System and method for mobile identity protection for online user authentication

• US 9,185,123 B2
• Filed: 12/23/2008
• Issued: 11/10/2015
• Est. Priority Date: 02/12/2008
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Finsphere Corporation (Visa, Inc.)
• Inventors: Dennis, Charles L., Snyder, Randall A., Buhrmann, Michael F., Boyle, Patrick E.
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US12/343,015
• Publication Number:
  US 20090204815A1
• Time in Patent Office: 2,513 Days
• Field of Search: 713/168, 713/182
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 84/005 Moving wireless networks

Abstract

An automated system and method for authenticating entities or individuals attempting to access a computer application, network, system or device using a wireless device is provided. The system employs one or more short-range wireless interfaces (e.g. BLUETOOTH or Wi-Fi) or long-range wireless interfaces (e.g. cellular or WiMAX) to detect the presence or location of the wireless device and it'"'"'s proximity to the secure system to be accessed. The wireless device incorporates a unique identifier and secure authentication key information associated with the user of the wireless device. An authentication result is generated and may be used for a variety of applications. The application may process the result and determine the degree of access for which the entity or individual is allowed.

Claims

1. A method of authenticating an entity based on a wireless device associated with the entity and configured to generate a wireless signal, the method comprising the steps of:

detecting the wireless device entering into proximity of an electronic device configured to provide the entity, upon authentication of the entity, access to use of an application requiring secure access;

obtaining from the wireless signal a unique identifier associated with the wireless device;

obtaining authentication information based on the unique identifier;

generating an authentication result authenticating the entity based on at least one of the unique identifier associated with the wireless device and authentication information based on the unique identifier; and

enabling the authenticated entity to use, with a device other than the wireless device, the application requiring secure access, wherein the authentication information and the entity'"'"'s unique identifier are securely stored in a portable device.

2. The method according to claim 1, wherein,

a database is employed associating the entity'"'"'s unique identifier with authentication information.

3. The method according to claim 1, wherein,

the entity'"'"'s unique identifier is a mobile directory number.

4. The method according to claim 1, wherein,

a database is employed associating the entity'"'"'s unique identifier with an identity authentication application.

5. The method according to claim 1, wherein,

a database is employed associating the entity'"'"'s unique identifier with a geographic place associated with a wireless device location.

6. The method according to claim 1, wherein, the generated authentication result is used to allow access to a computer application or device.

7. The method according to claim 1, wherein, the generated authentication result is used to deny access to a computer application or device.

8. The method according to claim 1, wherein, authentication information is securely stored in the entity'"'"'s wireless device.

9. The method according to claim 1, wherein, communication between the wireless device and electronic device is encrypted.

10. The method according to claim 1, wherein, multiple electronic devices are utilized.

11. The method according to claim 1, wherein, the location of the wireless device obtained from a wireless network is used to generate an authentication result.

12. The method according to claim 1, wherein, the authentication application maintains presence information of a wireless device.

13. At least one non-transitory computer-readable medium having computer-executable instructions that, when executed by at least one processing device, enable the at least one processing device to performing a method of authenticating an entity based on a wireless device associated with the entity and configured to generate a wireless signal, the method comprising the steps of:

detecting the wireless device entering into proximity of an electronic device configured to provide the entity, upon authentication of the entity, access to use of an application requiring secure access;

obtaining from the wireless signal a unique identifier associated with the wireless device;

obtaining authentication information based on the unique identifier;

generating an authentication result authenticating the entity based on at least one of the unique identifier associated with the wireless device and authentication key information based on the unique identifier; and

enabling the authenticated entity to use, with a device other than the wireless device, the application requiring secure access, wherein a portable memory device is used to securely store the authentication information and the entity'"'"'s unique identifier.

14. The medium according to claim 13, wherein,

a database is employed associating the entity'"'"'s unique identifier with authentication key information.

15. The medium according to claim 13, wherein,

a database is employed associating the entity'"'"'s unique identifier with an identity authentication application.

16. The medium according to claim 13, wherein,

a database is employed associating the entity'"'"'s unique identifier with a geographic place associated with a wireless device location.

17. The medium according to claim 13, wherein,

a portable memory device is used to securely store authentication key information.

18. The medium according to claim 13, wherein the method further comprises the step of generating an authentication result to allow access to a computer application or device associated with the mobile access point.

19. The medium according to claim 13, wherein the method further comprises the step of generating an authentication result to deny access to a computer application or device associated with the mobile access point.

20. The medium according to claim 13, wherein the method further comprises the step of encrypting communication between the wireless device and mobile access point.

21. The medium according to claim 14, wherein,

the databases and at least one processing device employed reside on separate and distinct computing platforms.

22. The medium according to claim 13, wherein, multiple mobile access points are utilized.