METHOD AND A SYSTEM FOR SECURE LOGIN TO A COMPUTER, COMPUTER NETWORK, AND COMPUTER WEBSITE USING BIOMETRICS AND A MOBILE COMPUTING WIRELESS ELECTRONIC COMMUNICATION DEVICE

• US 20150082390A1
• Filed: 09/08/2014
• Published: 03/19/2015
• Est. Priority Date: 09/08/2013
• Status: Abandoned Application

• Current Assignee: Yona Flink
• Original Assignee: Yona Flink
• Inventors: FLINK, YONA
• Application Number:
  US14/479,877
• Publication Number:
  US 20150082390A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method of authenticating and certifying that the conducting party that is conducting at least one of: (i) secure login to a computer; (ii) secure login to a computer network; (iii) secure login to a computer website, is (i) the authorized conducting party authorized to login and (ii) using the conducting party'"'"'s authorized mobile computing wireless electronic communication device to login. More particularly, the conducting party that conducts a login is not required to know or type in the conducting party'"'"'s User Names and Passwords or required to remember or know a Username or Password. The authentication and certification of a conducting party is performed by using biometric technology means and a mobile computing wireless electronic communication device.

Claims

1. A method of conducting a login transaction on a computer, computer network, and online computer website comprising:

i) enrolling a conducting party with an authenticating party at a physical and/or at an unmanned authenticating computer, wherein enrollment comprises receiving from the conducting party documented proof of identity. Biometric identifying samples of the conducting party and receiving from the conducting party personal and mobile, computing, wireless, electronic, communication device information through which the conducting party will conduct login transactions that can identify both the conducting party and the conducting party'"'"'s mobile, computing, wireless, electronic, communication device used for login;

ii) receiving, at the authenticating party or at the unmanned authenticating computer, information relating to the mobile, computing, wireless, electronic, communication device that the conducting party will use for login;

iii) communicating, based on the enrollment, with the conducting party to authenticate that the conducting party is a party that performed the login and authorized to login to the computer, computer network, and/or online computer website;

iv) transferring data based on the authentification, from the authenticating computer and authorization for login to a computer, computer network, and online computer website;

v) wherein at least one of the conducting, receiving, communicating, and/or transferring of data, is performed by at least one or more computers.

2. The method according to claim 1, wherein identifying information compromises biometric information, and mobile, computing, wireless, electronic, communication device information.

3. The method according to claim 2, wherein the biometric information comprises at least one of a voice sample of the conducting party and/or alternative biometric samples of the conducting party.

4. The method according to claim 2, wherein the mobile, computing, wireless, electronic, communication device information compromises at least one of the mobile, computing, wireless, electronic, communication device'"'"'s phone number and a unique digital identifier given to the mobile, computing, wireless, electronic, communication device by the authenticating party.

5. The method according to claim 1, wherein the enrollment comprises the enrolling party to provide proof of identity to an authenticating party and the authenticating party filling out an electronic form containing the enrolling party'"'"'s identification information and mobile, computing, wireless, electronic, communication device mobile phone number at a physical premise, or the enrolling party to provide proof of identity at an unmanned computer provided by the authenticating party and the enrolling party filling out an electronic form containing the enrolling party'"'"'s identification information and the mobile, computing, wireless, electronic, communication device mobile phone number.

6. The method according to claim 1, wherein the communication information comprises of the mobile phone numbers of the enrolling party.

7. The method according to claim 1, wherein all communications between the conducting party and login to a computer, computer network, and an online computer website is conducted through one or more of the authenticating party'"'"'s computers.

9. The system according to claim 5, wherein identifying information comprises the enrollee'"'"'s identification and biometric information provided by the enrolling party to the authenticating party.

11. The system according to claim 5, wherein the enrollment comprises the enrolling party to provide proof of identity, which is recorded by the authenticating party in electronic data format on the authenticating party'"'"'s computer at the conducting party'"'"'s site provided by the authenticating party.

12. The system according to claim 6, wherein, the communication information comprises of at least one or more mobile phone numbers of the conducting party.

