Systems for three factor authentication challenge

• US 8,260,262 B2
• Filed: 10/18/2011
• Issued: 09/04/2012
• Est. Priority Date: 06/22/2009
• Status: Expired due to Fees

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC)
• Original Assignee: Mourad Ben Ayed
• Inventors: Ben Ayed, Mourad
• Primary Examiner(s): Gary, Erika
• Application Number:
  US13/275,347
• Publication Number:
  US 20120019379A1
• Time in Patent Office: 322 Days
• Field of Search: None
• US Class Current: 455/411
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G08B 13/1436 with motion detection
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04M 3/16 with lock-out or secrecy provision in party-line systems
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method and apparatus for three-factor authentication uses a short wireless device to authenticate access to a computer or device. The computer or device issues a challenge question to the user, for example, requesting the user to say a phrase or write symbols. The user biometric information is captured and authenticated using the short wireless device.

Claims

1. A unitary mobile apparatus for authentication comprising:

a single short wireless transceiver,

wherein said unitary mobile apparatus can pair with a second device within proximity;

at least one onboard biometric sensor means capable of capturing biometric information corresponding to a user expression selected from the group consisting of;

voice, movement in two-dimensional space, movement in three-dimensional space, a fingerprint;

a memory for storing two or more reference data sets corresponding to two or more expressions of a user, wherein said two or more reference data sets are identified by two or more reference codes;

wherein upon receiving a first message from said paired second device, wherein said first message identifies a first reference code corresponding to a first challenge question,

capturing user biometric information using said onboard biometric sensor means,

using an onboard processor to authenticate the captured biometric information using a first reference data set corresponding to said first reference code,

wherein upon receiving a second message identifying a second reference code corresponding to a second challenge question, wherein said second challenge question is different from said first challenge question,

authenticating the captured biometric information using a second reference data set corresponding to said second reference code;

wherein said unitary mobile apparatus fits within a volume smaller than 20 cm3.

2. The unitary mobile apparatus of claim 1 comprising a means to generate sound wherein:

upon detection of a drop of connection to said second paired device,

performing actions selected from the group consisting of;

issue an audible alarm, issue a visual indication, and issue a vibration indication.

3. The unitary mobile apparatus of claim 1 further comprising an earpiece movable relative to the body of said unitary mobile apparatus, wherein upon moving said earpiece,

said unitary mobile apparatus automatically operates as a headset.

4. A method for authentication using a unitary mobile apparatus with an onboard short wireless transceiver and an onboard biometric sensor means, comprising:

using said onboard short wireless transceiver to communicate with a second paired device,

wherein said short wireless transceiver is selected from the group consisting of;

Bluetooth, Wibree, NFC, ANT;

storing two or more reference data sets corresponding to two or more expressions of a user onboard said unitary mobile apparatus,

wherein said two or more reference data sets are identified by two or more reference codes;

wherein upon said unitary mobile apparatus receiving a first message from said second paired device identifying a first reference code, wherein said first reference code corresponds to a first challenge question,

using said onboard biometric sensor means to capture biometric information corresponding to user expressions selected from the group consisting of;

voice, movement in two-dimensional space, movement in three-dimensional space, a fingerprint;

authenticating the captured biometric information using a first reference data set corresponding to said first reference code;

wherein upon said unitary mobile apparatus receiving a second message identifying a second reference code, wherein said second reference code is different from said first reference code, wherein said second reference code corresponds to a second challenge question,

authenticating the captured biometric information using a second reference data set corresponding to said second reference code;

wherein said unitary mobile apparatus has a volume smaller than 20 cm3.

5. The method of claim 4 wherein said unitary mobile apparatus stores at least one code selected from the group consisting of:

a digital key, an encrypted digital key, user information;

wherein upon successful authentication, sending said at least one code to said second paired device within proximity.

