METHOD AND SYSTEM FOR PROVIDING MULTIFACTOR AUTHENTICATION

• US 20110277025A1
• Filed: 05/06/2010
• Published: 11/10/2011
• Est. Priority Date: 05/06/2010
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Counterman, Raymond
• Granted Patent: US 8,495,720 B2
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An approach is provided for using multifactor authentication to access multiple services. A determination is made that a user equipment has been authenticated for an access network. An identifier corresponding to the user equipment is received. An alias identifier is generated based on the received user equipment identifier for use in combination with a universal user identifier to authenticate a user corresponding to the user equipment for accessing a plurality of services via the access network.

Claims

1. A method comprising:

determining that a user equipment has been authenticated for an access network;

receiving an identifier corresponding to the user equipment; and

generating an alias identifier based on the received user equipment identifier for use in combination with a universal user identifier to authenticate a user corresponding to the user equipment for accessing a plurality of services via the access network.

2. A method according to claim 1, further comprising:

storing the generated alias identifier within local memory; and

initiating transmission of the generated alias identifier to the user equipment for storage therein.

3. A method according to claim 2, further comprising:

communicating with a universal identification service module to validate the user equipment based on the alias identifier stored within the user equipment, wherein the universal identification service module is configured to assign the universal user identifier to the user.

4. A method according to claim 1, further comprising:

assigning a validity period to the alias identifier that specifies an expiration value for the alias identifier.

5. A method according to claim 1, wherein the alias identifier is generated by performing a hashing operation on the equipment identifier, and the access network is a wireless network, the services including a web-based service or a network service.

6. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine that a user equipment has been authenticated for an access network;

receive an identifier corresponding to the user equipment; and

generate an alias identifier based on the received user equipment identifier for use in combination with a universal user identifier to authenticate a user corresponding to the user equipment for accessing a plurality of services via the access network.

7. An apparatus according to claim 6, wherein the apparatus is further caused, at least in part, to:

store the generated alias identifier within local memory; and

initiate transmission of the generated alias identifier to the user equipment for storage therein.

8. An apparatus according to claim 7, wherein the apparatus is further caused, at least in part, to:

communicate with a universal identification service module to validate the user equipment based on the alias identifier stored within the user equipment, wherein the universal identification service module is configured to assign the universal user identifier to the user.

9. An apparatus according to claim 6, wherein the apparatus is further caused, at least in part, to:

assign a validity period to the alias identifier that specifies an expiration value for the alias identifier.

10. An apparatus according to claim 6, wherein the alias identifier is generated by performing a hashing operation on the equipment identifier, and the access network is a wireless network, the services including a web-based service or a network service.

11. A method comprising:

receiving an equipment identifier of a user equipment from the user equipment;

forwarding the equipment identifier to a network identity service module for authenticating the user equipment to permit access on a communication network, wherein the network identity service module is configured to manage the equipment identifier;

receiving a universal user identifier associated with a user of the user equipment, wherein the universal user identifier provides access to a plurality of services; and

authenticating the user based on the universal user identifier to access one or more of the plurality of services.

12. A method according to claim 11, wherein the equipment identifier is an alias identifier that is generated by the network identity service module using a irreversible transformation operation on identifying information about the user equipment.

13. A method according to claim 12, wherein the network identity service module authenticates the user equipment by retrieving a stored version of the alias identifier for comparison with an alias identifier provided by the user equipment.

14. A method according to claim 11, further comprising:

generating a request for one or more credentials from the user equipment, wherein the credentials include the alias identifier and the universal user identifier.

15. A method according to claim 14, wherein the credentials further include a user password and address of a portal for the network identity service module.

16. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

receive an equipment identifier of a user equipment from the user equipment;

forward the equipment identifier to a network identity service module for authenticating the user equipment to permit access on a communication network, wherein the network identity service module is configured to manage the equipment identifier;

receive a universal user identifier associated with a user of the user equipment, wherein the universal user identifier provides access to a plurality of services; and

authenticate the user based on the universal user identifier to access one or more of the plurality of services.

17. An apparatus according to claim 16, wherein the equipment identifier is an alias identifier that is generated by the network identity service module using a irreversible transformation operation on identifying information about the user equipment.

18. An apparatus according to claim 17, wherein the network identity service module authenticates the user equipment by retrieving a stored version of the alias identifier for comparison with an alias identifier provided by the user equipment.

19. An apparatus according to claim 16, wherein the apparatus is further caused, at least in part, to:

generate a request for one or more credentials from the user equipment, wherein the credentials include the alias identifier and the universal user identifier.

20. An apparatus according to claim 19, wherein the credentials further include a user password and address of a portal for the network identity service module.