Voice-capable system and method for authentication using prior entity user interaction

• US 8,443,197 B2
• Filed: 09/30/2005
• Issued: 05/14/2013
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Original Assignee: The Invention Science Fund I, L.L.C. (Intellectual Ventures LLC)
• Inventors: Jung, Edward K. Y., Levien, Royce A., Lord, Robert W., Malamud, Mark A., Rinaldo, John D. Jr.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US11/241,742
• Publication Number:
  US 20070195726A1
• Time in Patent Office: 2,783 Days
• Field of Search: 380/200, 380/30, 713/192, 713/168, 713/182, 726/4, 726/13, 726/30, 726/24, 719/311, 709/12, 709/14, 717/124
• US Class Current: 713/182
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A system and method for use with a voice-capable system, includes but is not limited to a method including accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system, obtaining one or more user interactions with the one or more entities and generating an authentication session using the one or more user interactions with the one or more entities.

Claims

1. A method for use with a voice-capable system, the method comprising:

accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system, wherein each of the one or more entities are an institution or business with an internet presence, wherein the internet presence has had a prior interaction with a user, each of the one or more entities requiring the user to provide authentication to access the internet presence, and the voice-capable system accessing one or more user interactions with the one or more entities from one or more internet sites;

obtaining evidence of one or more user interactions with the one or more entities from one or more internet sites known to have been visited by the user within a predetermined period of time, the predetermined period of time being a function of a security level; and

generating an authentication session using data from the one or more entities, wherein the authentication session includes verifying the user access to the voice-capable system using the data from the authentication to access the internet presence.

2. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

regularly accessing the one or more entities computationally networked to the voice-capable system.

3. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

accessing the one or more entities computationally networked to the voice-capable system upon detection of a user authentication request.

4. The method of claim 1 wherein the accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

determining the one or more entities computationally networked to the voice-capable system.

5. The method of claim 4 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving an indication from the one or more entities previously identified as having had interactions with the user regarding an authentication status with the one or more entities computationally networked to the voice-capable system.

6. The method of claim 4 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving login data from a database coupled to the voice-capable system, the database storing the login data for the one or more entities computationally networked to the voice-capable system; and

attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system.

7. The method of claim 6 wherein the attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system includes:

using the login data as an authentication token for one or more secure transactions with one or more of the one or more entities.

8. The method of claim 4 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

during an authenticated session with the user, determining the one or more entities visited by the user via at least one of a system scan, an interrogatory with the user and an entity representing the user, the one or more entities including the one or more internet sites; and

storing the system scan in a database to enable generating one or more authentication questions for a subsequent authenticated session.

9. The method of claim 4 wherein the determining the one or more entities computationally networked to the voice-capable system includes:

receiving an indication identifying the one or more entities computationally networked from the user.

10. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating questions based on one or more of past purchases by the user.

11. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating questions based on one or more habits of the user.

12. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating questions based on one or more past user transactions over an internet connection.

13. The method of claim 12 wherein the generating questions based on one or more past user transactions over an internet connection includes:

generating questions based on the one or more past transactions with a financial internet site.

14. The method of claim 12 wherein the generating questions based on one or more past user transactions over an internet connection includes:

generating questions based on the one or more past user transactions with a search engine type internet site.

15. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating one or more multiple choice type questions from which the user can determine an answer from a set of two or more possible answers.

16. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating one or more single-answer questions for which answers having defined levels of precision are acceptable.

17. The method of claim 1 wherein the generating an authentication session using the data from the one or more entities includes:

generating one or more questions based on the one or more user interactions with the one or more entities over a number of days, weeks, or months.

41. The method of claim 1 wherein the internet presence prior interaction with the user is a history of one or more past purchases by the user stored in the internet presence.

42. The method of claim 1 wherein the internet presence prior interaction with the user is a history of one or more past purchases by the user stored in a different internet presence.

43. The method of claim 1 wherein the user access to the voice-capable system includes a secure user access to the voice-capable system resources.

18. One or more non-transitory computer readable media comprising one or more computer-readable instructions for executing a process comprising:

accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system, wherein each of the one or more entities are an institution or business with an internet presence, wherein the internet presence has had a prior interaction with the user, each of the one or more entities requiring the user to provide authentication to access the internet presence, and

obtaining one or more user interactions with the one or more entities from one or more internet sites known to have been visited by a user within a predetermined period of time, the predetermined period of time being a function of a security level; and

generating an authentication session using data from the one or more entities, wherein the authentication session includes verifying the user access to the voice-capable system using the data from the authentication to access the internet presence.

19. The one or more non-transitory computer readable media of claim 18 wherein the signal bearing medium comprises:

a transmission medium.

20. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for regularly accessing the one or more entities computationally networked to the voice-capable system.

21. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for accessing the one or more entities computationally networked to the voice-capable system upon detection of a user authentication request.

22. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system includes:

one or more instructions for determining the one or more entities computationally networked to the voice-capable system.

23. The one or more non-transitory computer readable media of claim 22 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving an indication from the one or more entities previously identified as having had interactions with the user regarding an authentication status with the one or more entities computationally networked to the voice-capable system.

24. The one or more non-transitory computer readable media of claim 22 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving login data from a database coupled to the voice-capable system, the database storing the login data for the one or more entities computationally networked to the voice-capable system; and

one or more instructions for attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system.

25. The one or more non-transitory computer readable media of claim 24 wherein the one or more instructions for attempting a login using the login data to the one or more entities to determine which of the one or more entities are computationally networked to the voice-capable system includes:

one or more instructions for using the login data as an authentication token for one or more secure transactions with one or more of the one or more entities.

26. The one or more non-transitory computer readable media of claim 22 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for during an authenticated session with the user, determining the one or more entities visited by the user via one or more of a system scan and/or an interrogatory with the user and/or an entity representing the user, the one or more entities including the one or more internet sites; and

one or more instructions for storing the system scan in a database to enable generating one or more authentication questions for a subsequent authenticated session.

27. The one or more non-transitory computer readable media of claim 22 wherein the one or more instructions for determining the one or more entities computationally networked to the voice-capable system includes:

one or more instructions for receiving an indication identifying the one or more entities computationally networked from the user.

28. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for generating an authentication session using the data from the one or more entities includes:

one or more instructions for generating questions based on one or more of past purchases by the user.

29. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for generating an authentication session using the data from the one or more entities further comprises:

one or more instructions for generating questions based on one or more habits of the user.

30. The one or more non-transitory computer readable media of claim 18 wherein the one or more instructions for generating an authentication session using the data from the one or more entities further comprises:

one or more instructions for generating questions based on one or more past user transactions over an internet connection.

31. The one or more non-transitory computer readable media of claim 30 wherein the one or more instructions for said generating questions based on one or more past user transactions over an internet connection further comprises:

one or more instructions for generating questions based on the one or more past transactions with a financial internet site.

32. The one or more non-transitory computer readable media of claim 30 wherein the one or more instructions for said generating questions based on one or more past user transactions over an internet connection further comprises:

one or more instructions for generating questions based on the one or more past user transactions with a search engine type internet site.

33. The one or more non-transitory computer readable media of claim 18 wherein the generating an authentication session using the data from the one or more entities includes:

one or more instructions for generating one or more multiple choice type questions from which the user can determine an answer from a set of two or more possible answers.

34. The one or more non-transitory computer readable media of claim 18 wherein the generating an authentication session using the data from the one or more entities includes:

one or more instructions for generating one or more single-answer questions for which answers having defined levels of precision are acceptable.

35. The one or more non-transitory computer readable media of claim 18 wherein the generating an authentication session using the data from the one or more entities includes:

one or more instructions for generating one or more questions based on the one or more user interactions with the one or more entities over a number of days, weeks, or months.

36. A voice-capable system comprising:

a processor;

audio input and/or output circuitry coupled to the processor;

a memory coupled to the processor; and

a security module coupled to the processor, the security module configured to implement a secure protocol, the secure protocol configured to implement an automated system with one or more questions related to security/authentication, the security module configured to include;

an access module for accessing by the voice-capable system of one or more entities computationally networked to the voice-capable system, wherein each of the one or more entities are an institution or business with an internet presence, wherein the internet presence has had a prior interaction with the user, each of the one or more entities requiring the user to provide authentication to access the internet presence;

a logging module for obtaining one or more user interactions with the one or more entities from one or more internet sites known to have been visited by a user within a predetermined period of time the predetermined period of time being a function of a security level; and

an authentication generation module for generating an authentication session using data from the one or more entities, wherein the authentication session includes verifying the user access to the voice-capable system using the data from the authentication to access the internet presence.

37. The voice-capable system of claim 36 wherein the security module is coupled to the processor, located within the processor, and/or located in the memory.

38. The voice-capable system of claim 36 wherein the memory is one or more of a random access memory, a read only memory, an optical memory, or a subscriber identity module memory.

39. The voice-capable system of claim 36 wherein the audio input and/or output circuitry includes one or more of a microphone, a speaker, a transducer, and/or audio input and/or output circuitry.

40. The voice-capable system of claim 36 further comprising a housing coupled to the processor, the housing encasing the memory, the processor, and/or the audio input and/or output circuitry.