User-centric authentication system and method

• US 8,112,817 B2
• Filed: 10/22/2007
• Issued: 02/07/2012
• Est. Priority Date: 10/30/2006
• Status: Active Grant

• Current Assignee: Girish Chiruvolu
• Original Assignee: Girish Chiruvolu
• Inventors: Chiruvolu, Girish, Chiruvolu, Arpitha
• Primary Examiner(s): Srivastava, Vivek
• Assistant Examiner(s): BROWN, ANTHONY D
• Application Number:
  US11/876,006
• Publication Number:
  US 20090037983A1
• Time in Patent Office: 1,569 Days
• Field of Search: 726 26- 30
• US Class Current: 726/30
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A system for authenticating a user in a network. The authentication system includes a computer resource having secure data, an authentication computing system providing dynamic authentication of a user accessing the computer resource, and a user communication device for communicating between the user and the computer resource. The computing system presents a challenge for which a specified response is required based upon a pre-determined function. Access is then granted by the computing system upon providing the correct response to the presented challenge by the user.

Claims

1. An authentication system for authenticating a user in a network, the authentication system comprising:

a secure computer resource;

a computer providing dynamic authentication of a user accessing the computer resource; and

a user communication device for communicating between the user and the computer resource;

wherein the computer includes a challenge engine for generating a non-static challenge containing randomly generated data to the user;

wherein the computer stores a pre-determined function known by the user, the pre-determined function being utilized by the user to perform a manipulation of the data within the challenge to formulate a correct response to the computer;

wherein the pre-determined function is established between the user and the computer resource prior to a first authentication session, the pre-determined function remaining constant over a plurality of attempted access sessions;

wherein the computer includes means for receiving the response from the user and determining if the response properly manipulates the challenge based on the pre-determined function;

whereby access is granted by the user to the secure computer resource upon receiving a correct response determined by the computer to properly manipulate the data within the challenge based on the pre-determined function.

2. The authentication computing system of claim 1 further comprising an expert system adaptable to capabilities of the user to provide responses based on the pre-determined function and providing training to the user for properly manipulating data within the challenge to formulate a correct response based on the pre-determined function.

3. The authentication computing system of claim 1 wherein the authentication computing system provides a honey pot mode, wherein an unauthorized user is presented with false challenges to lure the unauthorized user.

4. The authentication system of claim 1 wherein the authentication computing system includes a profiler, the profiler having means for determining facts and preferences of the user.

5. The authentication system of claim 4 wherein the profiler includes a profile bank storing challenges, hints and functions, the profiler utilizing the profile bank to generate challenges and present hints to the user.

6. The authentication system of claim 4 wherein the profiler conducts a re-profiling of the user after a specified time period.

7. The authentication system of claim 1 wherein the authentication computing system includes a means for alerting the user of an unauthorized attempt at accessing the computer resource.

8. The authentication system of claim 1 wherein the authentication system is utilized in messaging between a first user and a second user.

9. The authentication system of claim 1 wherein the authentication system is utilized in financial transactions, wherein the user communication device is alerted to a financial transaction, the communication device being presented with a challenge prior to authorizing the transaction.

10. The authentication system of claim 1 wherein the authentication system is utilized for medical transactions, wherein the user communication device is alerted to a medical transaction, the communication device being presented with a challenge prior to authorizing the transaction.

11. The authentication system of claim 1 wherein the authentication computing system utilizes a plurality of pre-determined functions, each function being associated with a predetermined hint known to the user, the hint providing an indicator of the current function to use when responding to a presented challenge.

12. The authentication system of claim 11 wherein the authentication computing system provides two types of challenges, a first type of challenge being a master question for use for higher level security and a cruise question for a lesser level security.

13. The authentication system of claim 11 wherein the authentication computing system employs a tier-based presentation of challenges, a first tier based on a higher level of security and a second tier based on a lesser level of security.

14. The authentication system of claim 13 wherein the tiers are determined by the user for a specified event or situation.

15. The authentication system of claim 11 wherein a correct response is dependent upon time of the challenge.

16. The authentication computing system of claim 1 wherein the user is provided with a one time use internet hyperlink for use in authentication by the authenticating computing system.

17. The authentication computing system of claim 1 wherein the authentication computing system creates a profile of the user, the profile being transferable to other entities for authentication of other computer resources.

18. The authentication computing system of claim 1 wherein the authentication computing system provides second factor authentication and message notification to the user when access is attempted to the computer resource.

19. The authentication computing system of claim 1 wherein the authentication computing system is located within a standalone computer separate from the computer resource.

23. The authentication computing system of claim 1 wherein the response dynamically changes based on receiving a different challenge.

24. The authentication computing system of claim 1 wherein:

the response is unique and non-reusable based on data presented in the challenge, thereby resulting in a dynamic response; and

the response is based on manipulating embedded data in the challenge.

26. The authentication computing system of claim 1 wherein:

the pre-determined function is a mathematical function;

the data includes a random string of characters in the challenge; and

the characters within the challenge are manipulated to create a response.

20. A method of authentication a user in a network, the method comprising the steps of:

securing data in a computer resource;

dynamically authenticating a user accessing the computer resource by a computer, wherein the step of dynamically authenticating a user includes the steps of;

storing, in the computer, a pre-determined function known by the user, the pre-determined function being utilized by the user to perform a manipulation of data within the challenge to formulate a correct response to the computer;

wherein the pre-determined function is established between the user and the computer resource prior to a first authentication session, the pre-determined function remaining constant over a plurality of attempted access sessions;

generating and presenting a non-static challenge having randomly generated data, by a challenge engine within the computer, to the user;

receiving a response by the user; and

determining, by the computer, if the response is correct by determining if the response properly manipulates the data within the challenge based on the pre-determined function;

upon determining, by the computer, that a correctly response is received by the user, granting access by the user to the computer resource.

21. The method of authenticating a user of claim 20, wherein the step of dynamically authenticating a user includes storing by the computer a plurality of functions, each function being associated with a predetermined hint known to the user, the hint providing an indicator of the current pre-determined function to use when responding to a presented challenge.

22. The method of authenticating a user of claim 20 the step of dynamically authenticating a user includes employing a tier-based presentation of challenges, a first tier based on a higher level of security and a second tier based on a lesser level of security.

25. The method of authenticating a user of claim 20 wherein:

the step of determining, by the computer, if the response is correct includes determining if the response properly manipulates data embedded in the challenge.