Authentication System

• US 20140279560A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Maher Pedersoli
• Original Assignee: Maher Pedersoli
• Inventors: Pedersoli, Maher
• Granted Patent: US 9,721,244 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction

Abstract

A two way authentication method, including receiving by an authentication server first encrypted data from a merchant computing device, receiving by the authentication server second encrypted data from a customer computing device, determining by the authentication server if the first encrypted data matches the second encrypted data, if the first encrypted data matches the second encrypted data, authenticating the customer computing device, if the first encrypted data does not matches the second encrypted data, not authenticating the customer computing device.

Claims

1. A two way authentication method, comprising:

receiving by an authentication server first encrypted data from a merchant computing device;

receiving by said authentication server second encrypted data from a customer computing device;

determining by said authentication server if said first encrypted data matches said second encrypted data;

if said first encrypted data matches said second encrypted data, authenticating said customer computing device;

if said first encrypted data does not matches said second encrypted data, not authenticating said customer computing device.

2. The method of claim 1, further comprising forming merchant data comprising:

a unique merchant ID issued to said merchant by said authentication server; and

a unique transaction code issued to said merchant by said authentication server.

3. The method of claim 2, further comprising:

causing by said authentication server said merchant computing device to form encrypted merchant data using a first private key and said first data;

causing by said authentication server said merchant computing device to form encrypted first private key data using a first public key provided by said authentication server;

causing by said authentication server said merchant computing device to form said first encrypted data comprising said encrypted merchant data and said encrypted first private key data.

4. The method of claim 3, further comprising:

causing by said authentication server said merchant computing device to generate a first plurality of images, wherein said first plurality of image comprise said first encrypted data;

causing by said authentication server said merchant computing device to display said first plurality of images on a display device.

5. The method of claim 4, further comprising:

causing by said authentication server said merchant computing device to display said first plurality of images on all sides of an image of a three-dimensional object;

causing by said authentication server said merchant computing device to display said image of said three-dimensional object on said display device;

causing by said authentication server said merchant computing device to rotate said image of said three-dimensional object on said display device in a specified direction and at a specified rotation rate.

6. The method of claim 4, further comprising:

causing by said authentication server said customer computing device to form customer data comprising a second plurality of images generated by said customer computing device by scanning said displayed first plurality of images;

causing by said authentication server said customer computing device to form encrypted customer data using a second private key;

causing by said authentication server said customer computing device to form encrypted second private key data using a second public key provided by said authentication server;

causing by said authentication server said customer computing device to form said second encrypted data comprising said encrypted customer data and said encrypted second private key data.

7. The method of claim 6, further comprising:

decrypting by said authentication server said encrypted first private key data using said first public key;

decrypting by said authentication server said encrypted merchant data using said first private key;

decrypting by said authentication server said encrypted second private key data using said second public key;

decrypting by said authentication server said encrypted customer data using said second private key;

wherein said matching step comprises comparing by said authentication server said merchant data and said customer data.

8. The method of claim 7, further comprising:

determining by said authentication server a customer-reported direction of rotation of said cube using said decrypted customer data;

determining by said authentication server a customer-reported rate of rotation of said cube using said decrypted customer data;

wherein said matching step further comprises comparing said customer-reported direction of rotation with said specified direction of rotation; and

wherein said matching step further comprises comparing said customer-reported rate of rotation with said specified rate of rotation.

16. The article of manufacture of claim 7, the computer readable program code further comprising a series of computer readable program steps to effect:

determining a customer-reported direction of rotation of said cube using said decrypted customer data;

determining a customer-reported rate of rotation of said cube using said decrypted customer data;

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data further comprises computer readable program code comprising a series of computer readable program steps to effect comparing said customer-reported direction of rotation with said specified direction of rotation; and

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data further comprises computer readable program code comprising a series of computer readable program steps to effect comparing said customer-reported rate of rotation with said specified rate of rotation.

9. An article of manufacture comprising a non-transitory computer readable medium having computer readable program code encoded therein to perform authentication of a customer computing device located adjacent to a merchant computing device, the computer readable program code comprising a series of computer readable program steps to effect:

receiving first encrypted data from said merchant computing device;

receiving second encrypted data from said customer computing device;

determining if said first encrypted data matches said second encrypted data;

if said first encrypted data matches said second encrypted data, authenticating said customer computing device;

if said first encrypted data does not matches said second encrypted data, not authenticating said customer computing device.

10. The article of manufacture of claim 9, wherein:

merchant data includes a unique merchant ID issued to said merchant by said authentication server; and

merchant data further includes a unique transaction code issued to said merchant by said authentication server.

11. The article of manufacture of claim 10, the computer readable program code further comprising a series of computer readable program steps to effect:

causing said merchant computing device to form encrypted merchant data using a first private key and said first data;

causing said merchant computing device to form encrypted first private key data using a first public key provided by said authentication server;

causing said merchant computing device to form said first encrypted data comprising said encrypted merchant data and said encrypted first private key data.

12. The article of manufacture of claim 12, the computer readable program code further comprising a series of computer readable program steps to effect:

causing said merchant computing device to generate a first plurality of images, wherein said first plurality of image comprise said first encrypted data;

causing said merchant computing device to display said first plurality of images on a display device.

