METHODS AND SYSTEMS FOR AUTHENTICATING USERS

• US 20160042167A1
• Filed: 10/26/2015
• Published: 02/11/2016
• Est. Priority Date: 08/05/2009
• Status: Active Grant

• Current Assignee: Corporation DAON Technology
• Original Assignee: Chet Bradford Steiner, Conor Robert White, Jason Scott Cramer, Michael Peirce, Suzanna Diebes
• Inventors: WHITE, Conor Robert, PEIRCE, Michael, CRAMER, Jason Scott, STEINER, Chet Bradford, DIEBES, Suzanna
• Granted Patent: US 9,781,107 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled. Additionally, the method includes validating the communications device, capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device, biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.

Claims

1. A method for authenticating users comprising:

determining, by a processor, based on a user request to conduct a transaction, at least one factor related to conditions under which the transaction is requested;

determining, based on the transaction, a biometric parameter for authenticating the user;

authenticating the user based on the biometric parameter; and

conducting the requested transaction after successfully authenticating the user.

2. A method for authenticating users in accordance with claim 1, said determining, based on a user request to conduct a transaction, step further comprising:

determining a type of the transaction;

identifying a policy that corresponds to the transaction; and

determining, based on the policy, the at least one factor.

3. A method for authenticating users in accordance with claim 2, said determining, based on the transaction, a biometric parameter for authenticating the user step comprising determining, based on the policy, the parameter for authenticating the user.

4. A method for authenticating users in accordance with claim 1, said determining, based on the user request to conduct the transaction, at least one factor step comprising:

determining a type of the transaction;

selecting at least one rule included in a policy that corresponds to the transaction; and

identifying, based on the at least one rule, the at least one factor.

5. A system for authenticating users comprising:

a processor; and

a memory configured to store enrollment data records, said system being associated with a network and said memory being coupled to said processor and having instructions stored thereon which, when executed by said processor, cause said processor to;

determine, based on a user request to conduct a transaction, at least one factor related to conditions under which the transaction is requested;

determine, based on the transaction, a biometric parameter for authenticating the user;

authenticate the user based on the biometric parameter; and

conduct the requested transaction after successfully authenticating the user.

6. A system for authenticating users in accordance with claim 5, wherein the at least one factor comprises a timing of the transaction or a geographic location of the transaction.

7. A system for authenticating users in accordance with claim 5, wherein said processor is further caused to:

determine a type of the transaction;

identify a policy that corresponds to the transaction; and

determine, based on the policy, the at least one factor.

9. A system for authenticating users in accordance with claim 5, wherein said processor is further caused to:

determine a type of the transaction;

select at least one rule included in a policy that corresponds to the transaction; and

identify, based on the at least one rule, the at least one factor.