AUTHENTICATION SYSTEM

• US 20130103544A1
• Filed: 10/23/2011
• Published: 04/25/2013
• Est. Priority Date: 10/23/2011
• Status: Abandoned Application

• Current Assignee: Gopal Nandakumar
• Original Assignee: Gopal Nandakumar
• Inventors: Nandakumar, Gopal
• Application Number:
  US13/279,288
• Publication Number:
  US 20130103544A1
• Time in Patent Office: Days
• US Class Current: 705/26.41
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification

Abstract

A system and method whereby the identity of a person, entity, device or the like attempting to gain access to a secured resource may be securely authenticated includes a means for receiving from a service client (such as a retail store, service station, on-line service provider or merchandiser, healthcare provider, medical insurer, information consumer or the like) a request for access to a secured resource, where the request for access was previously submitted to the service client by a requester purporting to be an authorized user of said secured resource; means for generating and communicating to the purported authorized user a challenge string adapted to provide a basis for authenticating the identity of the requester; a means for receiving from the service client a response string corresponding to the challenge string; and a means for evaluating the response string to authenticate the identity of the requester.

Claims

1. An authentication system for authenticating the identity of a requester of access to a secured resource, said authentication system comprising:

means for receiving from a service client a request for access to a secured resource, said request for access having been submitted to said service client by a requester purporting to be an authorized user of said secured resource;

means for generating a challenge string, said challenge string being adapted to provide a basis for authenticating the identity of said requester;

means for communicating said challenge string to said authorized user that said requester purports to be;

means for receiving from said service client a response string corresponding to said challenge string; and

means for evaluating said response string to authenticate the identity of said requester.

2. The authentication system as recited in claim 1, wherein said means for evaluating said response string further comprises means for invalidating said response string based upon passage of time.

3. The authentication system as recited in claim 1, said authentication system further comprising means for conducting for the benefit of said service client a transaction reliant upon access to said secured resource.

4. The authentication system as recited in claim 3, said authentication system further comprising:

means for generating a receipt for said transaction; and

means for transmitting said receipt to said authorized user.

5. The authentication system as recited in claim 3, wherein said transaction comprises providing a financial benefit.

6. The authentication system as recited in claim 5, wherein said secured resource comprises a payment resource selected from the group consisting of:

a credit card account;

a banking account; and

an automated teller machine account.

7. The authentication system as recited in claim 5, wherein said service client comprises a vendor selected from the group consisting of:

a retail store;

a service station;

an on-line service provider; and

an on-line merchandiser.

8. The authentication system as recited in claim 3, wherein said secured resource comprises a medical record.

9. The authentication system as recited in claim 8, wherein said service client comprises an information consumer selected from the group consisting of:

a healthcare provider; and

a medical insurer.

10. The authentication system as recited in claim 3, wherein said secured resource comprises an information product.

11. The authentication system as recited in claim 10, wherein said information product comprises a credit data.

12. The authentication system as recited in claim 1, said authentication system further comprising means for establishing a test adapted to detect the existence of a spoofing type deception.

13. The authentication system as recited in claim 12, wherein said test adapted to detect the existence of a spoofing type deception is further adapted to at least in part authenticate the identity of said requester.