METHOD, SYSTEM AND PROGRAM PRODUCT FOR SECURE AUTHENTICATION

• US 20140181911A1
• Filed: 12/22/2012
• Published: 06/26/2014
• Est. Priority Date: 12/22/2012
• Status: Active Grant

• Current Assignee: John Scott Kula
• Original Assignee: John Scott Kula
• Inventors: Kula, John Scott
• Granted Patent: US 9,027,085 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 16/9554 by using bar codes
• CPC Class Codes: G06Q 99/00 Subject matter not provided for in other groups of this subclass
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method, system and program product comprises establishing a communication with a computing system using a first device for communicating with the computing system over a first communication channel. The computing system is in communication with a second device configured for communicating with the computing system over a second communication channel separate from the first communication channel. The first device is paired with the computer system in which the first device and the computer system are mutually authenticated. A code presented by the second device is captured using the first device. The code is communicated to the computing system over the first communication channel in which the computer system uses the code in authorizing the second device to perform a function. The computer system communicates an authorization to the second device using the second communication channel.

Claims

1. A method comprising the steps of:

establishing a communication with a computing system, said establishing comprising using a first device being configured to be operable for communicating with said computing system over a first communication channel, said computing system being in communication with a second device being configured to be operable for communicating with said computing system over a second communication channel being separate from said first communication channel;

pairing said first device with said computer system in which said first device and said computer system are mutually authenticated;

capturing a code being presented by said second device, said capturing comprising using said first device; and

communicating said code to said computing system over said first communication channel in which said computer system authorizes said second device to perform a function, said computer system communicating an authorization to said second device using said second communication channel.

2. The method as recited in claim 1, in which said computing system comprises at least a web site.

3. The method as recited in claim 2, in which said web site at least comprises a web-service.

4. The method as recited in claim 3, in which said first device receives a client certificate from said web-service during said pairing.

5. The method as recited in claim 4, in which said first device uses at least said code for navigating to a secure portion of said web site to communicate said code along with said client certificate to said web-service.

6. The method as recited in claim 3, in which said authorization comprises a redirection of said second device to a secure portion of said web site.

7. The method as recited in claim 3, further comprising the step of pairing said first device with at least an account associated with said web site.

8. The method as recited in claim 7, said function at least comprises a transaction for said account.

9. The method as recited in claim 3, further comprising the step of communicating a geo-location of said first device to said web-service during said paring in which a proximity of said first device to said second device in part determines said authentication.

10. A system comprising:

a computing system;

a first communication channel;

a second communication channel;

a first device being configured to be operable for communicating with said computing system over said first communication channel, said first device being paired with said computer system in which said first device and said computer system are mutually authenticated, said first device being further configured to be operable for capturing a code and for communicating said code to said computing system over said first communication channel in which said computer system executes an authorization; and

a second device being configured to be operable for communicating with said computing system over said second communication channel being separate from said first communication channel, said second device being further configured to be operable for presenting said code for capture by said first device and for receiving said authorization from said computer system to perform a function.

11. The system as recited in claim 10, in which said computing system comprises at least a web site comprising a web-service, said first device communicates a geo-location of said first device to said web-service during being paired in which a proximity of said first device to said second device at least in part determines said authentication, said first device receives a client certificate from said web-service during being paired with said web site, said first device being further paired with at least an account associated with said web site, said code being encrypted within a multi-dimensional symbol being displayed by said second device, said first device uses at least said code for navigating to a secure portion of said web site to communicate said code along with said client certificate to said web-service, said authorization comprising at least a redirection of said second device to a secure portion of said web site in which said function at least comprises a transaction for said account.

12. A non-transitory computer-readable storage medium with an executable program stored thereon, wherein the program instructs a processor to perform the following steps:

establishing a communication with a computing system, said establishing comprising using a first device being configured to be operable for communicating with said computing system over a first communication channel, said computing system being in communication with a second device being configured to be operable for communicating with said computing system over a second communication channel being separate from said first communication channel;

pairing said first device with said computer system in which said first device and said computer system are mutually authenticated;

capturing a code being presented by said second device, said capturing comprising using said first device; and

communicating said code to said computing system over said first communication channel in which said computer system authorizes said second device to perform a function, said computer system communicating an authorization to said second device using said second communication channel.

13. The program instructing the processor as recited in claim 12, in which said computing system comprises at least a web site.

14. The program instructing the processor as recited in claim 13, in which said web site at least comprises a web-service.

15. The program instructing the processor as recited in claim 14, in which said first device receives a client certificate from said web-service during said pairing.

16. The program instructing the processor as recited in claim 15, in which said first device uses at least said code for navigating to a secure portion of said web site to communicate said code along with said client certificate to said web-service.

17. The program instructing the processor as recited in claim 14, in which said authorization comprises a redirection of said second device to a secure portion of said web site.

18. The program instructing the processor as recited in claim 14, further comprising the step of pairing said first device with at least an account associated with said web site.

19. The program instructing the processor as recited in claim 18, said function at least comprises a transaction for said account.

20. The program instructing the processor as recited in claim 14, further comprising the step of communicating a geo-location of said first device to said web-service during said paring in which a proximity of said first device to said second device in part determines said authentication.