Method and apparatus for providing authentication

• US 7,379,921 B1
• Filed: 03/18/2005
• Issued: 05/27/2008
• Est. Priority Date: 11/08/2004
• Status: Active Grant

• Current Assignee: Gula Consulting Limited Liability Company (Intellectual Ventures LLC)
• Original Assignee: Pisafe, Inc.
• Inventors: Kiliccote, Han
• Primary Examiner(s): Fischer; Andrew J.
• Assistant Examiner(s): AUGUSTIN, EVENS J
• Application Number:
  US11/084,332
• Time in Patent Office: 1,166 Days
• Field of Search: 705/26, 705/65, 705/70, 709/231, 726 1- 36
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A system for providing authentication is disclosed. The system includes a server configured to present an image to the user via a computer, the image having information embedded therein, and a portable device configured to: allow the user to capture the image, store predetermined information, capture input information from the user, the input information to be used to ensure that the user is authorized to use the portable device, and generate an output based on the information embedded in the image and the predetermined information. The server is further configured to receive the output from the portable device and authenticate the user based on the output. Once the user is authenticated, the user is allowed to access a website via the computer to conduct a transaction with respect to an account associated with the user.

Claims

1. A system for providing authentication, the system comprising:

a server presenting a visual image to a user via a display device and receiving an output from the user via an input device, the visual image having information embedded therein, wherein the visual image includes a barcode and is generated based on predetermined information; and

a portable device performing the steps of;

capturing the visual image using a camera integrated with the portable device;

storing the predetermined information, wherein the predetermined information includes information specific to the portable device;

capturing input information from the user, the input information including one of a personal identification and biometric information;

ensuring that the user is authorized to use the portable device based on the input information;

extracting the embedded information and generating the output using the embedded information and the predetermined information; and

displaying the output to the user;

wherein the server authenticates the user based on the output; and

upon authenticating the user, authorizes the user to conduct a transaction at the server with respect to an account associated with the user.

2. The system of claim 1 wherein the portable device uses the input information captured from the user when generating the output.

3. The system of claim 1 wherein the predetermined information includes information relating to a cryptographic algorithm.

4. The system of claim 1 wherein the input information includes one of a personal identification number and biometric information.

5. The system of claim 1 wherein the barcode includes a multi-dimensional barcode.

6. The system of claim 1 wherein the visual image includes a set of barcodes.

7. The system of claim 6 wherein the set of barcodes includes a set of multi-dimensional barcodes.

8. The system of claim 1 wherein the portable device transmits the output to the server via a message delivery protocol.

9. The system of claim 8 wherein the message delivery protocol includes the Short Message Service.

10. The system of claim 8 wherein the message delivery protocol includes the Extended Message Service.

11. The system of claim 1 wherein the portable device includes one of a cellphone and a personal digital assistant.

12. A method of providing authentication, the method comprising:

presenting a visual image to a user via a display device, the visual image having information embedded therein, wherein the visual image includes a barcode and is generated based on predetermined information;

capturing the visual image using a camera integrated with a portable device;

storing at the portable device, the predetermined information, wherein the predetermined information includes information specific to the portable device;

receiving input information from the user, the input information including at least one of a personal identification and biometric information;

extracting the embedded information from the visual image at the portable device;

displaying an output on the portable device, the output generated using the embedded information and the predetermined information

authenticating the user based on the input information and a response comprising the output entered at an input device by the user; and

responsive to the authenticating, authorizing the user to use the portable device for conducting a transaction at a server with respect to an account associated with the user.

13. The method of claim 12 wherein the portable device generates the output using the input information captured from the user.

14. The method of claim 12 wherein the predetermined information includes information relating to a cryptographic algorithm.

15. The method of claim 12 wherein the input information includes a personal identification number and biometric information.

16. The method of claim 12 wherein the barcode includes a multi-dimensional barcode.

17. The method of claim 12 wherein the visual image includes a set of barcodes.

18. The method of claim 17 wherein the set of barcodes includes a set of multi-dimensional barcodes.

19. The method of claim 12 further comprising transmitting the output to the server via a message delivery protocol.

20. The method of claim 19 wherein the message delivery protocol includes the Short Message Service.

21. The method of claim 19 wherein the message delivery protocol includes the Extended Message Service.

22. The method of claim 12 wherein the portable device includes one of a cellphone and a personal digital assistant.