a device; and

the claimant submitting a biometric response to the prompt by speaking within the field of view of a camera, where one of the two steps of receiving the prompt and submitting the biometric response is performed over a second channel.

2. The method of claim 1 wherein the prompt comprises a personalized prompt.

3. The method of claim 1 wherein the device is a hand-held device.

4. A computing system comprising:

a screen;

a video camera having a field of view, disposed proximate to the screen, and configured such that a person viewing the screen will be within the field of view; and

logic configured to

communicate over a secure channel with an authentication system,

receive a video signal from the video camera and generate therefrom a first video stream that is encrypted and a second video stream that is not encrypted,

render the second video stream to the screen, and

transmit the first video stream over the channel to the authentication system.

5. The computing system of claim 4 wherein the logic is further configured to watermark the first video stream but not watermark the second video stream.

6. The computing system of claim 4 wherein the logic is further configured to receive a key over the secure channel and to determine the watermark based at least in part on the key.

7. The computing system of claim 4 further comprising a keyboard in communication with the logic, wherein the logic is further configured to temporarily isolate the keyboard except from the video camera such that a key for the video camera can be provided to the video camera from the keyboard.