6. The method of claim 4 comprising granting access.

7. The method of claim 4 wherein

upon receipt of a message from said second paired device,

if the time period elapsed since a last successful authentication did not exceed a predetermined period of time,

and if a no connection drop was detected since the last successful authentication,

sending a response wirelessly to said second paired device,

wherein said response comprises at least one code.

8. The method of claim 4 comprising capturing a user PIN code onboard said second paired device.

9. The method of claim 4 comprising:

using a BLUETOOTH system for short wireless communication for capturing voice and for calculating correlation factors.

10. The method of claim 4 wherein:

the second paired device generates a first challenge question;

wherein said second paired device sends a message to said unitary mobile apparatus,

wherein said message comprises a first reference code corresponding to said first challenge question.

11. The method of claim 10 comprising outputting a first challenge question through an output means selected from the group comprised of:

a display, a speaker.

12. The method of claim 4 comprising:

calculating correlation factors between the captured biometric information and said at least one first reference data set corresponding to a first challenge question,

if said correlation factors exceed a threshold,

authenticating said user.

13. The method of claim 4 wherein:

upon receipt of at least one first challenge question from said second paired device,

said unitary mobile apparatus sends a corresponding response.

14. The method of claim 4 further comprising:

sending a challenge question to said second paired device,

if a response is not received within a predetermined period of time,

said unitary mobile apparatus performs actions selected from the group consisting of;

deleting all information from said unitary mobile apparatus,

locking said unitary mobile apparatus,

shutting down said unitary mobile apparatus,

issuing an alarm,

requesting biometric authentication,

sending an alert message.

15. The method of claim 4 further comprising providing real-time encrypted voice communication wherein:

upon receipt of a signal from a microphone,

encrypt said signal,

send the encrypted signal to said second paired device;

wherein upon receipt of a signal from said second paired device,

decrypt said signal,

send the decrypted signal to a speaker.

16. The method of claim 4 wherein:

upon detection of an event selected from the group consisting of;

drop of connection,

tempering action,

message from second paired device,

number of incorrect PIN codes exceeded a threshold,

number of incorrect authentications exceeded a threshold,

number of transactions exceeded a threshold,

time period exceeded a threshold,

perform actions selected from the group consisting of;

request a PIN code from the user,

request biometric information from the user,

attempt to re-establish connection,

block access, encrypt data, logout, lock.

17. The method of claim 4 wherein:

upon detection of a drop of connection to said second paired device,

performing actions selected from the group consisting of;

issue an audible alarm, issue a visual indication, and issue a vibration indication.

18. The method of claim 4 wherein:

upon updating a firmware onboard said unitary mobile apparatus using a computer and a data cable,

said unitary mobile apparatus goes to a discoverable mode.

19. The method of claim 4 comprising:

upon detection of a condition selected from the group consisting of;

number of pairing actions exceeded a threshold,

number of unsuccessful pairing attempts exceeded a threshold,

period of time passed since last update exceeded a threshold;

said unitary mobile apparatus goes to a non-discoverable mode.

20. A method for authentication using a unitary mobile apparatus with an onboard short wireless transceiver and an onboard biometric authentication means, comprising:

using the onboard short wireless transceiver to interface to a second paired device,

wherein said short wireless transceiver is selected from the group consisting of;

Bluetooth, Wibree, NFC, ANT;

wherein upon the second paired device generating a first challenge question and upon said second paired device conveying said first challenge question to a user,

using said onboard biometric authentication means to capture biometric information corresponding to user expressions selected from the group consisting of;

voice, movement in two-dimensional space, movement in three-dimensional space, a fingerprint;

using a remote server to authenticate the captured biometric information using at least one first reference data set corresponding to said first challenge question;

wherein upon the second paired device generating a second challenge question, wherein said second challenge question is different from said first challenge question,

capturing biometric information,

authenticating the captured biometric information using a second reference data set corresponding to said second challenge question;

wherein said unitary mobile apparatus has a volume smaller than 20 cm3.