SECURE AUTHENTICATION SYSTEM AND METHOD

• US 20110197267A1
• Filed: 02/04/2011
• Published: 08/11/2011
• Est. Priority Date: 02/05/2010
• Status: Abandoned Application

• Current Assignee: Lipso Systemes Incorporated
• Original Assignee: Francis Gagnon, François Gagnon, Martin Leclerc, Mathieu Hemon, Vivianne Gravel
• Inventors: Leclerc, Martin, Hemon, Mathieu, GRAVEL, Vivianne, Gagnon, Francis, Gagnon, François
• Application Number:
  US13/021,140
• Publication Number:
  US 20110197267A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

There is disclosed a system and method for authenticating the identity of a user of a client device as part of a transaction between the client device and a server of a service provider over a communications network, the client device comprising a unique identifier. The system and method comprise one or more personal identification elements issued to the user based upon an initial authentication of the identity of the user, a credential issued to the client device by the service provider based upon the personal identification elements and the unique identifiers, and a trigger event for launching an authentication application installed on the client device. When the authentication application is launched by the trigger event, the authentication application transmits the one or more personal identification elements and the unique identifier in a combination with the credential to the server for authentication by the service provider.

Claims

1. A system for authenticating an identity of a user of a client device as part of a transaction between the client device and a server of a service provider over a communications network, the client device comprising a unique identifier, the system comprising:

one or more personal identification elements issued to the user based upon an initial authentication of the identity of the user;

a credential issued to the client device by the service provider based upon said personal identification elements and said unique identifiers; and

a trigger event for launching an authentication application installed on the client device;

wherein when said authentication application is launched by said trigger event, said authentication application transmits said one or more personal identification elements and said unique identifier in a combination with said credential to the server for authentication by the service provider.

2. The system of claim 1, wherein said initial authentication comprises a verification of the identity of the user by the service provider.

3. The system of claim 1, wherein said initial authentication comprises a verification of the identity of the user by a third party authentication provider.

4. The system of claim 3, wherein said credential is issued by the service provider based upon said verification of the identity of the user by said third party authentication provider.

5. The system of claim 1, wherein said authentication application is launched by a trigger event issued by the service provider.

6. The system of claim 5, wherein said trigger event is a communication transmitted from the server to said authentication application.

7. The system of claim 1, wherein said authentication application is launched by a trigger event issued by the user.

8. The system of claim 4, wherein said authentication application is launched by a trigger event issued by a third party authentication provider.

9. The system of claim 1, wherein said authentication application encrypts said combination of said one or more personal identification elements, said unique identifier and said credential prior to transmission to the server.

10. The system of claim 1, wherein said one or more personal identification elements comprise a Personal Identification Number.

11. A method for authenticating an identity of a user of a client device as part of a transaction between the client device and a server of a service provider over a communications network, the client device comprising a unique identifier, the method comprising:

issuing one or more personal identification elements to the user based upon an initial authentication of the user;

issuing a credential to the client device based upon a transmission from the client device of said one or more personal identification elements and the unique identifiers;

triggering the launch of an authentication application installed on the client device;

transmitting said one or more personal identification elements and said unique identifier in a combination with said credential to said server; and

authenticating the user by comparing said transmitted combination with said issued one or more personal identification elements and said credential.

12. The method of claim 11, wherein said initial authentication comprises a verification of the identity of the user by the service provider.

13. The method of claim 12, wherein said authenticating is done by the service provider.

14. The method of claim 11, wherein said initial authentication comprises a verification of the identity of the user by a third party authentication provider.

15. The method of claim 14, wherein said credential is issued by said service provider based upon said verification of the identity of the user by said third party authentication provider.

16. The method of claim 11, further comprising encrypting said combination of said credential with said one or more personal identification elements and said unique identifier prior to transmission to the server.

17. The method of claim 11, wherein said authentication application is launched by a trigger event issued by the service provider.

18. The method of claim 11, wherein said trigger event is a communication transmitted from the server to said authentication application.

19. The method of claim 15, wherein said authentication application is launched by a trigger event issued by said third party authentication provider.

20. The method of claim 19, wherein said authenticating is done by said third party authentication provider.