Authenticating a login

• US 8,171,303 B2
• Filed: 11/03/2004
• Issued: 05/01/2012
• Est. Priority Date: 11/03/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Astav Incorporated
• Inventors: Bronstein, Alexandre, Waksman, Alon
• Primary Examiner(s): Goodarzi, Nasser
• Assistant Examiner(s): ABEDIN, SHANTO
• Application Number:
  US10/980,910
• Publication Number:
  US 20060095788A1
• Time in Patent Office: 2,736 Days
• Field of Search: 713/166, 713/168, 713/182, 713/185, 713/155, 713/186, 726/1, 726/2, 726/5, 726/6, 709/225, 455/411
• US Class Current: 713/185
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Techniques for authenticating a login that avoid the imposition of memorization burdens on users of a computer system. The present techniques include determining whether an appropriate token is stored on a client system that originates the login, authenticating a login by communicating with a user via a secondary communication channel, and authenticating a login by engaging in a private question/private answer dialogue with a user.

Claims

1. A method for authenticating an access to a computer system, comprising:

initiating an automated telephonic communication channel to a telephone of a user in response to an initiation of a login by the user via an online communication channel to the computer system;

prompting via the automated telephonic communication channel for the user to recall a security response and provide the security response via the automated telephonic communication channel.

2. The method of claim 1, wherein prompting comprises prompting for the user to recall a password.

3. The method of claim 1, wherein prompting comprises prompting for the user to recall an answer to a question posed via the automated telephonic communication channel.

4. The method of claim 3, wherein the question pertains to a private memory of the user.

5. The method of claim 1, wherein prompting comprises prompting for the user to provide the security response using voice.

6. The method of claim 1, wherein prompting comprises prompting for the user to provide the security response using a keypad of the telephone.

7. A method for authenticating an access to a computer system, comprising:

initiating an automated telephonic communication channel to a telephone of a user in response to an initiation of a login by the user via an online communication channel to the computer system;

specifying via the automated telephonic communication channel a response and prompting via the automated telephonic communication channel for the user to provide the response via the automated telephonic communication channel to grant the access.

8. The method of claim 7, wherein prompting comprises prompting for the user to provide the response using voice.

9. The method of claim 7, wherein prompting comprises prompting for the user to provide the response using a keypad of the telephone.

10. A method for authenticating an access to a computer system, comprising:

obtaining a username via a first communication channel to the computer system;

initiating an automated telephonic communication channel to a telephone of a user associated with the username wherein the automated telephonic communication channel is different from the first communication channel;

transmitting an automated prompt via the automated telephonic communication channel that prompts the user to recall a security response and provide the security response back via the automated telephonic communication channel.

11. The method of claim 10, wherein the automated prompt poses a question and prompts the user to recall an answer to the question.

12. The method of claim 11, wherein the question pertains to a private memory of the user.

13. A method for authenticating an access to a computer system, comprising:

obtaining a username via a first communication channel to the computer system;

initiating an automated telephonic communication channel to a telephone of a user associated with the username wherein the automated telephonic communication channel is different from the first communication channel;

transmitting an automated prompt via the automated telephonic communication channel wherein the automated prompt carries a validation input and prompts the user to provide the validation input back via the automated telephonic communication channel to grant the access.