Call authentification methods and systems

• US 9,325,839 B2
• Filed: 07/24/2012
• Issued: 04/26/2016
• Est. Priority Date: 07/25/2011
• Status: Active Grant

• Current Assignee: EMUE Limited
• Original Assignee: EMUE Holdings Pty Limited
• Inventors: Bender, Jason Frederick, Lenon, James Evan, McKeegan, Brendan Thomas
• Primary Examiner(s): TIEU, BINH KIEN
• Application Number:
  US14/235,003
• Publication Number:
  US 20150063552A1
• Time in Patent Office: 1,372 Days
• Field of Search: 379/93.02, 379/93.03, 379/142.05, 379/201.02, 379/201.08, 379/207.11, 379/207.13, 379/207.15, 379/245, 379/142.06
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04M 2203/6081 Service authorization mechanisms
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier

Abstract

A system and method of authenticating a calling party to a remote service, including receiving a request via a communications network to approve a future call to the remote service using a calling identifier associated with the calling party, recording an approval of the future call subject to the future call being made within a predetermined period of time, the remote service receiving a call at a point in time using a calling identifier, determining if a call at that point in time using the received calling identifier is recorded as approved by the authentication system, and, if so, the remote service accepting the call and using the approval of the authentication system to authenticate the calling party.

Claims

1. A method comprising:

an authentication system receiving a request via a communications network to approve a future call to the remote service using a calling identifier associated with the calling party,

the authentication system recording an approval of the future call subject to the future call being made within a predetermined period of time,

the remote service receiving a call at a point in time using a calling identifier,

determining if a call at that point in time using the received calling identifier is recorded as approved by the authentication system,

if so, the remote service accepting the call and using the approval of the authentication system to authenticate the calling party,

before approving the future call for the predetermined period of time,

the authentication system receiving a calling party authentication code from the calling party via the communications network,

the authentication system determining whether the calling party authentication code authenticates the calling party, and

recording the approval of the future call for the predetermined period of time only if the calling party authentication code authenticates the calling party.

2. A method of claim 1, wherein the calling party authentication code is a one time password generated using a code generation algorithm based on a shared secret key.

3. A method of claim 2, wherein the code generation algorithm is further based on user entered information associated with the calling party.

4. A method according claim 1, further including:

the authentication system communicating a remote service authentication code to the calling party via the communications network, the remote service authentication code enabling the calling party to authenticate the remote service.

5. A method according claim 1, further including:

after recording the approval of the future call for a predetermined period of time,

the authentication system generating a session identifier for identifying the future call,

the authentication system associating the session identifier with the calling identifier, and

the authentication system communicating the session identifier to the calling party via the communications network.

6. A method according to claim 5, further including:

determining whether the received session identifier correlates correctly with a session identifier associated with the received calling identifier at the authentication system,

the remote service further using the result of the determination to authenticate the calling party making the call using the received calling identifier.

7. A method according to claim 6, wherein the call to the remote service is received via a different communications network to the request to approve the future call.

8. A method according to claim 7, wherein the request to approve the future call is received via the internet and the call to the remote service is received via a mobile phone network.

9. A method according claim 1, wherein the remote service receiving a call at a point in time using a calling identifier further includes the remote service receiving a session identifier.

10. A method according to claim 9, wherein the session identifier and calling identifier are received via the communications network as part of a same communications transmission.

11. A method according to claim 9, wherein the received session identifier is signed by the calling party.

12. A method according claim 1, wherein the request to approve the future call includes the calling identifier associated with the calling party.

13. A method according claim 1, wherein the request to approve the future call is received from a calling device having the calling identifier.

14. A method according to claim 13, wherein the request to approve the future call includes information relating to the calling device.

15. A method comprising:

an authentication system receiving a request via a communications network to approve a future call to the remote service using a calling identifier associated with the calling party,

the authentication system recording an approval of the future call subject to the future call being made within a predetermined period of time,

the remote service receiving a call at a point in time using a calling identifier,

determining if a call at that point in time using the received calling identifier is recorded as approved by the authentication system,

if so, the remote service accepting the call and using the approval of the authentication system to authenticate the calling party,

wherein the request to approve the future call is received from a calling device having the calling identifier,

wherein the request to approve the future call includes information relating to the calling device,

determining a risk score for the future call based on the information relating to the calling device, and

the remote service using the risk score to authenticate the calling party making the call using the received calling identifier.

16. A method according to claim 15, further including:

communicating a calling party authentication code to the authentication system via the communications network, the calling party authentication code enabling the authentication service to authenticate the calling party.

17. A method according to claim 16, further including:

generating the calling party authentication code using a code generation algorithm based on a shared secret key.

18. A method according to claim 17, further including:

receiving information entered by the calling party,

wherein the code generation algorithm is based on the calling party entered information as well as the shared secret key.

19. A method according to claim 15, further including:

receiving a remote service authentication code,

determining whether the remote service authentication code authenticates the remote service.

20. A method according to claim 15, further including:

receiving a session identifier for identifying the future call, and

communicating the session identifier with the call to the remote service.

21. A method according to claim 20, further including:

before communicating the session identifier, digitally signing the session identifier.

22. An authentication system including:

a communications port,

a processor,

a memory, and

software resident in memory accessible to the processor, the software including a series of instructions executable by the processor to carry out a method of authenticating a calling party to a remote service, including;

receiving a request to approve a future call to the remote service using a calling identifier associated with the calling party,

recording an approval of the future call subject to the call being made within a predetermined period of time,

receiving a request from a remote service to approve a call made at a point in time using a received calling identifier,

determining if a call at that point in time using the received calling identifier is recorded as approved, and

communicating the result of the determination to the remote service.