Secure authentication mechanism using quick response codes

• US 9,659,163 B2
• Filed: 02/03/2016
• Issued: 05/23/2017
• Est. Priority Date: 02/12/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Sadacharam, Saravanan, Viswanathan, Ram
• Primary Examiner(s): Savusdiphol, Paultep
• Application Number:
  US15/014,606
• Publication Number:
  US 20160239655A1
• Time in Patent Office: 475 Days
• Field of Search: 235375, 235380
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A method of securing authentication of a user'"'"'s identity is disclosed. The method comprises the steps of: an authentication program of an entity receiving initiation of a transaction from a user; the authentication program searching for associated information of the user; the authentication program choosing an authentication query requiring input from the user based on the associated information; the authentication program generating a visual code representing the authentication query; the authentication program splitting the visual code into pieces; and the authentication program sending each piece of visual code to the user via a separate communication channel. A method of securing authentication of a user'"'"'s identity with an entity is also disclosed.

Claims

1. A computer system for securing authentication of a user'"'"'s identity comprising a computer comprising at least one processor, one or more memories, one or more computer readable storage media having program instructions executable by the computer to perform the program instructions comprising:

receiving, by the computer, initiation of a transaction from a user;

searching, by the computer, for associated information of the user;

choosing, by the computer, an authentication query requiring input from the user based on the associated information;

generating, by the computer, a visual code representing the authentication query;

splitting, by the computer, the visual code into pieces; and

sending, by the computer, each piece of visual code to the user via a separate communication channel.

2. The computer system of claim 1, further comprising the program instructions of:

receiving, by the computer, a visual code from a user containing user response to the authentication query;

reading, by the computer, the visual code to retrieve the user response; and

comparing, by the computer, the user response to the information associated with the user;

if the user response matches the information associated with the user, the authentication program authenticating the user.

3. The computer system of claim 2, in which the visual code sent by the user is sent in a plurality of visual pieces through multiple communication channels, further comprising the program instructions of reassembling, by the computer, the visual code from the plurality of visual code pieces.

4. The computer system of claim 1, wherein the visual code is a QR code.

5. The computer system of claim 1, wherein the authentication query comprises at least one question regarding the user.

6. The computer system of claim 1, wherein the authentication query comprises at least one request for a biometric reading of the user.

7. The computer system of claim 1, further comprising the program instructions of:

receiving, by the computer, data from a user containing user response to the authentication query; and

comparing, by the computer, the user response to the information associated with the user;

if the user response matches the information associated with the user, the authenticating, by the computer, the user.

8. A computer program product for securing authentication of a user'"'"'s identity with an entity comprising a device computer comprising at least one processor, one or more memories, one or more computer readable storage media, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by the device computer to perform a method comprising:

receiving, by the device computer, a plurality of visual code pieces through different communication channels;

reassembling, by the device computer, the visual code from the plurality of visual code pieces;

obtaining, by the device computer, the authentication query from the reassembled visual code and providing the authentication query to the user for input; and

receiving, by the device computer, a response from the user in response to the authentication query.

9. The computer program product of claim 8, further comprising program instructions of:

generating, by the device computer, a visual code representing the response received from the user; and

sending, by the device computer, the visual code to the entity from which the plurality of visual code pieces were received.

10. The computer program product of claim 9, wherein the visual code sent to the entity is comprised of a plurality of visual code pieces, and the program instructions of sending, by the device computer, the visual code to the entity is done through multiple communication channels.

11. The computer program product of claim 8, wherein the different communication channels are designated in an order by the user and wherein the plurality of visual code pieces are assembled together based on the order designated by the user.

12. A computer system for securing authentication of a user'"'"'s identity with an entity comprising a computer comprising at least one processor, one or more memories, one or more computer readable storage media having program instructions executable by the computer to perform the program instructions comprising:

receiving, by the device computer, a plurality of visual code pieces through different communication channels;

reassembling, by the device computer, the visual code from the plurality of visual code pieces;

obtaining, by the device computer, the authentication query from the reassembled visual code and providing the authentication query to the user for input; and

receiving, by the device computer, a response from the user in response to the authentication query.

13. The computer system of claim 12, further comprising program instructions of:

generating, by the device computer, a visual code representing the response received from the user; and

sending, by the device computer, the visual code to the entity from which the plurality of visual code pieces were received.

14. The computer system of claim 13, wherein the visual code sent to the entity is comprised of a plurality of visual code pieces, and the program instructions of sending, by the device computer, the visual code to the entity is done through multiple communication channels.

15. The computer system of claim 12, wherein the different communication channels are designated in an order by the user and wherein the plurality of visual code pieces are assembled together based on the order designated by the user.