Systems for three factor authentication

• US 8,190,129 B2
• Filed: 10/06/2011
• Issued: 05/29/2012
• Est. Priority Date: 06/22/2009
• Status: Expired due to Fees

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC)
• Original Assignee: Mourad Ben Ayed
• Inventors: Ben Ayed, Mourad
• Primary Examiner(s): Gary, Erika
• Application Number:
  US13/254,000
• Publication Number:
  US 20120019361A1
• Time in Patent Office: 236 Days
• Field of Search: None
• US Class Current: 455/411
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method and apparatus for three-factor authentication using a short wireless device. The short wireless device stores a digital key and sends the digital key wirelessly to a third party application or device. The short wireless device can authenticate the user voice or movements in 2 dimensional or 3 dimensional space.

Claims

1. A unitary mobile apparatus for authentication comprising:

a single short wireless transceiver,

wherein said unitary mobile apparatus stores at least one code selected from the group consisting of;

a digital key, an encrypted digital key, user information;

wherein said unitary mobile apparatus can send said at least one code wirelessly to a second paired device within proximity,

wherein said second paired device is previously paired to said unitary mobile apparatus;

an onboard biometric sensor means selected from the group consisting of;

a microphone, an accelerometer, a fingerprint scanner, an iris scanner;

wherein upon receipt of a request to provide biometrics information from said second paired device,

said unitary mobile apparatus switches to biometrics capture mode,

said unitary mobile apparatus captures a sample of biometric information selected from the group consisting of;

voice, movement in two-dimensional space, movement in three-dimensional space, a fingerprint, an iris scan;

wherein said biometric information is compared to at least one set of reference user biometric information;

wherein said biometric information is authenticated;

wherein said unitary mobile apparatus has a volume smaller than 30 cm3;

wherein said unitary mobile apparatus has an LCD smaller than 3 cm2;

wherein said unitary mobile apparatus has a memory smaller than 100 Mega Bytes,

an onboard alarm,

wherein upon detection of a drop of connection to said second paired device, said unitary mobile apparatus can issue an audible alarm.

2. The unitary mobile apparatus of claim 1 wherein:

upon detection of a drop of connection to said second paired device, performing actions selected from the group consisting of;

issue visual indication, issue a vibration indication.

3. The unitary mobile apparatus of claim 1 further comprising an earpiece movable relative to the body of said unitary mobile apparatus,

wherein upon moving said earpiece relative to the body of said unitary mobile apparatus,

said unitary mobile apparatus automatically operates as a headset,

wherein upon returning said earpiece it to its initial position,

said unitary mobile apparatus automatically operates as a proximity alarm.

4. The unitary mobile apparatus of claim 1 further comprising an earpiece selected from the group consisting of:

a foldable earpiece for voice communication,

a pull-up earpiece for voice communication,

a telescopic earpiece for voice communication,

a rotating telescopic earpiece for voice communication,

a slide earpiece for voice communication.

5. A unitary mobile apparatus for authentication comprising:

a single short wireless transceiver;

wherein said unitary mobile apparatus stores at least one code selected from the group consisting of;

a digital key, an encrypted digital key, user information;

wherein said unitary mobile apparatus can send said at least one code to a second paired device within proximity;

an onboard biometric sensor means selected from the group consisting of;

a microphone, an accelerometer, a fingerprint scanner, an iris scanner;

wherein upon detection of an event selected from the group consisting of;

expiration of a predetermined period of time,

detecting wrong PIN codes were entered more than a predetermined number of times,

detecting hardware tempering;

issuing an indication wherein said indication is selected from the group consisting of;

a visual indication, an audible indication, a vibration indication;

said unitary mobile apparatus captures a sample of biometric information selected from the group consisting of;

voice, movement in two-dimensional space, movement in three-dimensional space, a fingerprint scan, an iris scan;

said biometric information is authenticated;

wherein said unitary mobile apparatus has a volume smaller than 30 cm3;

wherein said unitary mobile apparatus has an LCD smaller than 3 cm2;

wherein said unitary mobile apparatus has a memory smaller than 100 Mega Bytes.

