Login security with short messaging

• US 8,712,453 B2
• Filed: 12/04/2009
• Issued: 04/29/2014
• Est. Priority Date: 12/23/2008
• Status: Active Grant

• Current Assignee: Artax LLC (IPValuation Partners, LLC)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Geil, Phillip W.
• Primary Examiner(s): Hu, Jinsong
• Assistant Examiner(s): Nealon, William
• Application Number:
  US12/591,935
• Publication Number:
  US 20100162371A1
• Time in Patent Office: 1,607 Days
• Field of Search: None
• US Class Current: 455/466
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 68/00 User notification, e.g. alerting and paging, for incoming communication, change of service or the like
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

Additional security is provided for on-line account users beyond that which is otherwise conventionally provided by, e.g., longer passwords, passwords that include both characters and numbers, etc., by implementing an on-line server that notifies a pre-registered account holder via a short messaging system (SMS) with a short message login notification when a log-in (or even just a login attempt) occurs. Thus, even entry of the proper user/password information, which would conventionally be presumed to be authorized, will be notified to the registered SM address of the authorized user.

Claims

1. A login notifier for an on-line server, comprising:

a short message login notifier to generate a short message login notification message providing notification of a proper login to an on-line account; and

a short message transmitter to transmit said short message login notification message to a pre-registered short message address, via a physical short message servicing center (SMSC), associated with a physical short messaging device;

wherein said proper login to said on-line account is accepted, but with limited functionality until an authorizing reply to said short message login notification message is received.

2. The login notifier for an on-line server according to claim 1, further comprising:

an account locker to lock-down said on-line account upon receipt of an appropriate short message reply to said short message login notification.

3. The login notifier for an on-line server according to claim 2, wherein:

said short message reply is authenticated when if its send address matches said pre-registered short message address.

4. The login notifier for an on-line server according to claim 2, further comprising:

a key matcher to match a key word received in said short message reply to a pre-registered key word associated with said on-line account, said match authenticating said short message reply to cause a lock-down of said on-line account.

5. Login apparatus for an on-line server, comprising:

short message login notifier means to generate a short message login notification message informing a physical short messaging device of a proper login to an on-line account; and

short message transmitting means to transmit said short message login notification message to a pre-registered short message address via a physical short message servicing center (SMSC);

wherein said proper login to said on-line account is accepted, but with limited functionality until an authorizing reply to said short message login notification message is received.

6. The login apparatus for an on-line server according to claim 5, further comprising:

account locker means to lock-down said on-line account upon receipt of an appropriate short message reply to said short message login notification.

7. The login apparatus for an on-line server according to claim 6, wherein:

said account lock-down means authenticates said short message reply if its send address matches said pre-registered short message address.

8. The login apparatus for an on-line server according to claim 6, further comprising:

means for matching a key word received in said short message reply to a pre-registered key word associated with said on-line account, said match initiating said account lock-down means to cause a lock-down of said on-line account.

9. A login notifier for an on-line server, comprising:

a text message login notifier to generate a text message login notification message providing notification of a proper login to an on-line account; and

a text message transmitter to transmit said text message login notification message to a pre-registered text message address, via a physical text message gateway, associated with a physical text messaging device;

wherein said proper login to said on-line account waits for a message reply to said text message login notification message enabling said proper login to be completed.

10. The login notifier for an on-line server according to claim 9, further comprising:

an account locker to lock-down said on-line account upon receipt of an appropriate text message reply to said text message login notification.

11. The login notifier for an on-line server according to claim 10, wherein:

said text message reply is authenticated when a sender address matches said pre-registered text message address.

12. The login notifier for an on-line server according to claim 10, further comprising:

a key matcher to match a key word received in said text message reply to a pre-registered key word associated with said on-line account, said match authenticating said text message reply to cause a lock-down of said on-line account.