Methods, systems, and products for authentication

• US 9,712,528 B2
• Filed: 05/31/2016
• Issued: 07/18/2017
• Est. Priority Date: 12/03/2007
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Gilboy, Christopher P.
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US15/168,337
• Publication Number:
  US 20160277402A1
• Time in Patent Office: 413 Days
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Multiple authentication procedures enhance security of Internet transactions. For example, a request is received from a customer to access a service. A first authentication request is sent to the customer for first authentication information. A second authentication request may be sent to the customer for second authentication information. The method then enables the customer to proceed with accessing the service if the second authentication information is received.

Claims

1. A method, comprising:

receiving, by a server, an electronic transaction, the electronic transaction associated with a network address;

querying, by the server, an electronic database for the network address associated with the electronic transaction, the electronic database electronically associating authentication procedures and network addresses including the network address associated with the electronic transaction;

identifying, by the server, two authentication procedures from the electronic database that are electronically associated with the network address, a first authentication procedure of the two authentication procedures specifying a first network, and a second authentication procedure of the two authentication procedures specifying a second network;

sending, by the server, a first authentication request via the first network to a device associated with the network address, the first authentication request associated with the first authentication procedure;

sending, by the server, a second authentication request via the second network to the device associated with the network address, the second authentication request associated with the second authentication procedure; and

authenticating, by the server, the electronic transaction in response to a verification of the second authentication procedure.

2. The method of claim 1, further comprising receiving a credit card number associated with the electronic transaction.

3. The method of claim 1, further comprising initiating a text message to a cellular telephone number.

4. The method of claim 1, further comprising sending a text message to a cellular telephone number.

5. The method of claim 1, further comprising sending a text message via a cellular network as the second network, the text message sent to a cellular telephone number associated with the device.

6. The method of claim 1, further comprising receiving a response associated with the first authentication request sent via the first network.

7. The method of claim 1, further comprising receiving a response associated with the second authentication request sent via the second network.

8. A system, comprising:

a processor; and

a memory device, the memory device storing code, the code when executed causing the processor to perform operations, the operations comprising;

receiving a request associated with a transaction, the transaction associated with a device, the device associated with a network address;

querying an electronic database for the network address associated with the device, the electronic database electronically associating authentication procedures and network addresses including the network address associated with the device;

identifying two authentication procedures from the electronic database that are electronically associated with the network address, a first authentication procedure of the two authentication procedures specifying a first network, and a second authentication procedure of the two authentication procedures specifying a second network;

sending a first authentication request via the first network to the device, the first authentication request associated with the first authentication procedure;

sending a second authentication request via the second network to the device, the second authentication request associated with the second authentication procedure; and

authenticating the transaction in response to a verification of the second authentication procedure.

9. The system of claim 8, wherein the operations further comprise receiving a credit card number associated with the transaction.

10. The system of claim 8, wherein the operations further comprise initiating a text message to a cellular telephone number associated with the device.

11. The system of claim 8, wherein the operations further comprise sending a text message to a cellular telephone number associated with the device.

12. The system of claim 8, wherein the operations further comprise sending a text message via a cellular network as the second network, the text message sent to a cellular telephone number associated with the device.

13. The system of claim 8, wherein the operations further comprise receiving a response associated with the first authentication request sent via the first network.

14. The system of claim 8, wherein the operations further comprise receiving a response associated with the second authentication request sent via the second network.

15. A memory device storing instructions that when executed cause a processor to perform operations, the operations comprising:

receiving a request associated with a transaction, the transaction associated with a device, the device associated with a network address;

querying an electronic database for the network address associated with the device, the electronic database electronically associating authentication procedures and network addresses including the network address associated with the device;

identifying two authentication procedures in the electronic database that are electronically associated with the network address, a first authentication procedure of the two authentication procedures specifying a first network, and a second authentication procedure of the two authentication procedures specifying a second network;

sending a first authentication request via the first network to the device, the first authentication request associated with the first authentication procedure;

sending a second authentication request via the second network to the device, the second authentication request associated with the second authentication procedure; and

authenticating the transaction in response to a verification of the second authentication procedure.

16. The memory device of claim 15, wherein the operations further comprise receiving a credit card number associated with the transaction.

17. The memory device of claim 15, wherein the operations further comprise initiating a text message to a cellular telephone number associated with the device.

18. The memory device of claim 15, wherein the operations further comprise sending a text message to a cellular telephone number associated with the device.

19. The memory device of claim 15, wherein the operations further comprise sending a text message via a cellular network as the second network, the text message sent to a cellular telephone number associated with the device.

20. The memory device of claim 15, wherein the operations further comprise receiving a response associated with the second authentication request sent via the second network.