6. A method for authentication using a unitary mobile apparatus comprising:

interfacing to a second paired device using a short wireless transceiver,

wherein said short wireless transceiver is selected from the group consisting of;

Bluetooth, Wibree, NFC, ANT;

sending a message wirelessly to said second paired device comprising at least one code selected from the group consisting of;

a digital key, an encrypted digital key, user information;

wherein said unitary mobile apparatus comprises an earpiece movable relative to the body of said unitary mobile apparatus, wherein upon moving said earpiece relative to the body of said unitary mobile apparatus, said unitary mobile apparatus automatically operates as a headset,

wherein upon returning said earpiece it to its initial position, said unitary mobile apparatus automatically operates as a proximity alarm;

wherein said unitary mobile apparatus has a volume smaller than 30 cm3;

wherein said unitary mobile apparatus has an LCD smaller than 3 cm2;

wherein said unitary mobile apparatus has a memory smaller larger than 100 Mega Bytes;

capturing user biometric information using at least one onboard biometric sensor means selected from the group consisting of;

a microphone, an accelerometer, a fingerprint scanner, an iris scanner;

authenticating said user biometric information.

7. The method of claim 6 comprising:

entering a PIN code onboard said second paired device.

8. The method of claim 6 comprising:

upon receipt of a sample of user biometric information from said unitary mobile apparatus,

a remote server calculates correlation factors between said user biometric information and at least one set of reference user biometric information;

wherein if said correlation factors are larger than a threshold, authenticating said user.

9. The method of claim 6 comprising:

calculating correlation factors between said user biometric information and at least one set of reference user biometric information using an onboard processor;

if said correlation factors are larger than a threshold,

authenticating said user.

10. The method of claim 6 comprising:

using a BLUETOOTH system for short wireless communication, for capturing voice, and for correlating said voice to a reference data set.

11. The method of claim 6 comprising:

granting access.

12. The method of claim 6 comprising:

upon detection of a condition selected from the group consisting of;

number of pairing actions exceeded a predefined number,

number of unsuccessful pairing attempts exceeded a predefined number,

period of time passed since last update exceeded a predetermined period of time;

said unitary mobile apparatus goes to a non-discoverable mode.

13. The method of claim 6 wherein

upon updating said unitary mobile apparatus using a computer and a data cable,

said unitary mobile apparatus can go to a discoverable mode.

14. The method of claim 6 wherein

upon receipt of a message from said second paired device,

sending a response wirelessly to said second paired device comprising at least one code.

15. The method of claim 6 further wherein:

upon receipt of at least one first challenge question from said second paired device,

said unitary mobile apparatus sends a corresponding response.

16. The method of claim 6 further comprising:

sending a challenge question to said second paired device,

if a response if not received within a predetermined period of time, said unitary mobile apparatus performs actions selected from the group consisting of;

deleting all information from said unitary mobile apparatus,

locking said unitary mobile apparatus,

waiting for an unlock message.

17. The method of claim 6 further comprising providing real-time encrypted voice communication wherein:

upon receipt of a signal from a microphone,

encrypt said signal,

send the encrypted signal to said second paired device;

wherein upon receipt of a signal from said second paired device,

decrypt said signal,

send the decrypted signal to an onboard speaker.

18. The method of claim 6 wherein:

upon detection of an event selected from the group consisting of;

a connection drop,

elapsed time period since the last time the user entered a user code exceeded a predetermined period of time,

perform actions selected from the group consisting of;

request a PIN code from the user,

request biometric information from the user,

attempt to reestablish connection,

block access, encrypt data, logout, lock.

19. The method of claim 6 wherein:

if authentication of said user biometric information is not successful, performing actions selected from the group consisting of;

deleting all information from said unitary mobile apparatus,

locking said unitary mobile apparatus,

waiting for an unlock message,

performing fourth-factor authentication.