Method for changing authentication for a legacy access interface

• US 9,032,498 B1
• Filed: 05/25/2014
• Issued: 05/12/2015
• Est. Priority Date: 05/25/2014
• Status: Expired due to Fees

• Current Assignee: Optima Direct, LLC (2S Ventures, LLC), Mourad Ben Ayed
• Original Assignee: Mourad Ben Ayed
• Inventors: Ben Ayed, Mourad
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US14/287,028
• Time in Patent Office: 352 Days
• Field of Search: 726 2- 5, 726/9, 713/168, 713/185
• US Class Current: 726/9
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and apparatus for changing authentication for a legacy access interface using an access adapter and a token device. The method enables to change authentication factors based on context and allows secure multi-user sharing of legacy applications.

Claims

1. A non-transitory, computer readable medium storing instructions that when executed by a processor cause it to perform a method for changing authentication for a legacy access interface utilizing an access adapter and at least one Bluetooth-enabled device, the method comprising:

by the access adapter;

detecting a user action or the presence of an object corresponding to a user request within a predetermined proximity of the access adapter;

automatically scanning Bluetooth devices within a pre-determined Bluetooth proximity of the access adapter;

determining if a Bluetooth-enabled device that has at least one stored digital key and that is authorized for access is within the pre-determined Bluetooth proximity of the access adapter;

transmitting a transaction request corresponding to a found Bluetooth-enabled device to the found Bluetooth-enabled device or to a database;

and the method further comprising;

by the found Bluetooth-enabled device;

obtaining the transaction request;

obtaining a user authorization;

authorizing the transaction request using an authorization application;

and the method further comprising;

by the access adapter;

automatically obtaining an access code corresponding to the found Bluetooth-enabled device from the found Bluetooth-enabled device or from the database;

performing an action selected from an action group consisting of;

automatically providing the access code directly from the access adapter to the legacy access interface, automatically keying in the access code to the legacy access interface, and automatically sending a Radio Frequency Identification signal comprising the access code to the legacy access interface;

and the method further comprising;

by the legacy access interface;

granting access to a user upon a successful verification of the access code.

2. A system for changing authentication for a legacy access interface, the system comprising a Bluetooth-enabled device and an access adapter hardware, the access adapter hardware comprising a processor, a proximity sensor, a Bluetooth transceiver, a WI-FI transceiver or a cellular transceiver, and a digital emulator;

the proximity sensor is configured to detect the presence of an object corresponding to a user request within a predetermined proximity of the access adapter hardware;

the Bluetooth transceiver is configured to scan Bluetooth devices within a pre-determined Bluetooth proximity of the access adapter hardware;

the WI-FI transceiver or cellular transceiver or Bluetooth transceiver is configured to transmit a transaction request corresponding to a found Bluetooth-enabled device that is authorized for access and that has at least one stored digital key, to the found Bluetooth-enabled device or to a database;

the found Bluetooth-enabled device is configured to request a user authorization and to authorize the transaction request using an authorization application;

the access adapter hardware is configured to automatically obtain an access code corresponding to the found Bluetooth-enabled device from the found Bluetooth-enabled device or from the database and to perform an action to enable access to a user at the legacy access interface, the action is selected from an action group consisting of;

automatically provide the access code directly from the access adapter hardware to the legacy access interface, automatically key in the access code to the legacy access interface device, and automatically send a Radio Frequency Identification signal comprising the access code to the legacy access interface device.

3. A method for changing authentication for a legacy access interface utilizing an access adapter and at least one Bluetooth-enabled device, the method comprising:

by the access adapter, the access adapter comprising hardware, software, or a combination of hardware and software;

detecting a user action or the presence of an object corresponding to a user request within a predetermined proximity of the access adapter;

automatically scanning Bluetooth devices within a pre-determined Bluetooth proximity of the access adapter;

determining if a Bluetooth-enabled device that has at least one stored digital key and that is authorized for access is within the pre-determined Bluetooth proximity of the access adapter;

transmitting a transaction request corresponding to a found Bluetooth-enabled device to the found Bluetooth-enabled device or to a database;

and the method further comprising;

by the found Bluetooth-enabled device;

obtaining the transaction request;

obtaining a user authorization;

authorizing the transaction request using an authorization application;

and the method further comprising;

by the access adapter;

automatically obtaining an access code corresponding to the found Bluetooth-enabled device from the found Bluetooth-enabled device or from the database;

performing an action selected from an action group consisting of;

automatically providing the access code directly from the access adapter to the legacy access interface, automatically keying in the access code to the legacy access interface, and automatically sending a Radio Frequency Identification signal comprising the access code to the legacy access interface;

and the method further comprising;

by the legacy access interface;

granting access to a user upon a successful verification of the access code.

