METHODS AND SYSTEMS FOR PROVIDING BIDIRECTIONAL AUTHENTICATION

• US 20130340071A1
• Filed: 06/19/2012
• Published: 12/19/2013
• Est. Priority Date: 06/19/2012
• Status: Active Grant

• Current Assignee: Drumwave Inc
• Original Assignee: Paychief, LLC
• Inventors: Vellozo Luz, Andre Gustavo, Ghetler, Mauricio
• Granted Patent: US 9,053,312 B2
• Time in Patent Office: Days
• US Class Current: 726/18
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

Methods and systems for providing access to a secure computing device are disclosed. A security device is used to generate a one-time password, a sequence of symbologies, and location information. The security device transmits the password, sequence and location information to the secure computing device for storage and displays the password and sequence to a user. A user device provides a password to the secure computing device in order to obtain access. The secure computing device compares the password with the stored one-time password to verify the user of the user device and sends the sequence to the user device in response. The user or user device verifies the sequence of symbologies to confirm the secure access. The location information may be used to detect fraudulent accesses to the user account.

Claims

1. A method of providing access to a secure computing device, the method comprising:

receiving, by a security device, a request to generate data for a secure access;

generating, by the security device, a one-time password and a sequence of symbologies;

transmitting, by the security device, the one-time password, the sequence of symbologies and location information to a secure computing device, wherein the location information corresponds to a location of the security device; and

displaying, by the security device, the one-time password and the sequence of symbologies to the user.

2. The method of claim 1, wherein the location information comprises location information determined by a global positioning satellite (GPS) system.

3. The method of claim 1, wherein the one-time password expires after a time period.

4. The method of claim 1, wherein generating the one-time password and the sequence of symbologies comprises randomly or pseudo-randomly generating the one-time password.

5. The method of claim 1, wherein generating the one-time password and the sequence of symbologies comprises randomly or pseudo-randomly generating the sequence of symbologies.

6. A method of accessing a secure computing device, the method comprising:

receiving a one-time password and a first sequence of symbologies from a security device;

accessing, by a user device, a secure computing device by providing the one-time password to the secure computing device;

receiving, by the user device, a second sequence of symbologies from the secure computing device; and

verifying that the first sequence of symbologies matches the second sequence of symbologies.

7. The method of claim 6, further comprising transmitting, by the user device, location information for the user device to the secure computing device.

8. The method of claim 7, wherein the location information comprises location information determined by a global positioning satellite (GPS) system.

9. The method of claim 6, further comprising:

transmitting, by the user device, a request to the secure computing device for location information pertaining to a location at which the one-time password was generated; and

receiving, by the user device, the location information from the secure computing device.

10. The method of claim 6, further comprising:

transmitting, by the user device, a request to the secure computing device for location information pertaining to a location of the last valid login to an account; and

receiving, by the user device, the location information from the secure computing device.

11. The method of claim 6, wherein the one-time password expires after a time period.

12. A system for providing access to a secure computing device, the system comprising:

a processing device; and

a processor-readable storage medium in operable communication with the processing device, wherein the processor-readable storage medium contains one or more programming instructions that, when executed, cause the processing device to;

receive a request to generate data for a secure access,

generate a one-time password and a sequence of symbologies,

transmit the one-time password, the sequence of symbologies and location information to a secure computing device, and

display the one-time password and the sequence of symbologies to the user.

13. The system of claim 12, wherein the location information comprises location information determined by a global positioning satellite (GPS) system.

14. The system of claim 12, wherein the one-time password expires after a time period.

15. The system of claim 12, wherein the one or more programming instructions that, when executed, cause the processing device to generate the one-time password and the sequence of symbologies comprise one or more programming instructions that, when executed, cause the processing device to randomly or pseudo-randomly generate the one-time password.

16. The system of claim 12, wherein one or more programming instructions that, when executed, cause the processing device to generate the one-time password and the sequence of symbologies comprise one or more programming instructions that, when executed, cause the processing device to randomly or pseudo-randomly generate the sequence of symbologies.