Multi-channel multi-factor authentication

• US 9,338,006 B2
• Filed: 11/21/2012
• Issued: 05/10/2016
• Est. Priority Date: 05/13/2008
• Status: Active Grant

• Current Assignee: Francine CANI 2002 Living Trust
• Original Assignee: Ky Trix Ltd.
• Inventors: Headley, Paul
• Primary Examiner(s): Revak, Christopher
• Application Number:
  US13/683,940
• Publication Number:
  US 20130080789A1
• Time in Patent Office: 1,266 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Systems and methods for authenticating electronic transactions are provided. The authentication methods employ a combination of security features and communication channels. These security features can be based, for example, on unique knowledge of the person being authenticated, a unique thing that the person has, unique personal features and attributes of the person, the ability of the person to respond, and to do so in a fashion that a machine cannot, and so forth. Methods for enrolling the person prior to authentication are also provided, as well as systems for enrollment and authentication.

Claims

1. A computing system comprising:

a cell phone including

a screen;

a video camera having a field of view, disposed proximate to the screen, and configured such that a person viewing the screen will be within the field of view; and

logic configured to

communicate over a secure channel with an authentication system,

receive a video signal from the video camera and generate therefrom a first video stream that is encrypted and a second video stream that is not encrypted,

render the second video stream to the screen, and

transmit the first video stream over the channel to the authentication system.

2. The computing system of claim 1 wherein the logic is further configured to watermark the first video stream but not watermark the second video stream.

3. The computing system of claim 1 wherein the logic is further configured to receive a key over the secure channel and to determine the watermark based at least in part on the key.