Method and system for multiple passcode generation

• US 8,613,065 B2
• Filed: 02/04/2011
• Issued: 12/17/2013
• Est. Priority Date: 02/15/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Hird, Geoffrey, Varadarajan, Rammohan, Reno, James D.
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US13/020,867
• Publication Number:
  US 20110202984A1
• Time in Patent Office: 1,047 Days
• Field of Search: 726/7, 713/171, 713183-184, 713/193
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention relates to a method and a system for generating user passcodes for each of a plurality of transaction providers from a mobile user device. A method and system for activating a plurality of passcode generators on a user device configured with a passcode application installed on the user device is provided. Each of the passcode generators may correspond to a different user account or transaction provider, such that each passcode generator provides a user passcode configured for the corresponding account or transaction provider. One or more of the passcode generators may include a passcode generating algorithm and a passcode key. Access to one or more of the passcode generators may require providing a PIN or a challenge.

Claims

1. A method for activating a plurality of passcode generators on a user device, comprising:

installing a passcode application on the user device;

receiving on the user device a first passcode generator defined by a first provider;

activating the first passcode generator on the user device using the passcode application;

obtaining a first passcode from the first passcode generator, wherein the first passcode is configured as a user passcode for a transaction between a user and a first provider;

receiving on the user device a second passcode generator defined by a second provider;

activating the second passcode generator on the user device using the passcode application;

obtaining a second passcode from the second passcode generator, wherein the second passcode is configured as a user passcode for a transaction between the user and the second provider; and

activating one of the first passcode generator and the second passcode generator to provide a third passcode configured as a user passcode for a transaction between the user and a third provider, using the passcode application;

obtaining the third passcode from the one of the first passcode generator and the second passcode generator.

2. The method of claim 1, wherein installing the passcode application includes installing at least one algorithm.

3. The method of claim 1, further comprising:

accessing the first provider interface via the user device and receiving information from the first provider interface, wherein the information is configured to activate the first passcode generator on the user device; and

accessing the second provider interface via the user device and receiving information from the second provider interface, wherein the information is configured to activate the second passcode generator on the user device.

4. The method of claim 3, wherein the information received includes a passcode key.

5. The method of claim 3, wherein the information received includes a passcode key, and wherein the passcode key is encrypted by cryptographically camouflaging the passcode key using the passcode application.

6. The method of claim 1,

wherein activating the first passcode generator includes activating at least one of a first algorithm and a first passcode key on the user device, wherein each of the first algorithm and the first password key is configured to generate the first passcode;

and

wherein activating the second passcode generator includes activating one of a second algorithm and a second passcode key on the user device, wherein each of the second algorithm and the second passcode key is configured to generate the second passcode.

7. The method of claim 6, further comprising:

activating a third passcode key on one of the first passcode generator and the second passcode generator, wherein the third passcode key is configured to generate a third passcode, and wherein the third passcode is configured as a user passcode for a transaction between the user and a third provider.

8. The method of claim 7, wherein one of the first algorithm and the second algorithm is configured as a non-standard algorithm.

9. The method of claim 1, further comprising:

inputting at least one PIN into the user device, wherein said at least one PIN is at least one of an access PIN to access the passcode application, a first PIN to obtain the first passcode, and a second PIN to obtain the second passcode.

10. The method of claim 9, wherein two or more of the access PIN, the first PIN and the second PIN are the same PIN.

11. The method of claim 1, further comprising one of inputting a challenge into the first passcode generator to obtain the first passcode, and inputting a challenge into the second passcode generator to obtain the second passcode.

12. A system for activating a plurality of passcode generators on a user device, the system including:

a passcode application configured to activate a plurality of passcode generators;

a user device configured to receive the passcode application;

a provisioning server configured to provide the passcode application to the user device;

a first provider interface configured to provide first passcode information;

a second provider interface configured to provide second passcode information;

a third provider interface configured to provide third passcode information;

a first passcode generator defined by the first provider interface and configured for activation on the user device;

a second passcode generator defined by the second provider interface and configured for activation on the user device;

wherein;

the user device is configured to communicate with the provisioning server;

at least one of the user device and the provisioning server are configured to communicate with each of the first provider server and the second provider server;

the passcode application uses the first passcode information to activate the first passcode generator on the user device such that the user can obtain a first passcode configured as a user passcode for a first provider;

the passcode application uses the second passcode information to activate the second passcode generator on the user device such that the user can obtain a second passcode configurable as a user passcode for a second provider; and

the passcode application uses the third passcode information to activate one of the first passcode generator and the second passcode generator such that the user can obtain a third passcode configured as a user passcode for a third provider.

13. The system of claim 12, further comprising:

at least one algorithm recorded on the user device;

wherein said at least one algorithm is one of a first algorithm executable by the passcode application on the user device to generate the first passcode and a second algorithm executable by the passcode application on the user device to generate said a second passcode.

14. The system of claim 12, further comprising:

wherein at least one of the first passcode information and the second passcode information includes at least one key; and

wherein the at least one key is at least one of a first key defined by the first provider and configured to generate the first passcode and a second key defined by the second provider and configured to generate the second passcode.

15. The system of claim 12, further including at least one PIN, wherein said at least one PIN is configured for input as one of an access PIN to access the passcode application, a first PIN to obtain the first passcode, and a second PIN to obtain the second passcode.

16. The system of claim 12, further including at least one challenge, wherein said at least one challenge is configured for input as one of a first challenge to obtain the first passcode, and a second challenge to obtain the second passcode.