Method for mobile security via multi-factor context authentication

• US 8,935,769 B2
• Filed: 03/14/2013
• Issued: 01/13/2015
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: LiveEnsure, Inc.
• Original Assignee: LiveEnsure, Inc.
• Inventors: Hessler, Christian J.
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/803,796
• Publication Number:
  US 20140096215A1
• Time in Patent Office: 670 Days
• Field of Search: 726/7
• US Class Current: 726/7
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

The present invention is a system and a method for improving the authentication security across a network from a mobile electronic computing device in the context of one or more users, devices, sites/sessions, servers, locations, proximity, motion and/or behavioral attributes within a defined session lifecycle. The authentication method and system utilizes a strong, elegant, private, definitive and real-time, triangulated verification, which requires mutual authentication between the parties.

Claims

1. A computer-based multi-factor user authentication method across a mobile network, the steps comprising:

providing a server and one or more applications,

wherein said server includes a profile algorithm;

receiving a request for an access to a host by a main user at a presentation over a user channel;

receiving a requesting said-serve to perform a context verification decision from said host over a host channel;

creating two or more template objects by said profile algorithm of said server;

wherein said two or more template objects are a first template and a second template;

sending an code object to said host over said host channel by said server;

wherein said code object is presented to a device of said main user at said presentation and over said user channel by said host;

wherein said device comprises said one or more applications;

wherein said code object triggers said one or more applications to contact said server, such that said server and said one or more applications mutually interrogate each other, such that one or more one-time signatures are algorithmically computed;

processing said first template by said server;

wherein said processing step of said first template is based upon one or more contextual factors;

populating said first template by said server;

creating and storing a first signature by said server;

wherein said creating step of said first signature is based upon said processing step of said first template;

wherein said code object is consumed by said main user on said device through said one or more applications;

requesting said second template on said server over a smart channel by said one or more applications;

sending said second template to said one or more applications on said device over said smart channel by said server;

processing said second template by said one or more applications;

populating said second template by said one or more applications;

creating and storing a second signature by said one or more applications;

wherein said creating step of said second signature is based upon said second template; and

performing said context verification decision when comparing said first signature and said second signature over said smart channel.

2. The computer-based method of claim 1,

wherein one or more additional external factors are provided to said device by said host over said out-of-band channel.

3. The computer-based method of claim 1, the steps further comprising:

deleting said one or more contextual factors by said server.

4. The computer-based method of claim 1, wherein said processing step of said second template is performed based upon one or more contextual factors.

5. The computer-based method of claim 1, wherein said creating and storing step of said first signature is based upon said consuming step of said code object.

6. The computer-based method of claim 1, wherein said creating and storing step of said first signature is based upon said processing step of said second template.

7. The computer-based method of claim 1,

wherein one or more out-of-band data is inputted into said one or more applications;

wherein said one or more out-of-band data is transmitted over said out-of-band channel.

8. The computer-based method of claim 1, wherein said comparing step of said first signature and said second signature is performed by said server.

9. The computer-based method of claim 1, wherein said comparing step of said first signature and said second signature is performed by said one or more applications.

10. The computer-based method of claim 1, the steps further comprising:

authenticating said device when said first signature is essentially identical to said second signature.

11. A computer-based multi-factor user authentication method across a mobile network, the steps comprising:

providing a-hose a server and one or more applications,

wherein said server includes a profile algorithm;

receiving a request for an access to a host by a main user at a presentation over a user channel;

receiving a request said-serve to perform a context verification decision from said host over a host channel;

creating a first template and a second template by said profile algorithm of said server;

sending an code object to said host over said host channel by said server;

wherein said code object is presented to a device of said main user at said presentation and over said user channel by said host;

wherein said device comprises said one or more applications;

wherein said code object triggers said one or more applications to contact said server, such that said server and said one or more applications mutually interrogate each other, such that one or more one-time signatures are algorithmically computed;

processing said first template by said server;

wherein said processing step of said first template is based upon a first set of one or more contextual factors;

populating said first template by said server;

creating and storing a first signature by said server;

wherein said creating step of said first signature is based upon said processing step of said first template;

wherein said code object is consumed by said main user on said device through said one or more applications;

requesting said second template of said server over a smart channel by said one or more applications;

sending said second template to said one or more applications on said device over said smart channel by said server;

processing said second template by said one or more applications;

populating said second template by said one or more applications;

creating and storing a second signature by said one or more applications;

wherein said creating step of said second signature is based upon said second template;

performing said context verification decision when comparing said first signature and said second signature over said smart channel; and

authenticating said device when said first signature is identical to said second signature.

12. The computer-based method of claim 11,

wherein one or more additional external factors are provided to said device by said host over said out-of-band channel.

13. The computer-based method of claim 12, the steps further comprising:

deleting said one or more contextual factors by said server.

14. The computer-based method of claim 13, wherein said processing step of said second template is performed based upon a second set of one or more contextual factors.

15. The computer-based method of claim 14, wherein said creating and storing step of said first signature is based upon said consuming of said code object.

16. The computer-based method of claim 15, wherein said creating and storing step of said first signature is based upon said processing step of said second template.

17. The computer-based method of claim 16, the steps further comprising:

wherein one or more out-of-band data is inputted into said one or more applications;

wherein said one or more out-of-band data is transmitted over said out-of-band channel.

18. The computer-based method of claim 17, wherein said comparing step of said first signature and said second signature is performed by said server.

19. The computer-based method of claim 18, wherein said comparing step of said first signature and said second signature is performed by said one or more applications.

20. A computer-based multi-factor user authentication method across a mobile network, the steps comprising:

providing a server and one or more applications,

wherein said server includes a profile algorithm;

receiving a request for an access to a host by a main user at a presentation over a user channel;

receiving a request said-serve to perform a context verification decision from said host over a host channel;

creating a first template and a second template by said profile algorithm of said server;

sending an code object to said host over said host channel by said server;

wherein said code object is presented to a device of said main user at said presentation and over said user channel by said host;

wherein said device comprises said one or more applications;

wherein said code object triggers said one or more applications to contact said server, such that said server and said one or more applications mutually interrogate each other, such that one or more one-time signatures are algorithmically computed;

processing said first template by said server;

wherein said processing step of said first template is based upon one or more contextual factors;

populating said first template by said server;

creating and storing a first signature by said server;

wherein said creating step of said first signature is based upon said processing step of said first template;

wherein said code object is consumed by said main user on said device through said one or more applications;

wherein said creating and storing step of said first signature is based upon said consuming of said code object;

requesting said second template of said server over a smart channel by said one or more applications;

sending said second template to said one or more applications on said device over said smart channel by said server;

processing said second template by said one or more applications;

wherein said processing step of said second template is based upon of one or more contextual factors;

populating said second template by said one or more applications;

creating and storing a second signature by said one or more applications;

deleting said one or more contextual factors by said server;

wherein said creating step of said second signature is based upon said second template;

performing said context verification decision when comparing said first signature and said second signature over said smart channel by said server and said one or more applications; and

authenticating said device when said first signature is identical to said second signature.