MULTI FACTOR USER AUTHENTICATION ON MULTIPLE DEVICES

• US 20160248752A1
• Filed: 02/24/2015
• Published: 08/25/2016
• Est. Priority Date: 02/24/2015
• Status: Active Grant

• Current Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Original Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Inventors: Blinn, Arnold Neil
• Granted Patent: US 9,686,272 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Systems and methods of the present invention provide for a first and second client computer configured to receive and transmit an authentication credential and at least one additional authentication credential respectively. The authentication credentials may be selected from authentication credentials known only to a user, identifying a client computer and/or identifying a characteristic unique to the user. A server computer communicatively coupled to the network may be configured to receive the authentication credentials and verify the identity of the user via a match, in a database, of a first authentication credential, a second authentication credential and a third authentication credential.

Claims

1. A system, comprising:

a first client computer communicatively coupled to a network and configured to receive and transmit an authentication credential selected from a plurality of authentication credentials comprising;

a first authentication credential known only to a user;

a second authentication credential identifying a client computer; and

a third authentication credential identifying a characteristic unique to the user;

a second client computer communicatively coupled to the network and configured to receive and transmit at least one additional authentication credential selected from the plurality of authentication credentials; and

a server computer communicatively coupled to the network and configured to;

receive, from the first client computer, the authentication credential;

receive, from the second client computer, the at least one additional authentication credential; and

verify the identity of the user via a match, within a database communicatively coupled to the network, to the first authentication credential, the second authentication credential and the third authentication credential.

2. The system of claim 1, wherein the first authentication credential comprises a user name, a password, a software-generated authentication challenge, or a shared secret.

3. The system of claim 1, wherein the second client computer is configured to display an alert that the authentication credential has been received.

4. The system of claim 1, wherein the second authentication credential comprises a private and public key pair.

5. The system of claim 4, wherein

the private key is configured to digitally sign the authentication credential or the at least one additional authentication credential;

and

the public key is configured to verify a digital signature of the authentication credential or the at least one additional authentication credential.

6. The system of claim 1, wherein:

the first client computer or the second client computer is further configured to;

generate a public and private key pair;

transmit a key or a private key to the server computer; and

the server computer is further configured to publish and store the public key or the key.

7. The system of claim 1 further comprising a client software configured to:

receive and display an alert that the authentication credential has been received by the server computer;

generate or receive the at least one additional authentication credential;

receive input from the user indicating that the at least one additional authentication credential is authorized; and

transmit the at least one additional authentication credential to the server computer.

8. The system of claim 7, wherein the at least one additional authentication credential is automatically generated by the client software.

9. The system of claim 8, wherein the at least one additional authentication credential comprises a private and public key pair generated upon installation of the client software.

10. The system of claim 1, wherein the identifying characteristic unique to the user comprises a biometric data about the user.

11. A method, comprising the steps of:

receiving, by a server computer communicatively coupled to a network;

a first transmission, from a first client computer communicatively coupled to the network, comprising an authentication credential selected from a plurality of authentication credentials comprising;

a first authentication credential known only to a user;

a second authentication credential identifying a client computer; and

a third authentication credential identifying a characteristic unique to the user;

a second transmission, from a second client computer communicatively coupled to the network, comprising at least one additional authentication credential selected from the plurality of authentication credentials; and

verifying, by the server computer, the identity of the user via a match, within a database communicatively coupled to the network, to the first authentication credential, the second authentication credential and the third authentication credential.

12. The method of claim 11, wherein the first authentication credential comprises a user name, a password, a software-generated authentication challenge, or a shared secret.

13. The method of claim 11, further comprising the step of generating and transmitting, by the server computer for display on the second client computer, an alert that the authentication credential has been received.

14. The method of claim 11, wherein the at least one additional authentication credential comprises a private and public key pair.

15. The method of claim 14, wherein

the public key is configured to or verify a digital signature of the authentication credential or the at least one additional authentication credential;

and

the private key is configured to or digitally sign the authentication credential or the at least one additional authentication credential.

16. The method of claim 11, further comprising the steps of:

receiving, by the server computer, a key or a public key from a key pair generated by the first client computer or the second client computer; and

publishing, by the server computer, the public key or the.

17. The method of claim 11 further comprising the steps of:

generating and transmitting, by the server computer, to a client software;

an alert that the authentication credential has been received by the server computer; and

the at least one additional authentication credential; and

receiving, by the server computer, from the client software, input from the user indicating that the at least one additional authentication credential is authorized.

18. The method of claim 17, wherein the at least one additional authentication credential is automatically generated by the client software.

19. The method of claim 18, wherein the at least one additional authentication credential comprises a private and public key pair generated upon installation of the client software.

20. The method of claim 11, wherein the identifying characteristic unique to the user comprises a biometric data about the user.