Methods, Systems and Computer Program Products for Secure Access to Information

• US 20140101729A1
• Filed: 12/13/2013
• Published: 04/10/2014
• Est. Priority Date: 12/18/2009
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Novack, Brian M., Birkes, Jerry, Drake, Alton W. II, Toretti, Gary A.
• Granted Patent: US 9,756,028 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Methods for secure communications are provided. The methods include creating a safe user account on a secure access system, wherein creating an account includes provision of at least one strong authenticator to be associated with a user of the secure access system; providing a unique login and the at least one strong authenticator associated with the user to the secure access system to gain access to information associated with a referring organization, the referring organization being registered with the secure access system; and accessing the information associated with the referring organization based on the unique login and the at least one strong authenticator provided to the secure access system. Related systems and computer program products are also provided.

Claims

1. A method of providing secure communications, the method comprising:

receiving, at a processor associated with a secure access system, a request to create, on the secure access system, a safe user account for a user to enable the user to access resources associated with a referring organization, the user associated with an identification, the identification associated with the referring organization;

in response to the request, providing, by the processor, a plurality of types of authenticators for association with the safe user account;

receiving, by the processor, a selection of a type of authenticator;

creating the safe user account for the user, the safe user account associated with an authenticator corresponding to the type of authenticator selected; and

receiving, at the processor from the user, the identification associated with the referring organization and the authenticator associated with the safe user account to enable the user to gain access to the resources associated with the referring organization.

2. The method of claim 1, further comprising prior to receiving the request to create the safe user account, receiving an attempt to access the referring organization from a legacy logon screen associated with the referring organization.

3. The method of claim 1, further comprising in response to receiving the request to create the safe user account, providing a challenge message to the user, the challenge message comprising an email having a link to the secure access system.

4. The method of claim 1, further comprising:

after receiving the identification associated with the referring organization and the authenticator associated with the safe user account from the user, receiving a selection to register a web site of the referring organization with the secure access system; and

providing a registration confirmation email to the user.

5. The method of claim 1, further comprising providing access to the resources associated with the referring organization based on validity of the identification associated with the referring organization and the authenticator associated with the safe user account.

6. The method of claim 1, wherein the plurality of types of authenticators comprises voice biometrics, a soft token, a fob token, fingerprint biometrics, passwords, pass phrases, a PIN and a device authenticator.

7. The method of claim 1, wherein the plurality of types of authenticators provided corresponds to a level of security of the resources associated with the referring organization.

8. The method of claim 1, wherein the referring organization defines the plurality of types of authenticators provided.

9. A secure access system for providing secure communications, the system comprising:

a processor; and

a memory storing computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising

receiving a request to create, on the secure access system, a safe user account for a user to enable the user to access resources associated with a referring organization, the user associated with an identification, the identification associated with the referring organization,

in response to the request, providing a plurality of types of authenticators for association with the safe user account,

receiving a selection of a type of authenticator,

creating the safe user account for the user, the safe user account associated with an authenticator corresponding to the type of authenticator selected, and

receiving, from the user, the identification associated with the referring organization and the authenticator associated with the safe user account to enable the user to gain access to the resources associated with the referring organization.

10. The secure access system of claim 9, wherein the operations further comprise prior to receiving the request to create the safe user account, receiving an attempt to access the referring organization a legacy logon screen associated with the referring organization.

11. The secure access system of claim 9, wherein the operations further comprise in response to receiving the request to create the safe user account, providing a challenge message to the user, the challenge message comprising an email having a link to the secure access system.

12. The secure access system of claim 9, wherein the operations further comprise:

after receiving the identification associated with the referring organization and the authenticator associated with the safe user account from the user, receiving a selection to register a web site of the referring organization with the secure access system; and

providing a registration confirmation email to the user.

13. The secure access system of claim 9, wherein the plurality of types of authenticators comprises voice biometrics, a soft token, a fob token, fingerprint biometrics, passwords, pass phrases, a PIN and a device authenticator.

14. The secure access system of claim 9, wherein the plurality of types of authenticators provided corresponds to a level of security of the resources associated with the referring organization being accessed.

15. A computer readable medium device storing computer-executable instructions which, when executed by a processor of a secure access system, cause the processor to perform operations comprising:

receiving a request to create, on the secure access system, a safe user account for a user to enable the user to access resources associated with a referring organization, the user associated with an identification, the identification associated with the referring organization;

in response to the request, providing a plurality of types of authenticators for association with the safe user account;

receiving a selection of a type of authenticator;

creating the safe user account for the user, the safe user account associated with an authenticator corresponding to the type of authenticator selected; and

receiving, from the user, the identification associated with the referring organization and the authenticator associated with the secure user account to enable the user to gain access to the resources of the referring organization.

16. The computer readable medium device of claim 15, wherein the operations further comprise prior to receiving the request to create the safe user account, receiving an attempt to access the referring organization from a legacy logon screen associated with the referring organization.

17. The computer readable medium device claim 15, wherein the operations further comprise in response to receiving the request to create the safe user account, providing a challenge message to the user, the challenge message comprising an email having a link to the secure access system.

18. The computer readable medium device of claim 15, wherein the operations further comprise:

after receiving the identification associated with the referring organization and the authenticator associated with the safe user account, receiving a selection to register a web site of the referring organization with the secure access system; and

providing a registration confirmation to the user.

19. The computer readable medium device of claim 15, wherein the plurality of types of authenticators comprises voice biometrics, a soft token, a fob token, fingerprint biometrics, passwords, pass phrases, a PIN and a device authenticator.

20. The computer readable medium device of claim 15, wherein the plurality of types of authenticators provided corresponds to a level of security of the resources associated with the referring organization being accessed.