IDENTIFICATION AUTHENTICATION METHODS AND SYSTEMS

• US 20070162961A1
• Filed: 02/26/2006
• Published: 07/12/2007
• Est. Priority Date: 02/25/2005
• Status: Abandoned Application

• Current Assignee: Daniel Alman, Kelvin Tarrance
• Original Assignee: Daniel Alman, Kelvin Tarrance
• Inventors: ALMAN, DANIEL, TARRANCE, KELVIN
• Application Number:
  US11/276,358
• Publication Number:
  US 20070162961A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Identification authentication methods and systems are provided. In accordance with some embodiments, a user can verify or authenticate an item to ensure if the item is authentic by utilizing a security token. For example, a user can authenticate a website to determine if the website is authentic by providing information to decrypt a security token, and the user can determine if the website is authentic by reviewing the decrypted security token. An authentication method between a user and a service provider can comprise generating a security token, presenting the security token to a user, decrypting the security token, and receiving user information to authenticate a user. The security token can based at least partially on user information, and can comprise encrypted token information. Decrypting the security token can occur dynamically in real time so the token information appears enabling a user to authenticate a service provider. Other embodiments are also claimed and described.

Claims

1. An identification authentication system comprising:

a first device networked to a second device so that the first device can communicate with the second device, the first device being adapted to receive a first set of user information and communicate the first set of user information to the second device;

the second device being adapted to generate a security token in response to the first set of user information and provide the security token to the first device for user review, the security token comprising token information; and

the first device being adapted to receive a second set of user information so that a user can dynamically decrypt the security token in substantially real time to access the token information to authenticate the second device.

2. The system of claim 1, the second device comprising a token generator to generate the security token, wherein the token generator generates the security token based on the first set of user information.

3. The system of claim 2, wherein the token generator receives unique user information from a database based upon the first set of user information, and wherein the token generator encrypts the unique user information and provides the encrypted unique user information as at least part of the security token.

4. The system of claim 3, wherein the token generator utilizes a symmetric encryption algorithm to encrypt the unique user information.

5. The system of claim 3, further comprising a third device in communication with the second device, the third device being adapted to provide the token generator with the unique user information such that the unique user information is associated with the first set of user information.

6. The system of claim 1, wherein the security token comprises at least one of a visual component and an audio component.

7. The system of claim 1, wherein the security token comprises hypertext markup language (HTML) code that upon receipt of at least a portion of the second set of user information is adapted to animate the security token and dynamically reveal the token information.

8. The system of claim 1, wherein the decrypted token information is formatted so that a machine can not read the decrypted token information.

9. The system of claim 1, wherein the security token comprises a plurality of pixel elements and the first device is adapted to dynamically adjust one or more pixels of the security token upon receiving the second set of user information.

10. An identification authentication method comprising:

generating an encrypted token comprising user information;

receiving information from a user to access the user information from the encrypted token; and

using the received information to decrypt the encrypted token in substantially real time so that a user can authenticate an identity associated with a communication.

11. The method of claim 10, further comprising presenting the token to a user so that a user receives the encrypted token prior to using the received information to decrypt the encrypted token.

12. The method of claim 10, wherein generating the token comprises encrypting unique user information with a symmetric encryption algorithm.

13. The method of claim 10, wherein the communication includes at least one of an electronic mail message, a video mail message, a website file, a network device query, a network query, a text message, and a digital file.

14. The method of claim 10, wherein the received information only decrypts the encrypted token if the received information matches a previously determined encryption key such that the encrypted token is not partially decrypted.

15. The method of claim 10, further comprising displaying the encrypted token as a block of HTML code.

16. The method of claim 15, wherein the HTML code block has a plurality of pixel elements adapted to dynamically change to reveal the token information when the security token is decrypted.

17. An authentication method between a user and a service provider comprising:

generating a security token based at least partially on user information, the security token comprising encrypted token information;

presenting the security token to a user;

decrypting the security token in substantially real time so that during decryption the token information is dynamically presented to a user so that a user utilizes the decrypted security token to authenticate a service provider; and

receiving information from a user so that a service provider can authenticate the user.

18. The method of claim 17, wherein generating the security token comprises encrypting the security token with a symmetric encryption algorithm.

19. The method of claim 18, wherein presenting the security token comprises displaying the security token in at least one of a visual format and an audio format.

20. The method of claim 19, wherein decrypting the security token in substantially real time comprises utilizing information provided by a user to animate the security token so that the encrypted token information is dynamically decrypted.