Method and apparatus for enabling a user to select an authentication method

• US 8,296,831 B2
• Filed: 04/22/2011
• Issued: 10/23/2012
• Est. Priority Date: 01/03/2001
• Status: Expired due to Fees

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Nambiar, Anant, Johnson, Rick D., Foley, James M.
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US13/092,820
• Publication Number:
  US 20110202978A1
• Time in Patent Office: 550 Days
• Field of Search: 726/6, 713/182
• US Class Current: 726/6
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

The present invention facilitates access to a restricted service related to secure transactions via a network. The present invention allows a user to select a minimum security level of authentication for its own login to a restricted service. The user'"'"'s selected minimum security level of authentication may be registered in an authentication method system, so that the user must use the selected minimum security level for authentication in order to gain access to the restricted service. Alternatively, the user may specify that the selected minimum security level for authentication may be over-turned by the user, or optionally re-set to a new authentication method depending on the needs of the user. As such, the present invention allows the user the flexibility to select its own authentication method for accessing a restricted service.

Claims

1. A method comprising:

receiving, by a computer-based system for facilitating selection of an authentication method and via a web server, data in connection with a user, wherein the data includes information regarding a first user selected authentication method for accessing a restricted service;

transmitting, by the computer-based system, the data having information regarding the first user selected authentication method from the web server to a security server and an application server;

registering, by the computer-based system, the first user selected authentication method by transmitting the data from the application server to a database server; and

allowing, by the computer-based system, a change from the first user selected authentication method to a second authentication method, without accessing a first restricted service or a second restricted service, respectively, wherein the first user selected authentication method is associated with the first restricted service, and wherein the second authentication method is associated with the second restricted service.

2. The method of claim 1, further comprising authorizing the user to access a restricted service controlled by a host.

3. The method of claim 1, further comprising enabling the user to gain access to a restricted service upon validating the user'"'"'s selected authentication method.

4. The method of claim 1, further comprising allowing selection of the authentication method by:

allowing, by the computer-based system, a change from at least one of the first authentication method or the second authentication method to a third authentication method from a plurality of methods of authentication, without accessing the first restricted service or the second restricted service, respectively;

receiving, by the computer-based system, a request for access to at least one of the first restricted service or the second restricted service;

causing, by the computer-based system, a user interface to display input fields corresponding to the first method of authentication in response to the request being associated with the first restricted service;

causing, by the computer-based system, the user interface to display input fields corresponding to the second method of authentication in response to the request being associated with the second restricted service; and

granting, by the computer-based system, access to at least one of the first restricted service in response to receiving predetermined input associated with the first method of authentication or the second restricted service in response to receiving predetermined input associated with the second method of authentication.

5. The method of claim 4, wherein at least one of the first restricted service or the second restricted service is provided by a restricted service provider.

6. The method of claim 4, wherein the plurality of methods of authentication are presented by a restricted service provider.

7. The method of claim 4, wherein the plurality of methods of authentication includes at least one of:

user identification and password;

user identification and pass-phrase;

smart card and PIN;

smart card and digital certificate;

biometrics;

sound verification;

radio frequency and password;

infrared and password;

or handheld computing device and digital certificate.

8. The method of claim 4, further comprising receiving a selection of more than one method of authentication, from the plurality of methods of authentication for access to the first restricted service.

9. The method of claim 4, further comprising registering at least one of the first method of authentication or the second method of authentication as a minimum level of security for access to at least one of the first restricted service or the second restricted service.

10. The method of claim 4, further comprising presenting, by the computer-based system, a query dialog box to query for selection of a level of security from a plurality of levels of security.

11. The method of claim 4, further comprising presenting, by the computer-based system, a query dialog box to query for selection of a level of security from a plurality of levels of security presented by the first restricted service provider.

12. The method of claim 10, wherein the plurality of levels of security correspond to a plurality of methods of authentication.

13. The method of claim 10, wherein the plurality of levels of security correspond to a plurality of methods of authentication, wherein the plurality of methods of authentication includes at least one of:

user identification and password;

user identification and pass-phrase;

smart card and PIN;

smart card and digital certificate;

biometrics;

sound verification;

radio frequency and password;

infrared and password;

or handheld computing device and digital certificate.

14. The method of claim 10, further comprising receiving a selection of more than one level of security, from the plurality of levels of security, for access to the first restricted service.

15. The method of claim 4, further comprising receiving a selection of a fourth method of authentication, from the plurality of methods of authentication, for access to the second restricted service.

16. The method of claim 4, further comprising restricting at least one of the first method of authentication or the second method of authentication to at least one of specific times of the day, specific locations or specific days.

17. The method of claim 4, further comprising restricting at the least one of the first method of authentication or the second method of authentication to a user being a member of a specific group.

18. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system for facilitating selection of an authentication method, cause the computer-based system to perform operations comprising:

receiving, by the computer-based system and via a web server, data in connection with a user, wherein the data includes information regarding a first user selected authentication method for accessing a restricted service;

transmitting, by the computer-based system, the data having information regarding the first user selected authentication method from the web server to a security server and an application server;

registering, by the computer-based system, the first user selected authentication method by transmitting the data from the application server to a database server; and

allowing, by the computer-based system, a change from the first user selected authentication method to a second authentication method, without accessing a first restricted service or a second restricted service, respectively, wherein the first user selected authentication method is associated with the first restricted service, and wherein the second authentication method is associated with the second restricted service.

19. A system comprising:

a processor for facilitating selection of an authentication method,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

receiving, by the processor and via a web server, data in connection with a user, wherein the data includes information regarding a first user selected authentication method for accessing a restricted service;

transmitting, by the processor, the data having information regarding the first user selected authentication method from the web server to a security server and an application server;

registering, by the processor, the first user selected authentication method by transmitting the data from the application server to a database server; and

allowing, by the processor, a change from the first user selected authentication method to a second authentication method, without accessing a first restricted service or a second restricted service, respectively, wherein the first user selected authentication method is associated with the first restricted service, and wherein the second authentication method is associated with the second restricted service.