Network authentication of multiple profile accesses from a single remote device

• US 9,787,689 B2
• Filed: 07/08/2016
• Issued: 10/10/2017
• Est. Priority Date: 02/27/2014
• Status: Active Grant

• Current Assignee: Cullen/Frost Bankers, Inc.
• Original Assignee: Cullen/Frost Bankers, Inc.
• Inventors: Stead, James M., Muthukrishnan, Arun, Johnson, Michael R., Rivera, Laurie A., Bilyeu, Selina D.
• Primary Examiner(s): ZHAO, DON GORDON
• Application Number:
  US15/205,375
• Publication Number:
  US 20160323290A1
• Time in Patent Office: 459 Days
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A network authentication system and method is described for authenticating multiple profile accesses from a single remote device. A device remote from a web server, yet connected to the web server via, for example, the Internet, can allow multiple users to register their profiles within the device. The profiles are registered using a pre-existing user ID and password corresponding to, for example, the user'"'"'s financial accounts. Multiple profiles and, specifically, the indicia of those profiles, can appear on the display of the remote device allowing each user the ability to select their own registered profile. Access to a profile is granted when the user enters their private PIN. Once the PIN is entered, the private information such as financial account information will be securely forwarded from the web server to the remote device.

Claims

1. A web server configured for communicating with a communication network and for receiving requests for information from a device communicatively linked to the web server via the communication network, said web server comprising:

a memory containing two software tokens and respective two user profiles, said two profiles comprising two separate financial accounts of a single user or financial accounts of two separate users;

an execution unit coupled to the memory for drawing instructions therefrom and, in response to said instructions, for;

(i) receiving two one-time passwords in a request message from the device over the same said communication network;

(ii) determining if correspondence exists between each of the respective two one-time passwords received from the device over the same said communication network and each of the two software tokens stored in the memory; and

(iii) sending the respective two user profiles when correspondence exists between each of the two one-time passwords and each of the two software tokens.

2. The web server according to claim 1, wherein the communication network is the Internet.

3. The web server according to claim 1, wherein the two one-time passwords are not stored in the memory and expire from the request message after a configurable timeout.

4. The web server according to claim 1, wherein the request message is for a request of either the two separate financial accounts or the financial accounts of two separate users, each having a corresponding, unique one of the two software tokens.