Systems and methods for secure logon

• US 9,876,789 B1
• Filed: 04/03/2015
• Issued: 01/23/2018
• Est. Priority Date: 02/26/2010
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Buckingham, Thomas B., Davey, Richard A., Sanclemente, Tammy, Johnson, Ryan M., Leatham, Adam J., Wilkinson, Christopher Thomas
• Primary Examiner(s): Plecha, Thaddeus
• Application Number:
  US14/678,178
• Time in Patent Office: 1,026 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present disclosure provides methods and systems for secure logon. One or more method includes: determining, via authentication information provided by a user of an electronic device, that the user is authorized to access an online account provided by the online account provider; providing the user with a selectable option to enable an expedited logon process by which the user can access the online account by solely providing a particular authentication item of the user; receiving a verification credential in response to a next logon attempt using the expedited logon process; and verifying that the received verification credential matches an assigned verification credential provided to the user for use in conjunction with the next logon attempt using the expedited logon process.

Claims

1. A system, comprising:

a processor; and

memory coupled to the processor, the memory storing instructions that cause the processor executing the instructions to effectuate operations comprising;

receiving authentication information from a device to grant access to an online account and authorize a login from the device;

during access to the online account;

providing a selectable option to enable an expedited logon process by which the online account can be accessed by providing a particular authentication item and an assigned verification credential, wherein the assigned verification credential is assigned to the online account;

receiving a selection to enable the expedited logon process; and

sending the assigned verification credential to the device; and

during each logon attempt from the device;

receiving an authentication item from the device;

verifying that the authentication item matches the particular authentication item;

receiving a verification credential from the device;

verifying that the verification credential matches the assigned verification credential;

in response to verifying the authentication item and the verification credential, providing access to the online account; and

sending an updated assigned verification credential to the device for verification of the device during a subsequent logon attempt.

2. The system of claim 1, wherein the authentication information comprises an online username, password, social security number, account number, or answers to security questions.

3. The system of claim 1, wherein the particular authentication item comprises a biometric item.

4. The system of claim 1, wherein the assigned verification credential is provided to the device via a third party subsystem.

5. The system of claim 1, wherein the particular authentication item comprises a personal identification number (PIN).

6. The system of claim 1, wherein the assigned verification credential comprises a soft token.

7. The system of claim 1, wherein the device is a laptop computer, personal digital assistant, cellular telephone, or a smart phone.

8. A method, comprising:

receiving authentication information from a device to grant access to an online account and authorize a log in from the device;

during access to the online account;

providing a selectable option to enable an expedited logon process by which the online account can be accessed by providing a particular authentication item and an assigned verification credential, wherein the assigned verification credential is assigned to the online account;

receiving a selection to enable the expedited logon process, and

sending the assigned verification credential to the device; and

during each logon attempt from the device;

receiving an authentication item from the device,

verifying that the authentication item matches the particular authentication item,

receiving a verification credential from the device,

verifying that the verification credential matches the assigned verification credential,

in response to verifying the authentication item and the verification credential, providing access to the online account, and

sending an updated assigned verification credential to the device for verification of the device during a subsequent logon attempt.

9. The method of claim 8, wherein the authentication information comprises an online username, password, social security number, account number, or answers to security questions.

10. The method of claim 8, wherein the particular authentication item comprises a biometric item.

11. The method of claim 8, wherein the assigned verification credential is provided to the device via a third party subsystem.

12. The method of claim 8, wherein the particular authentication item comprises a personal identification number (PIN).

13. The method of claim 8, wherein the assigned verification credential comprises a soft token.

14. The method of claim 8, wherein the device is a laptop computer, personal digital assistant, cellular telephone, or a smart phone.

15. A non-transitory computer-readable medium comprising computer-executable instructions that, when executed by a processor, cause the processor to effectuate operations comprising:

receiving authentication information from a device to grant access to an online account and authorize a log in from the device;

during access to an online account;

providing a selectable option to enable an expedited logon process by which the online account can be accessed by providing a particular authentication item and an assigned verification credential, wherein the assigned verification credential is assigned to the online account,

receiving a selection to enable the expedited logon process, and

sending the assigned verification credential to the device; and

during each logon attempt from the device;

receiving an authentication item from the device,

verifying that the authentication item matches the particular authentication item,

receiving a verification credential from the device,

verifying that the verification credential matches the assigned verification credential,

in response to verifying the authentication item and the verification credential, providing access to the online account, and

sending an updated assigned verification credential to the device for verification of the device during a subsequent logon attempt.

16. The non-transitory computer-readable medium of claim 15, wherein the authentication information comprises an online username, password, social security number, account number, or answers to security questions.

17. The non-transitory computer-readable medium of claim 15, wherein the particular authentication item comprises a biometric item.

18. The non-transitory computer-readable medium of claim 15, wherein the assigned verification credential is provided to the device via a third party subsystem.

19. The non-transitory computer-readable medium of claim 15, wherein the particular authentication item comprises a personal identification number (PIN).

20. The non-transitory computer-readable medium of claim 15, wherein the assigned verification credential comprises a soft token.