13. The article of manufacture of claim 12, the computer readable program code further comprising a series of computer readable program steps to effect:

causing said merchant computing device to display said first plurality of images on all sides of an image of a three-dimensional object;

causing said merchant computing device to display said image of said three-dimensional object on said display device;

causing said merchant computing device to rotate said image of said three-dimensional object on said display device in a specified direction and at a specified rotation rate.

14. The article of manufacture of claim 12, the computer readable program code further comprising a series of computer readable program steps to effect:

causing said customer computing device to form customer data comprising a second plurality of images generated by said customer computing device by scanning said displayed first plurality of images;

causing said customer computing device to form encrypted customer data using a second private key;

causing said customer computing device to form encrypted second private key data using a second public key provided by said authentication server;

causing said customer computing device to form said second encrypted data comprising said encrypted customer data and said encrypted second private key data.

15. The article of manufacture of claim 14, the computer readable program code further comprising a series of computer readable program steps to effect:

decrypting said encrypted first private key data using said first public key;

decrypting said encrypted merchant data using said first private key;

decrypting said encrypted second private key data using said second public key;

decrypting said encrypted customer data using said second private key;

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data comprises computer readable program code comprising a series of computer readable program steps to effect comparing said merchant data and said customer data.

17. A computer program product encoded in a computer readable medium, said computer program product being useable by a programmable computer processor to perform authentication of a customer computing device located adjacent to a merchant computing device, comprising:

computer readable program code which causes said programmable computer processor to receive first encrypted data from said merchant computing device;

computer readable program code which causes said programmable computer processor to receive second encrypted data from said customer computing device;

computer readable program code which causes said programmable computer processor to determine if said first encrypted data matches said second encrypted data;

computer readable program code which, if said first encrypted data matches said second encrypted data, causes said programmable computer processor to authenticate said customer computing device;

computer readable program code which, if said first encrypted data does not match said second encrypted data, causes said programmable computer processor to not authenticate said customer computing device.

18. The computer program product of claim 17, wherein:

merchant data includes a unique merchant ID issued to said merchant by said authentication server; and

merchant data further includes a unique transaction code issued to said merchant by said authentication server.

19. The computer program product of claim 18, further comprising:

computer readable program code which causes said programmable computer processor to cause said merchant computing device to form encrypted merchant data using a first private key and said first data;

computer readable program code which causes said programmable computer processor to cause said merchant computing device to form encrypted first private key data using a first public key provided by said authentication server;

computer readable program code which causes said programmable computer processor to cause said merchant computing device to form said first encrypted data comprising said encrypted merchant data and said encrypted first private key data.

20. The computer program product of claim 19, further comprising:

computer readable program code which causes said programmable computer processor to cause said merchant computing device to generate a first plurality of images, wherein said first plurality of image comprise said first encrypted data;

computer readable program code which causes said programmable computer processor to cause said merchant computing device to display said first plurality of images on a display device.

21. The computer program product of claim 20, further comprising:

computer readable program code which causes said programmable computer processor to cause said merchant computing device to display said first plurality of images on all sides of an image of a three-dimensional object;

computer readable program code which causes said programmable computer processor to cause said merchant computing device to display said image of said three-dimensional object on said display device;

computer readable program code which causes said programmable computer processor to cause said merchant computing device to rotate said image of said three-dimensional object on said display device in a specified direction and at a specified rotation rate.

22. The computer program product of claim 20, further comprising:

computer readable program code which causes said programmable computer processor to cause said customer computing device to form customer data comprising a second plurality of images generated by said customer computing device by scanning said displayed first plurality of images;

computer readable program code which causes said programmable computer processor to cause said customer computing device to form encrypted customer data using a second private key;

computer readable program code which causes said programmable computer processor to cause said customer computing device to form encrypted second private key data using a second public key provided by said authentication server;

computer readable program code which causes said programmable computer processor to cause said customer computing device to form said second encrypted data comprising said encrypted customer data and said encrypted second private key data.

23. The computer program product of claim 22, the computer readable program code further comprising:

computer readable program code which causes said programmable computer processor to decrypt said encrypted first private key data using said first public key;

computer readable program code which causes said programmable computer processor to decrypt said encrypted merchant data using said first private key;

computer readable program code which causes said programmable computer processor to decrypt said encrypted second private key data using said second public key;

computer readable program code which causes said programmable computer processor to decrypt said encrypted customer data using said second private key;

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data further comprising computer readable program code which causes said programmable computer processor to compare said merchant data and said customer data.

24. The computer program product of claim 23, further comprising:

computer readable program code which causes said programmable computer processor to determine a customer-reported direction of rotation of said cube using said decrypted customer data;

computer readable program code which causes said programmable computer processor to determine a customer-reported rate of rotation of said cube using said decrypted customer data;

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data further comprising computer readable program code which causes said programmable computer processor to compare said customer-reported direction of rotation with said specified direction of rotation; and

wherein said computer readable program code to determine if said first encrypted data matches said second encrypted data further comprising computer readable program code which causes said programmable computer processor to compare said customer-reported rate of rotation with said specified rate of rotation.