SYSTEM AND METHOD FOR IDENTITY AUTHENTICATION

• US 20160337403A1
• Filed: 05/11/2015
• Published: 11/17/2016
• Est. Priority Date: 05/11/2015
• Status: Active Grant

• Current Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Original Assignee: Genesys Telecommunications Laboratories Incorporated (Genesys Cloud Services Incorporated)
• Inventors: Kraeulter, James, Stoops, Daniel, Bell, Cliff
• Granted Patent: US 9,961,076 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/065 Continuous authentication

Abstract

A system, comprising includes an orchestration server including a processor, the orchestration server to receive authentication factors. A rules engine connects with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine. The rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set.

Claims

1. A system, comprising:

an orchestration server including a processor, the orchestration server to receive authentication factors;

a rules engine connected with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine; and

the rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set.

2. The system of claim 1, where the authentication factors include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

3. The system of claim 1, where the orchestration server receives the authentication factors from at least one of a mobile device and an enterprise server.

4. The system of claim 1, further including an interactive voice response server connected with the orchestration server, the interactive voice response server sending a voice biometric authentication factor to the orchestration server.

5. The system of claim 4, where the interactive voice response server initiates automated contact to obtain additional authentication factors.

6. The system of claim 1, further including an agent station, where the agent station is not involved during the authentication.

7. The system of claim 1, where authentication comprises a minimum number N of authentication factors out of M available choices being met.

8. The system of claim 1, where the decision on authentication is displayed as a score.

9. The system of claim 1, where the orchestration server grants a limited right if the authentication is partially passed.

10. A method, comprising:

receiving a first authentication factor from a first source;

receiving a second authentication factor from a second source;

requesting a decision on authentication based on the first authentication factor and the second authentication factor; and

providing an access right based on the decision on authentication.

11. The method of claim 10, where the first authentication factor and the second authentication factor include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

12. The method of claim 10, further comprising determining if an environment of the first source is outdoors, and if the environment of the first source is not outdoors, requesting a facial recognition authentication factor.

13. The method of claim 10, further comprising determining if an environment of the first source is noisy, and if the environment of the first source is not noisy, requesting a voice biometric authentication factor.

14. The method of claim 10, further comprising determining if the first source provides fingerprint identification, and if the first source provides fingerprint identification, requesting a fingerprint identification authentication factor.

15. The method of claim 10, where an agent station is not involved during the authentication.

16. The method of claim 10, where authentication comprises meeting a minimum number N of authentication factors out of M choices.

17. The method of claim 10, further comprising displaying the decision on authentication as a score.

18. The method of claim 10, further comprising granting a limited right if the authentication is partially passed.

19. A contact center, comprising:

an orchestration server including a processor, the orchestration server to receive authentication factors;

an interactive voice response server connected with the orchestration server, the interactive voice response server sending a voice biometric authentication factor to the orchestration server;

a rules engine connected with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine;

the rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set; and

an agent station, where the agent station is not involved during the authentication.

20. The contact center of claim 19, where the authentication factors include at least two of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.