AUTHENTICATION METHOD

• US 20130099891A1
• Filed: 10/23/2011
• Published: 04/25/2013
• Est. Priority Date: 10/23/2011
• Status: Abandoned Application

• Current Assignee: Gopal Nandakumar
• Original Assignee: Gopal Nandakumar
• Inventors: Nandakumar, Gopal
• Application Number:
  US13/279,297
• Publication Number:
  US 20130099891A1
• Time in Patent Office: Days
• US Class Current: 340/5.2
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A system and method whereby the identity of a person, entity, device or the like attempting to gain access to a secured resource may be securely authenticated includes a means for receiving from a requester purporting to be an authorized user of a secured resource a request for access to the secured resource; means for generating and communicating to the purported authorized user a challenge string adapted to provide a basis for authenticating the identity of the requester; a means for receiving a response string corresponding to the challenge string; and a means for evaluating the response string to authenticate the identity of the requester.

Claims

1. A method for authenticating the identity of a requester of access to a secured resource, said method for authenticating comprising the steps of:

receiving from a requester purporting to be an authorized user of a secured resource a request for access to said secured resource;

generating a challenge string, said challenge string being adapted to provide a basis for authenticating the identity of said requester;

communicating said challenge string through a discrete channel to said authorized user that said requester purports to be;

receiving a response string corresponding to said challenge string; and

evaluating said response string to authenticate the identity of said requester.

2. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 1, said method for authenticating further comprising the step of determining based upon passage of time whether said response string should be deemed invalid.

3. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 1, said method for authenticating further comprising the step of establishing a test adapted to detect the existence of a spoofing type deception.

4. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 3, wherein said test adapted to detect the existence of a spoofing type deception is further adapted to at least in part authenticate the identity of said requester.