4. The method of claim 3, wherein the action group further comprises:

automatically providing the access code to the legacy access interface, and

upon detecting the found Bluetooth-enabled device separating from the access adapter,

automatically sending an indication to a legacy application or automatically emulating a code or automatically displaying a lock screen.

5. The method of claim 3, wherein:

authorizing the transaction request comprises activating a display icon on the found Bluetooth-enabled device,

wherein the display icon corresponds to the authorization application.

6. The method of claim 3, further comprising:

requesting an adaptive authentication factor on the found Bluetooth-enabled device,

wherein the requested adaptive authentication factor changes dynamically depending on a transaction context selected from the group consisting of;

a current location, a current time, a user history, a device type, an issuing application and a transaction amount,

and wherein the adaptive authentication factor is selected from the group consisting of;

a knowledge factor, a possession factor and an inherence factor.

7. The method of claim 6, wherein:

the requested adaptive authentication factor for a first transaction is different from a second adaptive authentication factor requested for a different transaction with a different transaction context.

8. The method of claim 6, comprising:

obtaining a location information from the found Bluetooth-enabled device,

wherein if the location information is outside a pre-determined zone;

automatically changing the adaptive authentication factor to a possession factor or to an inherence factor.

9. The method of claim 3, further comprising:

issuing a transaction request to a user account on a remote server,

wherein the user account on the remote server corresponds to the found Bluetooth-enabled device;

and updating the transaction request using the authorization application on the found Bluetooth-enabled device.

10. The method of claim 9, further comprising:

updating the user account with a request from the access adapter;

updating the user account using the authorization application on the found Bluetooth-enabled device;

obtaining an authorization code corresponding to the found Bluetooth-enabled device at the access adapter;

and emulating the access code corresponding to the authorization code to the legacy access interface.

11. The method of claim 3, comprising:

storing an encrypted data in a user account on a remote server;

decrypting the encrypted data using the authorization application on the found Bluetooth-enabled device and using the at least one stored digital key;

and either displaying the decrypted data on the access adapter or emulating the access code corresponding to the decrypted data via the access adapter to the legacy access interface.

12. The method of claim 3, comprising:

encrypting data using a public key corresponding to a user account and storing it;

decrypting the encrypted data using the authorization application on the found Bluetooth-enabled device and a private key stored on the found Bluetooth-enabled device that corresponds to the public key;

and either display the decrypted data on the access adapter or use the access adapter to emulate the access code corresponding to the decrypted data to the legacy access interface.

13. The method of claim 12, comprising:

storing the encrypted data on the access adapter,

wherein detecting an object within a pre-determined proximity of the access adapter comprises detecting an object using infrared detection or detecting a user touch.

14. The method of claim 3, comprising:

encrypting at least two sets of data corresponding to at least two user accounts using at least two public keys and storing them on the access adapter;

storing an encrypted data corresponding to one of the encrypted at least two sets of data in a user account on a remote server using the access adapter;

decrypting the encrypted data using the authorization application on the found Bluetooth-enabled device corresponding to the one of the encrypted at least two sets of data and the private key corresponding to the public key of the one of the encrypted at least two sets of data;

and either displaying the decrypted data on the access adapter or using the access adapter to emulate the access code corresponding to the decrypted data to the legacy access interface.

15. The method of claim 3, wherein:

activation of the legacy access interface comprises an action selected from the group consisting of;

unlocking a door lock, unlocking a screen, logging in, authorizing a transaction and activating a motor.

16. The method of claim 3, comprising:

if the found Bluetooth-enabled device is more than a predetermined Bluetooth proximity distance from the access adapter, automatically cloaking data.

17. The method of claim 3, comprising:

storing at least two biometric reference information corresponding to at least two challenge questions on the found Bluetooth-enabled device;

displaying a challenge question that is different from a previously displayed challenge question;

obtaining a voice sample;

authenticating the voice sample using the stored biometric reference information corresponding to the displayed challenge question;

and if the authentication is successful, authorizing the transaction request.

18. The method of claim 3, wherein:

the access adapter is selected from the group consisting of;

a Radio Frequency Identification emulator, an application wrapper with keyboard emulation capabilities, an application plug-in with keyboard emulation capabilities, and a web page with emulation capabilities.

19. The method of claim 3, comprising:

obtaining configuration parameters from a user account on a remote server indicating an authentication factor corresponding to transaction context parameters;

and upon or after authorizing the transaction request using an authorization application on the found Bluetooth-enabled device;

obtaining the transaction context parameters,

applying the authentication factor corresponding to the transaction context parameters.

20. The method of claim 3, wherein:

obtaining configuration parameters from a user account on a remote server indicating an authentication factor corresponding to transaction context parameters or to a Bluetooth-enabled device;

upon detection of the Bluetooth-enabled device;

applying the authentication factor corresponding to the found Bluetooth-enabled device or corresponding to transaction context parameters.