Method, System, And Apparatus For Nested Security Access/Authentication

• US 20070266428A1
• Filed: 03/06/2007
• Published: 11/15/2007
• Est. Priority Date: 03/06/2006
• Status: Abandoned Application

• Current Assignee: IMX Solutions Incorporated
• Original Assignee: IMX Solutions Incorporated
• Inventors: Szalewicz, Filip, Downes, James
• Application Number:
  US11/682,751
• Publication Number:
  US 20070266428A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/36 by graphic or iconic representation

Abstract

The disclosure details a nested security access system that manages access points/verification requests to create a series of layered security applications for securing access/user identification data. The NSA system works in coordination with an access point/verification module to generate a series of instructions as a login/verification module that may be executed locally. The login/verification module is executed by the access point/verification module to create a system user access/verification data entry form. Depending on the implementation, the access point/verification module may be configured to accept typed text or clicked image access/verification data, token access/verification data or selected image sequence access/verification data. The process of selected image sequence access involves the system user selecting a series of images that represent individual elements of a password without having to type the information into a data entry form.

Claims

1. A processor implemented method for providing nested security access, comprising:

receiving an access request;

correlating the access request to nested security modules;

transmitting a generation module that includes components for generating a correlated nested security module;

receiving nested security access data;

verifying the nested security access data by comparing the nested security access data to system database client account verification data; and

transmitting an access validity indicator.

2. The processor implemented method of claim 1, wherein the access request is configured as a user identification verification.

3. The processor implemented method of claim 1, wherein the access request is configured as a user'"'"'s attempt to log onto a secure website.

4. The processor implemented method of claim 3, wherein the access request includes identifying data associated with the secure website, which correlates to a system database entry associated with the secure website and defines the type of nested secure access module that is transmitted in response to the access request.

5. The processor implemented method of claim 3, further comprising:

creating a system user access record that stores the client account verification data prior to transmitting the secure access module.

6. The processor implemented method of claim 3, wherein the client account verification data includes user established password or pin data records.

7. The processor implemented method of claim 3, wherein the client account verification data includes the initial offset parameters that the generation module uses to generate the nested secure access module at the client.

8. The processor implemented method of claim 3, wherein the client account verification data includes the randomized access parameters that the generation module uses to generate the nested secure access module at the client.

9. The processor implemented method of claim 1, further comprising:

receiving a randomized image request from the generation module,

transmitting a predetermined number of randomized images selected from a system image database in response to the image request; and

transmitting at least one image in response to the image request that corresponds to at least one element of a web user'"'"'s system access code.

10. The processor implemented method of claim 9, wherein the system retrieves letter elements, numerical elements, symbolic elements or a combination of alpha-numeric elements based on the composition of an access code defined in the client account verification data,

11. The processor implemented method of claim 1, wherein the received nested security access data includes a generating module identifier.

12. The processor implemented method of claim 11, wherein the received nested security access data includes user selection data associated with mouse interactions with randomized access images generated and displayed to the web user.

13. The processor implemented method of claim 11, wherein the received nested security access data includes server location data associated with images that have been clicked on by an web user.

14. The processor implemented method of claim 1, wherein the access validity indicator includes a data message confirming a user'"'"'s submitted identification data.

15. The processor implemented method of claim 1, wherein the access validity indicator includes a data message that authenticates a nested secure access transaction.

16. A processor implemented method for providing nested security access, comprising:

receiving a session authentication request;

correlating the session authentication request to nested security modules;

creating a nested secure access generation module, wherein the nested secure access generation module includes components for facilitating a client generated nested security module;

transmitting the nested secure access generation module to a client;

creating a session authentication record that processes received user verification data from a client and provides a session authentication indicator to the client.

17. The processor implemented method of claim 16, wherein the session authentication indicator enables subsequent access to data held behind an access point.

18. The processor implemented method of claim 16, wherein the session authentication indicator facilitates a subsequent online transaction.

19. A system to provide nested security access, comprising:

a memory;

a processor disposed in communication with said memory, and configured to issue a plurality of processing instructions stored in the memory, wherein the instructions issue signals to;

receive an access request,

correlate the access request to nested security modules;

transmit a generation module that includes components for generating a correlated nested security module;

receive nested security access data;

verify the nested security access data by comparing the nested security access data to system database client account verification data; and

transmit an access validity indicator.

20. The system of claim 19, wherein the access request is configured as a user identification verification.

21. The system of claim 19, wherein the access request is configured as a user'"'"'s attempt to log onto a secure website.

22. The system of claim 21, wherein the access request includes identifying data associated with the secure website, which correlates to a system database entry associated with the secure website and defines the type of nested secure access module that is transmitted in response to the access request.

23. The system of claim 21, wherein the program instructions issue additional signals to:

create a system user access record that stores the client account verification data prior to transmitting the secure access module.

24. The system of claim 21, wherein the client account verification data includes user established password or pin data records.

25. The system of claim 21, wherein the client account verification data includes the initial offset parameters that the generation module uses to generate the nested secure access module at the client.

26. The system of claim 21, wherein the client account verification data includes the randomized access parameters that the generation module uses to generate the nested secure access module at the client.

27. The system of claim 19, wherein the program instructions issue additional signals to:

receive a randomized image request from the generation module;

transmit a predetermined number of randomized images selected from a system image database in response to the image request; and

transmit at least one image in response to the image request that corresponds to at least one element of a web user'"'"'s system access code.

28. The system of claim 27, wherein the system retrieves letter elements, numerical elements, symbolic elements or a combination of alpha-numeric elements based on the composition of an access code defined in the client account verification data,

29. The system of claim 19, wherein the received nested security access data includes a generating module identifier.

30. The system of claim 29, wherein the received nested security access data includes user selection data associated with mouse interactions with randomized access images generated and displayed to the web user.

31. The system of claim 29, wherein the received nested security access data includes server location data associated with images that have been clicked on by an web user.

32. The system of claim 19, wherein the access validity indicator includes a data message confirming a user'"'"'s submitted identification data.

33. The system of claim 19, wherein the access validity indicator includes a data message that authenticates a nested secure access transaction.

34. A system for providing nested security access, comprising:

a memory;

a processor disposed in communication with said memory, and configured to issue a plurality of processing instructions stored in the memory, wherein the instructions issue signals to;

receive a session authentication request;

correlate the session authentication request to nested security modules;

create a nested secure access generation module, wherein the nested secure access generation module includes components for facilitating a client generated nested security module;

transmit the nested secure access generation module to a client;

create a session authentication record that processes received user verification data from a client and provides a session authentication indicator to the client.

35. The system of claim 34, wherein the session authentication indicator enables subsequent access to data held behind an access point.

36. The system of claim 34, wherein the session authentication indicator facilitates a subsequent online transaction.