USER AUTHENTICATION SYSTEM

• US 20150339474A1
• Filed: 12/24/2013
• Published: 11/26/2015
• Est. Priority Date: 12/24/2012
• Status: Abandoned Application

• Current Assignee: Cell Buddy Network Ltd.
• Original Assignee: Cell Buddy Network Ltd.
• Inventors: PAZ, Ofir, DAGAN, Yossi, DORON, Erez, ARONSON, Simcha
• Application Number:
  US14/654,844
• Publication Number:
  US 20150339474A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method of authenticating a user to each of a plurality of services provided by at least one service provider, the method comprising: providing the user with a smart card having stored therein a plurality of authentication keys and comprising communication circuitry for communicating with a communication device that the user uses to communicate with the at least one service provider; and communicating with the smart card to authenticate the user responsive to an authentication key of the plurality of authentication keys.

Claims

1. An authenticator system for authenticating identity of a user for access to each of a plurality of services provided by at least one service provider, the authenticator comprising:

a smart card having stored therein a plurality of authentication keys and comprising communication circuitry for communicating with a communication device used to communicate with the at least one service provider; and

a computer system configured to;

receive a communication from a service provider of the at least one service provider comprising a request to authenticate the user when the user operates the communication device to request access to a service provided by the service provider; and

communicate with the smart card via the communication device to engage in an authentication process to authenticate identity of the user responsive to an authentication key of the plurality of authentication keys stored in the smart card.

2. The authenticator system according to claim 1 wherein the smart card is programmed with an executable instruction set for processing the authentication key to engage in the authentication process and authenticate identity of the user.

3. The authenticator system according to claim 1 wherein the communication circuitry communicates with the communication device via a wireless communication channel.

4. The authenticator system according to claim 1 wherein the communication circuitry communicates with the communication device via a wire communication channel.

5. The authenticator system according to claim 1 wherein upon receiving the communication from the service provider with the request to authenticate the user, the computer system transmits a notice to the communication device that indicates to the user that a request has been made to authenticate the user.

6. The authenticator system according to claim 5 wherein the notice comprises a request that the user authorize the authentication process.

7. The authenticator system according to claim 6 wherein the request for authorization includes a request that the user include in a response to the request for authorization a password identifying the user.

8. The authenticator system according to claim 1 wherein the smart card is programmed with an executable instruction set to implement a blocking algorithm which may be activated to prevent or enable engaging in the authentication process to authenticate identity of the user by transmitting a communication to the communication device.

9. The authenticator system according to claim 1 wherein the communication device communicates via a mobile phone communication network.

10. The authenticator system according to claim 1 wherein the service provider comprises the computer system.

11. The authenticator system according to claim 1 wherein at least two different services are associated with different authentication keys or at least two different services are associated with a same authentication key.

12. A method of authenticating a user to each of a plurality of services provided by at least one service provider, the method comprising:

providing the user with a smart card having stored therein a plurality of authentication keys and comprising communication circuitry for communicating with a communication device that the user uses to communicate with the at least one service provider;

and communicating with the smart card to authenticate the user responsive to an authentication key of the plurality of authentication keys.