Systems and methods for multifactor authentication

• US 8,793,490 B1
• Filed: 12/13/2006
• Issued: 07/29/2014
• Est. Priority Date: 07/14/2006
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Szwalbenest, Stanley A.
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US11/610,289
• Time in Patent Office: 2,785 Days
• Field of Search: 705/42, 705/67, 380/33, 726/3
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: Y02D 30/50 in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

The invention provides a method for performing an authentication (and a system for performing the method), in conjunction with a transaction, utilizing a primary channel and a secondary channel. The method may include an authenticating entity, such as a bank, (1) receiving from a customer primary authentication information via a primary channel; (2) the authenticating entity processing the primary authentication information, and retrieving customer information based on the primary authentication information; (3) the authenticating entity transmitting secondary authentication information to the customer via a secondary channel, the secondary channel being different than the primary channel; (4) the authenticating entity receiving from the customer at least a portion of the secondary authentication information; and (5) the authenticating entity performing authentication processing on the secondary authentication information received from the customer. Based on the successful authentication of the primary authentication information and the secondary authentication information received from the customer, the authenticating entity approves the customer for the transaction.

Claims

1. A method for performing an authentication, in conjunction with a transaction, utilizing a primary communication channel and a secondary communication channel, the primary and secondary communication channels being adapted for long-range communication, the method comprising:

an authenticating entity, in the form of a processing machine, receiving from a customer primary authentication information via a primary channel;

the processing machine of the authenticating entity processing the primary authentication information, and retrieving customer information based on the primary authentication information;

the processing machine of the authenticating entity transmitting secondary authentication information to the customer via a secondary channel, the secondary channel being different than the primary channel;

the processing machine of the authenticating entity receiving from the customer via the primary channel at least a portion of the secondary authentication information;

the processing machine of the authenticating entity performing authentication processing on the secondary authentication information received from the customer; and

based on the successful authentication of the primary authentication information and the secondary authentication information received from the customer, the processing machine of the authenticating entity approving the customer for the transaction,

wherein the primary channel is the Internet and the secondary channel is one selected from the group consisting of a telephone call, text message, and e-mail to the customer.

2. The method of claim 1, wherein the customer receives the secondary authentication information from the authenticating entity by receiving the telephone call, text message, or e-mail, and the customer transmits the secondary authentication information via the Internet, so as to transmit the secondary authentication information to the authenticating entity.

3. The method of claim 1, wherein the authenticating entity is a bank.

4. The method of claim 1, wherein the utilization of the secondary authentication information, transmitted over the secondary channel, is triggered by the application of a rule set.

5. The method of claim 4, wherein at least one rule in the rule set is based on the dollar amount of the transaction.

6. The method of claim 4, wherein at least one rule in the rule set is based on the particular merchant through which the transaction is being effected.

7. The method of claim 6, wherein the merchant is identified by a merchant ID received by the processing machine of the authenticating entity.

8. The method of claim 1, wherein the primary authentication information includes a username and password.

9. The method of claim 8, wherein the secondary authentication information includes at least one selected from the group consisting of a one-time use password and a one-time authentication code.

10. The method of claim 1, wherein the primary channel is the Internet and the secondary channel is at least one selected from the group consisting of a text message and an SMS message.

11. The method of claim 1, wherein the transaction is the purchase of a product.

12. The method of claim 1, wherein the transaction is enrollment of a customer into a service offered by the authenticating entity.

13. The method of claim 1, wherein the primary channel is a website of the authenticating entity;

the secondary channel is a text message or e-mail to the customer, the customer receiving the text message or e-mail; and

the customer transmitting, via the website, the secondary authentication information back to the authenticating entity.

14. The method of claim 1, wherein the customer information includes at least one selected from the group consisting of a customer'"'"'s land-line telephone number, cell number, email address, SMS information and other information by which to contact the customer on a channel different than the primary channel.