13. The system according to claim 7, wherein all communications between the conducting party and the authenticating party is conducted through the authenticating party'"'"'s computers.

8. A system for conducting a login to a computer, computer network, and online computer website;

comprising;

a) one or more computers adapted to operate in a communications network, wherein, the one or more computers are adapted to communicate with one or more authenticating party computers to enroll an enrolling party with an authenticating party, wherein enrollment comprises receiving from the conducting party biometric identifying information of the conducting party and receiving from the conducting party personal and communication information through which the conducting party can be identified and contacted.

b) wherein the one or more computers are adapted to receive, at the authenticating party'"'"'s computers, information requesting login privileges to a computer, computer network, or online computer website sent by the conducting party from the conducting party'"'"'s mobile, computing, wireless, electronic, communication device containing the mobile, computing, wireless, electronic, communication device'"'"'s identification information including one or more mobile phone numbers and the conducting party'"'"'s biometric authentification information.

c) receiving from the authenticating computer authorization or denial to login to a computer, computer network, or an online computer website based on the authenticity of the authentification information sent by the conducting party to the authenticating computers.

10. The system according to claim 8, wherein the biometric information comprises of at least one of a voice sample of the conducting party and/or alternative biometric samples of the enrolling party.

14. The system according to claim 8, wherein all the conducting party'"'"'s personal and biometric identification information is never held on a conducting party'"'"'s mobile, computing, wireless, electronic, communication device, but stored by secure means on one or more of the authenticating party'"'"'s computers.

15. The system according to claim 8, wherein a conducting party is required in order to login to a computer, computer network, or an online computer website to provide at least one or more biometric samples of the conducting party and the conducting party'"'"'s mobile, computing, wireless, electronic, communication device identifiers to the authenticating party'"'"'s computer

16. A machine tangible, non-transitory, readable medium adapted to store computer code that can be executed by one or more computers comprising:

a) code configured to enroll a conducting party with an authenticating party, wherein the enrollment comprises receiving from the conducting party biometric identifying information of the conducting party and receiving from the conducting party personal and communication information through which the conducting party can be identified and contacted by the authenticating party, and

b) code configured to receive, at an authenticating party'"'"'s computer, information relating to a conducting party'"'"'s identity, a conducting party'"'"'s mobile, computing, wireless, electronic, communication device, a computer, a computer network, or an online computer website that the conducting party is requesting to login; and

c) code configured to communicate, based on the enrollment, with a conducting party to authenticate that a conducting party is a party that is authorized to login to a computer, computer network, or online computer website; and

d) code configured to transfer, based on the authentification of a conducting party, from the authenticating party'"'"'s computers to a computer, computer network, or an online computer website, authorization or denial to login.

17. The machine tangible medium of claim 16, wherein identifying information comprises biometric information.

18. The machine tangible medium of claim 17, where in the biometric information comprises at least one of a voice sample of the conducting party and/or alternative biometric samples of the conducting party.

19. The machine tangible medium of claim 16, wherein the enrollment comprises filling out an electronic form by:

a) the authenticating party at the authenticating party computer site provided by the authenticating party

b) the enrolling party at the authenticating computer website or unmanned computer site provided by the authenticating party.

20. The machine tangible medium of claim 16, wherein the communication information comprises at least one or more mobile phone numbers of the conducting party.

21. The machine tangible medium of claim 16, wherein all the communication between the conducting party'"'"'s mobile, computing, wireless, electronic, communication device and the authenticating party'"'"'s computers is conducted by the authenticating party.

22. A machine tangible, non-transitory, readable medium adapted to store computer code by a mobile, computing, wireless, electronic, communication device that can be executed by a mobile, computing, wireless, electronic, communication device:

a) code configured to record and/or capture a conducting party'"'"'s biometric identifying information through which the conducting party can be identified and contacted by the authenticating party, and

b) code configured to communicate, with an authenticating party to authenticate that a conducting party is a party that is authorized to login to a computer, computer network, or online computer website.