Systems and methods for authentication and verification

• US 8,677,116 B1
• Filed: 08/09/2013
• Issued: 03/18/2014
• Est. Priority Date: 11/21/2012
• Status: Active Grant

• Current Assignee: Series 111 of Allied Security Trust I (Allied Security Trust)
• Original Assignee: Jack Bicer
• Inventors: Bicer, Jack
• Primary Examiner(s): Khoshnoodi, Nadia
• Assistant Examiner(s): LEUNG, ROBERT B
• Application Number:
  US13/963,941
• Time in Patent Office: 221 Days
• Field of Search: None
• US Class Current: 713/155
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Computer systems and methods are provided for authenticating a user seeking to conduct at least one interaction with a secured capability provided by a computer. The method includes receiving a first signal from the computer providing the secured capability. The first signal includes a reusable identifier corresponding to the secured capability. The method further includes receiving a second signal from an electronic device being used by the user. The second signal includes a copy of the reusable identifier and user verification information. The method further includes using a processor to evaluate, based at least on the first signal and the second signal, whether the user is authorized to conduct the at least one interaction with the secured capability. The method further includes, in response to an indication from the processor that the user is authorized to conduct the at least one interaction with the secured capability, transmitting a third signal including authorization information to at least one of the electronic device and the computer.

Claims

1. A method of using a computer system to authenticate a user seeking to conduct at least one interaction with a secured capability provided by a computer, the method comprising:

using the computer system to receive a first signal from the computer providing the secured capability, the first signal comprising a reusable identifier corresponding to the secured capability, the reusable identifier assigned for use by the secured capability for a finite period of time;

using the computer system to receive a second signal from an electronic device being used by the user, the second signal comprising a copy of the reusable identifier and user verification information;

using a processor of the computer system to evaluate, based at least on the first signal and the second signal, whether the user is authorized to conduct the at least one interaction with the secured capability; and

in response to an indication from the processor that the user is authorized to conduct the at least one interaction with the secured capability, using the computer system to transmit a third signal comprising authorization information to at least one of the electronic device and the computer.

2. The method of claim 1, wherein the reusable identifier does not contain user-specific or interaction-specific information.

3. The method of claim 1, wherein the computer is configured to transmit a fourth signal to a second electronic device being used by the user, the fourth signal comprising the reusable identifier, the second electronic device configured to present the reusable identifier to the user as an encoded visual or auditory identifier configured to be detected by the electronic device and decoded by a program executed by the electronic device to yield the copy of the reusable identifier.

4. The method of claim 3, wherein the second electronic device comprises a visual display and the visual or auditory identifier comprises a QR code.

5. The method of claim 3, wherein the at least one interaction comprises opening a lock selectively inhibiting physical access to a region within a safe, building, or vehicle.

6. The method of claim 3, wherein the at least one interaction comprises retrieval of information from a secured internet portal.

7. The method of claim 3, wherein the at least one interaction comprises a purchase, the first signal further comprises invoice information corresponding to the purchase, the third signal further comprises the invoice information and is transmitted to the electronic device, and the method further comprises receiving, from the electronic device, a confirmation of a payment or payment information corresponding to the purchase by the user.

8. The method of claim 7, wherein the method further comprises transmitting to the computer shipping information for delivery corresponding to the purchase.

9. The method of claim 1, wherein the reusable identifier is transmitted to the user on a printed page as a visual identifier configured to be detected by the electronic device and decoded by a program executed by the electronic device to yield the copy of the reusable identifier.

10. The method of claim 1, wherein using the processor to evaluate whether the user is authorized to conduct the at least one interaction with the secured capability is based at least on a time differential between receiving the first signal and receiving the second signal.

21. The method of claim 1, wherein the computer system comprises the computer providing the secured capability.

11. A computer system for authenticating users seeking to conduct interactions with a plurality of secured capabilities, the computer system comprising:

a first input configured to receive a plurality of first signals from a plurality of computers, each computer of the plurality of computers providing at least one secured capability of the plurality of secured capabilities, each first signal of the plurality of first signals comprising a reusable identifier corresponding to a secured capability of the plurality of secured capabilities, the reusable identifier assigned for use by the secured capability for a finite period of time;

a second input configured to receive a plurality of second signals from a plurality of electronic devices being used by the users, each second signal of the plurality of second signals comprising a copy of a reusable identifier and user verification information;

a storage device comprising;

a first association of each secured capability of the plurality of secured capabilities with at least one corresponding reusable identifier; and

a second association of the user verification information with corresponding verified users authorized to access at least one secured capability of the plurality of secured capabilities;

a processor configured to evaluate, based at least on a first signal received from a computer of the plurality of computers and a second signal received from an electronic device of the plurality of electronic devices, whether a user of the electronic device is authorized to conduct at least one interaction with a secured capability provided by the computer and corresponding to the reusable identifier; and

an output configured to transmit a third signal comprising authorization information to at least one of the electronic device and the computer providing the secured capability corresponding to the reusable identifier, if the user of the electronic device is authorized to conduct the at least one interaction with the secured capability corresponding to the reusable identifier.

12. The system of claim 11, wherein the processor is configured to evaluate, based at least on user verification information of the second signal, whether the user of the electronic device is a verified user.

13. The system of claim 11, wherein the processor is further configured to evaluate, based at least on a time differential between receipt of the first signal by the first input and receipt of the second signal by the second input, whether the user is authorized to conduct the at least one interaction with the secured capability corresponding to the reusable identifier.

14. The system of claim 11, wherein the processor is further configured to use the first association and the reusable identifier to identify the secured capability that the user is attempting to access.

15. The system of claim 14, wherein the processor is further configured to use the second association and the user verification information of the second signal received by the second input to determine whether the user is a verified user.

16. The system of claim 11, wherein the reusable identifier does not contain user-specific or interaction-specific information.

17. The system of claim 11, wherein the at least one interaction comprises a purchase, and the first signal further comprises invoice information corresponding to the purchase, wherein the system further comprises a second output configured to transmit the invoice information to the electronic device.

18. The system of claim 17, wherein the second input is further configured to receive a fourth signal from the electronic device comprising a confirmation of a payment or payment information corresponding to the purchase by the user, and the output is configured to transmit the confirmation to the computer.

19. The system of claim 18, wherein the output is further configured to transmit to the computer shipping information for delivery corresponding to the purchase.

22. The computer system of claim 11, wherein the computer system comprises the computer providing the secured capability.

20. A non-transitory computer storage having stored thereon a computer program that instructs a computer system to authenticate a user seeking to conduct at least one interaction with a secured capability provided by a computer by at least:

receiving a first signal from the computer providing the secured capability, the first signal comprising a reusable identifier corresponding to the secured capability, the reusable identifier assigned for use by the secured capability for a finite period of time;

receiving a second signal from an electronic device being used by the user, the second signal comprising a copy of the reusable identifier and user verification information;

using a processor to evaluate, based at least on the first signal and the second signal, whether the user is authorized to conduct the at least one interaction with the secured capability; and

in response to an indication from the processor that the user is authorized to conduct the at least one interaction with the secured capability, transmitting a third signal comprising authorization information to at least one of the electronic device and the computer.