Login security with short messaging

• US 20100162371A1
• Filed: 12/04/2009
• Published: 06/24/2010
• Est. Priority Date: 12/23/2008
• Status: Active Grant

• Current Assignee: Artax LLC (IPValuation Partners, LLC)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Geil, Phillip W.
• Granted Patent: US 8,712,453 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 68/00 User notification, e.g. alerting and paging, for incoming communication, change of service or the like
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

Additional security is provided for on-line account users beyond that which is otherwise conventionally provided by, e.g., longer passwords, passwords that include both characters and numbers, etc., by implementing an on-line server that notifies a pre-registered account holder via a short messaging system (SMS) with a short message login notification when a log-in (or even just a login attempt) occurs. Thus, even entry of the proper user/password information, which would conventionally be presumed to be authorized, will be notified to the registered SM address of the authorized user.

Claims

1. A login module for an on-line server, comprising:

a user/password authenticator to receive a user/password request including a user ID and a password, to authenticate access to an on-line account associated with the on-line server;

a short message login notifier to generate a short message login notification message informing a user of receipt of said user/password request; and

a short message router to transmit said short message login notification message to a pre-registered short message address via a short message servicing center (SMSC).

2. The login module for an on-line server according to claim 1, further comprising:

an account lock-down module to lock-down said on-line account upon receipt of an appropriate short message reply to said short message login notification.

3. The login module for an on-line server according to claim 2, wherein:

said short message reply is authenticated when if its send address matches said pre-registered short message address.

4. The login module for an on-line server according to claim 2, further comprising:

matching a key word received in said short message reply to a pre-registered key word associated with said on-line account, said match authenticating said short message reply to cause a lock-down of said on-line account.

5. Login apparatus for an on-line server, comprising:

user/password authentication means to receive a user/password request including a user ID and a password, and to authenticate access to an on-line account associated with the on-line server;

short message login notifier means to generate a short message login notification message informing a user of receipt of said user/password request; and

short message routing means to transmit said short message login notification message to a pre-registered short message address via a short message servicing center (SMSC).

6. The login apparatus for an on-line server according to claim 5, further comprising:

account lock-down means to lock-down said on-line account upon receipt of an appropriate short message reply to said short message login notification.

7. The login apparatus for an on-line server according to claim 6, wherein:

said account lock-down means authenticates said short message reply if its send address matches said pre-registered short message address.

8. The login apparatus for an on-line server according to claim 6, further comprising:

means for matching a key word received in said short message reply to a pre-registered key word associated with said on-line account, said match initiating said account lock-down means to cause a lock-down of said on-line account.