DTMF token for automated out-of-band authentication

• US 9,813,905 B2
• Filed: 10/14/2013
• Issued: 11/07/2017
• Est. Priority Date: 10/14/2013
• Status: Active Grant

• Current Assignee: US Bank National Association (US Bancorp)
• Original Assignee: US Bank National Association (US Bancorp)
• Inventors: Grosby, Sam
• Primary Examiner(s): Sarwar, Babar
• Application Number:
  US14/053,437
• Publication Number:
  US 20150105046A1
• Time in Patent Office: 1,485 Days
• Field of Search: 455411, 455418-4221, 4554561, 4554122, 713168, 713155, 726 5, 726 10
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Methods, systems, and media for facilitating an automatic out-of-band authentication process that includes a DTMF token. The process involves receiving an authentication token via one network and automatically sending the token back through a different network. In some cases, the process may be performed without the need for any human interaction. One of the tokens is a DTMF signal that may be sent on its own or during a voice communication session over the audio path established for the session.

Claims

1. An out-of-band authentication method comprising:

a processor receiving a first signal indicative of an authentication token via a first communication network;

in response to receiving the signal, the processor automatically generating a second signal that is indicative of the authentication token without input through a user-interface, wherein the second signal is suitable for transmission over a second communication network, and wherein one of the first signal or the second signal is a dial-tone multi-frequency (DTMF) signal;

the processor automatically transmitting the second signal via the second communication network,

wherein the first signal is received during a voice-communication session and wherein the second signal is transmitted without substantially interrupting the voice-communication session, wherein the second signal is the DTMF signal, and wherein transmitting the second signal comprises playing the DTMF signal on a voice-communication path of the voice-communication session,

wherein the first signal is the DTMF signal, and wherein receiving the first signal comprises detecting the DTMF signal from an audio signal received as part of the voice-communication session.

2. The method of claim 1, wherein the authentication token comprises an alphanumeric code, and wherein the first signal is a text message containing the alphanumeric code.

3. The method of claim 1, wherein the authentication token is an alphanumeric code, and wherein the DTMF signal is a series of tones that would result from physical entry of the alphanumeric code on a touch-tone phone.

4. The method of claim 1, further comprising the processor transmitting a request for the authentication token.

5. The method of claim 4, wherein the transmitted request comprises a network location associated with the processor.

6. The method of claim 1, wherein no user-input associated with the out-of-band authentication method is required between receiving the first signal and transmitting the second signal.

7. The method of claim 1, wherein the first signal comprises indicia of a network location on the second communication network, wherein the network location is associated with an authentication server.

8. The method of claim 7, wherein the network location is a telephone number for the server.

9. The method of claim 1, wherein the first signal comprises instructions for automatic response through an interactive voice response system.

10. A non-transitory computer-readable medium having stored thereon instructions executable by a processor to cause a computing device to perform functions comprising:

receiving a first signal indicative of an authentication token via a first communication network;

in response to receiving the signal, automatically generating a second signal that is indicative of the authentication token without input through a user-interface, wherein the second signal is suitable for transmission over a second communication network different from the first communication network, and wherein one of the first signal or the second signal is a dial-tone multi-frequency (DTMF) signal; and

automatically transmitting the second signal via the second communication network,

wherein the first signal is received during a voice-communication session and wherein the instructions are executable to cause transmission of the second signal without ending the voice-communication session, wherein the second signal is the DTMF signal, and wherein transmitting the second signal comprises playing the DTMF signal on a voice-communication path of the voice-communication session.

11. The non-transitory computer-readable medium of claim 10 , wherein no user-input associated with the performed functions is requested between receiving the first signal and transmitting the second signal.

12. A system comprising:

a first communication interface configured to communicate on a first communication network;

a second communication interface configured to communicate on a second communication network different than the first communication network;

a processor configured to perform functions comprising;

receiving a first signal indicative of an authentication token via the first communication interface;

in response to receiving the signal, automatically generating a second signal that is indicative of the authentication token without input through a user-interface, wherein the second signal is suitable for transmission through the second communication interface, and wherein one of the first signal or the second signal is a dial-tone multi-frequency (DTMF) signal; and

automatically transmitting the second signal via the second communication network,

wherein the first signal is received during a voice-communication session and wherein the instructions are executable to cause transmission of the second signal without ending the voice-communication session, wherein the second signal is the DTMF signal, and wherein transmitting the second signal comprises playing the DTMF signal on a voice-communication path of the voice-communication session.

13. The system of claim 12, wherein no user-input associated with the performed functions is requested between receiving the first signal and transmitting the second signal.