Simplified and Safe User Authentication

• US 20140208405A1
• Filed: 01/23/2013
• Published: 07/24/2014
• Est. Priority Date: 01/23/2013
• Status: Abandoned Application

• Current Assignee: Tal Hashai
• Original Assignee: Tal Hashai
• Inventors: Hashai, Tal
• Application Number:
  US13/747,980
• Publication Number:
  US 20140208405A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Machines, systems and methods for authenticating against one or more access points, the method comprising: receiving data identifying an electronic device and destination information for forwarding a code to a user, in response to the user providing the destination information to a user interface prompt displayed on the electronic device when attempting to authenticate against an access point accessible via the electronic device; generating the code, in response to receiving the destination information and data identifying the electronic device; associating the code with the data identifying the electronic device; and forwarding the code in a message to a destination associated with the destination information, wherein the code is retrieved from the message when the message is received, receiving the code transmitted by way of the electronic device to an authentication server; and authenticating the user against the access point, in response to determining that the code matches related records.

Claims

1. A method for authenticating against one or more access points, the method comprising:

receiving data identifying an electronic device and destination information for forwarding a code to a user, in response to the user providing the destination information to a user interface prompt displayed on the electronic device when attempting to authenticate against an access point accessible via the electronic device;

generating the code, in response to receiving the destination information and data identifying the electronic device;

associating the code with the data identifying the electronic device; and

forwarding the code in a message to a destination associated with the destination information,

wherein the code is retrieved from the message when the message is received,

receiving the code transmitted by way of the electronic device to an authentication server; and

authenticating the user against the access point, in response to determining that the code matches records stored in a data structure based on knowledge of the association between the data identifying the electronic device and the code.

2. The method of claim 1, wherein the destination information is an email address to which the user has access.

3. The method of claim 1, wherein the destination information is a messaging address to which the user has access.

4. The method of claim 1, wherein the user manually retrieves the code from the message and enters the code into the user interface prompt displayed on the electronic device causing the code to be transmitted by way of the electronic device to the authentication server.

5. The method of claim 1, wherein the code is automatically retrieved from the message and is transmitted by way of the electronic device to the authentication server by way of software executed on the electronic device.

6. The method of claim 1, wherein the electronic device communicates with the authentication server over a communications network.

7. The method of claim 1, wherein the code is forwarded to the destination associated with the destination information in a message in which the code is embedded in a hyperlink.

8. The method of claim 7, wherein the code is retrieved from the message, in response to the user selecting the hyperlink.

9. The method of claim 8, wherein selecting the hyperlink causes software executed on the electronic device to forward the code to the authentication server.

10. A system for authenticating against one or more access points, the system comprising:

a logic unit for receiving data identifying an electronic device and destination information for forwarding a code to a user, in response to the user providing the destination information to a user interface prompt displayed on the electronic device when attempting to authenticate against an access point accessible via the electronic device;

a logic unit for generating the code, in response to receiving the destination information and data identifying the electronic device;

a logic unit for associating the code with the data identifying the electronic device; and

a logic unit for forwarding the code in a message to a destination associated with the destination information,

wherein the code is retrieved from the message when the message is received,

a logic unit for receiving the code transmitted by way of the electronic device to an authentication server; and

a logic unit for authenticating the user against the access point, in response to determining that the code matches records stored in a data structure based on knowledge of the association between the data identifying the electronic device and the code.

11. The system of claim 10, wherein the destination information is an email address to which the user has access.

12. The system of claim 10, wherein the user manually retrieves the code from the message and enters the code into the user interface prompt displayed on the electronic device causing the code to be transmitted by way of the electronic device to the authentication server.

13. The system of claim 10, wherein the code is automatically retrieved from the message and is transmitted by way of the electronic device to the authentication server by way of a software executed on the electronic device.

14. The system of claim 10, wherein the electronic device communicates with the authentication server over a communications network.

16. The computer program product of claim 10, wherein the destination information is an email address to which the user has access.

17. The computer program product of claim 10, wherein the user manually retrieves the code from the message and enters the code into the user interface prompt displayed on the electronic device causing the code to be transmitted by way of the electronic device to the authentication server.

18. The computer program product of claim 10, wherein the code is automatically retrieved from the message and is transmitted by way of the electronic device to the authentication server by way of a software executed on the electronic device.

19. The computer program product of claim 10, wherein the electronic device communicates with the authentication server over a communications network.

20. The computer program product of claim 10, wherein the code is forwarded to the destination associated with the destination information in a message in which the code is embedded in a hyperlink.

15. A computer program product comprising program code stored on a non-transitory data storage medium, wherein execution of the program code on a processor causes the processor to:

receive data identifying an electronic device and destination information for forwarding a code to a user, in response to the user providing the destination information to a user interface prompt displayed on the electronic device when attempting to authenticate against an access point accessible via the electronic device;

generate the code, in response to receiving the destination information and data identifying the electronic device;

associate the code with the data identifying the electronic device; and

forward the code in a message to a destination associated with the destination information, wherein the code is retrieved from the message when the message is received,

receive the code transmitted by way of the electronic device to an authentication server; and

authenticate the user against the access point, in response to determining that the code matches records stored in a data structure based on knowledge of the association between the data identifying the electronic device and the code.