SYSTEMS AND METHODS FOR USING IMAGING TO AUTHENTICATE ONLINE USERS

• US 20140282961A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: AOL Inc. (Apollo Global Management, Inc.)
• Inventors: DORFMAN, Scott, Sengpiehl, Donald P.
• Granted Patent: US 9,130,929 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Systems and methods are disclosed for authenticating an identity of an online user. One method includes receiving from the user, through a first device, a request to access a web page associated with the user'"'"'s online account; transmitting to the user an image that contains a unique ID and a URL of an authentication server; and receiving from the user, through the first device, an authentication request containing the unique ID. The method also includes receiving from the user, through a second device, a log-in ID associated with the user and the unique ID; and authenticating the identity of the user to grant the user access, through the first device, to the web page associated with the user'"'"'s online account.

Claims

1. A method for authenticating an identity of an online user, the method including:

receiving from the user, through a first device, a request to access a web page associated with the user'"'"'s online account;

transmitting to the user an image that contains a unique ID and a URL of an authentication server;

receiving from the user, through the first device, an authentication request containing the unique ID;

receiving from the user, through a second device, a log-in ID associated with the user and the unique ID; and

authenticating the identity of the user to grant the user access, through the first device, to the web page associated with the user'"'"'s online account.

2. The method of claim 1, wherein the first device is a personal computer, a public computer, or a public kiosk, and the second device is a mobile device.

3. The method of claim 1, wherein the image is a two-dimensional barcode or a quick response code.

4. The method of claim 1, wherein the authentication request containing the unique ID is received upon the user requesting the URL of the authentication server, and includes a request for notice of completed log-in for the unique ID.

5. The method of claim 1, further comprising providing the user with a mobile application enabling the user to extract the unique ID from the image, by taking a picture of a display of the first device using a camera of the second device.

6. The method of claim 1, further comprising, upon receiving the authentication request containing the unique ID, storing the unique ID in relation to a browser session ID of the first device.

7. The method of claim 6, further comprising, looking up the session ID of the browser session of the first device based on the unique ID received from the user through the second device.

8. The method of claim 1, further comprising sending the second device a client certificate or access token storing a log-in ID of the user.

9. The method of claim 8, wherein the log-in ID of the user and the unique ID are received from the user within the client certificate or token.

10. The method of claim 1, further comprising:

receiving a voice sample of the user for authenticating the user based on biometric matching.

11. A system for authenticating an identity of an online user, the system including:

a data storage device storing instructions for authenticating an identity of an online user; and

a processor configured to execute the instructions to perform a method including;

receiving from the user, through a first device, a request to access a web page associated with the user'"'"'s online account;

transmitting to the user an image that contains a unique ID and a URL of an authentication server;

receiving from the user, through the first device, an authentication request containing the unique ID;

receiving from the user, through a second device, a log-in ID associated with the user and the unique ID; and

authenticating the identity of the user to grant the user access, through the first device, to the web page associated with the user'"'"'s online account.

12. The system of claim 11, wherein the first device is a personal computer, a public computer, or a public kiosk, and the second device is a mobile device.

13. The system of claim 11, wherein the image is a two-dimensional barcode or a quick response code.

14. The system of claim 11, wherein the authentication request containing the unique ID is received upon the user requesting the URL of the authentication server, and includes a request for notice of completed log-in for the unique ID.

15. The system of claim 11, further comprising providing the user with a mobile application enabling the user to extract the unique ID from the image, by taking a picture of a display of the first device using a camera of the second device.

16. The system of claim 11, further comprising, upon receiving the authentication request containing the unique ID, storing the unique ID in relation to a browser session ID of the first device.

17. The system of claim 16, further comprising, looking up the session ID of the browser session of the first device based on the unique ID received from the user through the second device.

18. The system of claim 11, further comprising sending the second device a client certificate or access token storing a log-in ID of the user.

19. The system of claim 18, wherein the log-in ID of the user and the unique ID are received from the user within the client certificate or token.

20. A computer-readable medium that, when executed by a computer system, cause the computer system to perform a method for authenticating an identity of an online user, the method including:

receiving from the user, through a first device, a request to access a web page associated with the user'"'"'s online account;

transmitting to the user an image that contains a unique ID and a URL of an authentication server;

receiving from the user, through the first device, an authentication request containing the unique ID;

receiving from the user, through a second device, a log-in ID associated with the user and the unique ID; and

authenticating the identity of the user to grant the user access, through the first device, to the web page associated with the user'"'"'s online account.