15. The method of claim 1, wherein a time period is measured between an event in conjunction with the processing machine of the authenticating entity processing the primary authentication information vis-à

-vis an event in conjunction with the processing machine of the authenticating entity performing authentication processing on the secondary authentication information.

16. The method of claim 1, wherein the transaction includes a confirmation of the identity of a person so as to receive information.

17. The method of claim 1, further including the processing machine of the authenticating entity forwarding respective requests for approval of the requested transaction to multiple transaction approvers, and the processing machine of the authenticating entity receiving responses from at least some of the transaction approvers.

18. The method of claim 17, the processing machine of the authenticating entity applying a set of rules from the responses received from the transaction approvers.

19. The method of claim 18, further including determining the geographical location of at least some of the transaction approvers;

and

the set of rules including comparing the geographical location of the at least some of the transaction approver with the location of the transaction, so as to determine the legitimacy of the transaction.

20. The method of claim 19, further including determining the geographical location of at least some of the transaction approvers using a GPS (global positioning system).

21. A system that performs authentication processing, the system including:

a communication interface portion for interfacing with a customer, the communication interface portion comprising non-transitory computer readable medium;

an authenticating processing portion that communicates with the customer via the communication interface portion, the authenticating processing portion receiving primary authentication information on a primary communication channel adapted for long-range communication, and based on the primary authentication information, the authenticating processing portion retrieving customer information, the customer information verifying at least in part the primary authentication information;

the authenticating processing portion configured to output secondary authentication information to the customer over a secondary communication channel adapted for long-range communication, the secondary channel being different than the primary communication channel, and the secondary authentication information includes a portion of at least one selected from the group consisting of a password and a one-time use authentication code;

the authenticating processing portion configured to receive the secondary authentication information from the customer via the primary communication channel and using the secondary authentication information to authenticate the customer; and

the authenticating processing portion further configured to, based on the successful receipt of the primary authentication information and the secondary authentication information from the customer, output an approval for the transaction,

wherein the primary communication channel is the Internet and the secondary communication channel is one selected from the group consisting of a telephone call, text message, and e-mail to the customer.

22. The system of claim 21, in which the authenticating processing portion configured to output secondary authentication information to the customer over the secondary communication channel includes the authenticating processing portion further configured to output a one-time password.

24. The system of claim 21, wherein the primary authentication information includes a username and password.

23. A method for performing an authentication, in conjunction with a transaction, utilizing a primary communication channel on a primary device and a secondary communication channel on a secondary device, the primary and secondary communication channels being adapted for long-range communication, the transaction being effected at a location, the method comprising:

an authenticating entity, in the form of a processing machine, receiving from a customer primary authentication information via the primary communication channel on the primary device;

the processing machine of the authenticating entity processing the primary authentication information, and retrieving customer information based on the primary authentication information;

the processing machine of the authenticating entity transmitting secondary authentication information to the customer via the secondary communication channel, the secondary communication channel being different than the primary communication channel;

the processing machine of the authenticating entity receiving from the customer at least a portion of the secondary authentication information via the primary communication channel;

the processing machine of the authenticating entity performing authentication processing on the secondary authentication information received from the customer; and

based on both the successful authentication of the primary authentication information and the successful authentication of the secondary authentication information received from the customer, the processing machine of the authenticating entity approving the customer for the transaction; and

the method further including the processing machine of the authenticating entity forwarding respective requests for approval of the requested transaction to multiple transaction approvers, and the processing machine of the authenticating entity receiving responses from at least some of the transaction approvers, the processing machine of the authenticating entity applying a set of rules from the responses received from the transaction approvers;

the processing machine of the authenticating entity determining the geographical location of at least some of the transaction approvers, and the set of rules including comparing the geographical location of the at least some of the transaction approvers with the location of the transaction, so as to determine the legitimacy of the transaction,

wherein the primary communication channel is the Internet and the secondary communication channel is one selected from the group consisting of a telephone call, text message, and e-mail to the customer.