Methods and systems for authenticating users

• US 10,320,782 B2
• Filed: 08/25/2017
• Issued: 06/11/2019
• Est. Priority Date: 08/05/2009
• Status: Active Grant

• Current Assignee: Corporation DAON Technology
• Original Assignee: Daon Holdings Limited
• Inventors: White, Conor Robert, Peirce, Michael, Cramer, Jason Scott, Steiner, Chet Bradford, Diebes, Suzanna
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin A
• Application Number:
  US15/686,251
• Publication Number:
  US 20180026976A1
• Time in Patent Office: 655 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled. Additionally, the method includes validating the communications device, capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device, biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.

Claims

1. A method for authenticating users comprising:

determining, by a processor, a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;

when the state of the communications device is enrolled, determining, by the processor, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device and the transaction for unlocking an electronic door lock;

determining, based on the transaction risk level, a biometric parameter for authenticating the user;

authenticating the user based on the biometric parameter; and

transmitting a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.

2. A method for authenticating users in accordance with claim 1, said determining, based on the transaction risk level, step comprising determining, based on the policy, the parameter for authenticating the user.

3. A computing device for authenticating users comprising:

a processor; and

a memory configured to store data, said computing device being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when executed by said processor, cause said computing device to;

determine a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;

when the state of the device is enrolled, determine, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device and the transaction for unlocking an electronic door lock;

determine, based on the transaction risk level, a biometric parameter for authenticating the user;

authenticate the user based on the biometric parameter; and

transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door\.

4. A computing device for authenticating users in accordance with claim 3, said computing device being an authentication computer system.

5. A computing device for authenticating users in accordance with claim 4, said computing device being a smart phone.

6. A computing device for authenticating users in accordance with claim 4, said computing device being a tablet computer.

7. A non-transitory computer-readable recording medium included in a computing device having stored thereon a computer program for enhancing accuracy of biometric authentication transaction results, the computer program being comprised of instructions, which when read and executed by the computing device, cause the computing device to:

determine a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;

when the state of the device is enrolled, determine, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device, and the transaction for unlocking an electronic door lock;

determine, based on the transaction risk level, a biometric parameter for authenticating the user;

authenticate the user based on the biometric parameter; and

transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.