Method and system for multiple passcode generation

• US 9,219,609 B2
• Filed: 11/05/2013
• Issued: 12/22/2015
• Est. Priority Date: 02/15/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Hird, Geoffrey, Varadarajan, Rammohan, Reno, James D.
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US14/072,392
• Publication Number:
  US 20140068271A1
• Time in Patent Office: 777 Days
• Field of Search: 713/184
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention relates to a method and a system for generating user passcodes for each of a plurality of transaction providers from a mobile user device. A method and system for activating a plurality of passcode generators on a user device configured with a passcode application installed on the user device is provided. Each of the passcode generators may correspond to a different user account or transaction provider, such that each passcode generator provides a user passcode configured for the corresponding account or transaction provider. One or more of the passcode generators may include a passcode generating algorithm and a passcode key. Access to one or more of the passcode generators may require providing a PIN or a challenge.

Claims

1. A system comprising:

a user device comprising an interface, a memory, and a processing unit, wherein the user device is configured to receive a passcode application through the interface over a network from a provisioning server and to store the passcode application in the memory;

a first passcode generating algorithm recorded in the memory;

wherein the user device is configured to receive, over the network via the interface of the user device;

first passcode information from a first provider interface associated with a first provider;

second passcode information from a second provider interface associated with a second provider;

third passcode information from a third provider interface associated with a third provider;

a first passcode generator defined by the first provider interface; and

a second passcode generator defined by the second provider interface;

wherein the user device is configured to execute the passcode application on the processing unit to;

generate a first passcode configured as a user passcode for the first provider using the first passcode generator, the first passcode generating algorithm, and the first passcode information;

generate a second passcode configured as a user passcode for the second provider using the second passcode generator, a second passcode generating algorithm, and the second passcode information;

activate an account with the third provider, wherein the user device being configured to activate the account comprises the user device being configured to;

recognize whether a third passcode generator and a third passcode generating algorithm defined by the third provider interface correspond to either the first passcode generator and the first passcode generating algorithm or the second passcode generator and the second passcode generating algorithm, and configure the first passcode generator for generating a user passcode for the third provider using the third passcode information and the first passcode generating algorithm responsive to a determination that the third passcode generator and the third passcode generating algorithm correspond to the first passcode generator and the first passcode generating algorithm; and

generate a third passcode configured as the user passcode for the third provider using the first passcode generator, the first passcode generating algorithm, and the third passcode information.

2. The system of claim 1, wherein the first passcode information comprises a first key defined by the first provider.

3. The system of claim 1, wherein the second passcode information comprises a second key defined by the second provider.

4. The system of claim 1, wherein the user device further comprises:

an input that is configured to receive an access PIN to access the passcode application.

5. The system of claim 1, wherein the user device further comprises:

an input that is configured to receive a first PIN to obtain the first passcode; and

wherein the input is configured to receive a second PIN to obtain the second passcode.

6. The system of claim 1, wherein the user device further comprises:

an input that is configured to receive a challenge configured for input as one of a first challenge to obtain the first passcode, and a second challenge to obtain the second passcode.

7. The system of claim 1, wherein the user device is configured to execute the passcode application on the processing unit to:

install the first passcode generator on the user device; and

install the second passcode generator on the user device.

8. A method comprising:

receiving, on a user device, a passcode application;

receiving on the user device a first passcode generator defined by a first provider;

receiving on the user device a second passcode generator defined by a second provider;

activating the first passcode generator to generate a first passcode configured as a user passcode for a transaction between a user and the first provider, wherein activating the first passcode generator comprises using a first algorithm on the user device;

activating the second passcode generator on the user device to generate a second passcode configured as a user passcode for a transaction between a user and the second provider, wherein activating the second passcode generator comprises using a second algorithm on the user device;

performing an activation process for an account between the user and a third provider, including recognizing whether a third passcode generator and a third algorithm defined by the third provider corresponds to either the first passcode generator and the first algorithm on the user device or to the second passcode generator and the second algorithm on the user device;

responsive to a determination that the third passcode generator and the third algorithm correspond to the first passcode generator and the first algorithm on the user device, configuring the first passcode generator on the user device to use the first algorithm for generating a third passcode for a transaction between the user and the third provider.

9. The method of claim 8, further comprising:

displaying one of the first passcode, the second passcode, and the third passcode on a display of the user device.

10. The method of claim 8, further comprising:

receiving first provider information from a first provider interface via the user device; and

wherein the first provider information comprises a first passcode key configured to activate the first passcode generator on the user device.

11. The method of claim 10, further comprising:

receiving second provider information from a second provider interface via the user device; and

wherein the second provider information comprises a second passcode key configured to activate the second passcode generator on the user device.

12. The method of claim 8, wherein activating the first passcode generator comprises activating a first passcode key on the user device, wherein of the first algorithm and the first passcode key together are configured to generate the first passcode.

13. The method of claim 8, wherein activating the second passcode generator comprises activating a second passcode key on the user device, wherein the second algorithm and the second passcode key together are configured to generate the second passcode.

14. The method of claim 8, wherein configuring the first passcode generator on the user device for generating a third passcode for a transaction between the user and the third provider comprises:

activating a third passcode key on the first passcode generator, wherein the first algorithm and the third passcode key together are configured to generate the third passcode.

15. The method of claim 8, further comprising:

inputting a PIN into the user device, wherein the PIN is one of an access PIN to access the passcode application, a first PIN to obtain the first passcode, and a second PIN to obtain the second passcode.

16. The method of claim 15, wherein two or more of the access PIN, the first PIN and the second PIN are the same PIN.

17. The method of claim 8, further comprising:

generating the third passcode using the first passcode generator, the first algorithm, and passcode information from the third provider.

18. A tangible, non-transitory computer-readable medium having instructions stored thereon that when executed by a processor cause the processor to:

receive on a user device a passcode application;

receive on the user device a first passcode generator defined by a first provider;

receive on the user device a second passcode generator defined by a second provider;

activate the first passcode generator using a first algorithm on the user device to generate a first passcode configured as a user passcode for a transaction between a user and the first provider;

activate the second passcode generator using a second algorithm on the user device to generate a second passcode configured as a user passcode for a transaction between a user and the second provider;

perform an activation process for an account between the user and a third provider, comprising causing the processor to recognize whether a third passcode generator and a third algorithm defined by the third provider corresponds to either the first passcode generator and the first algorithm on the user device or to the second passcode generator and the second algorithm on the user device;

responsive to a determination that the third passcode generator and the third algorithm correspond to the first passcode generator and the first algorithm on the user device, configure the first passcode generator on the user device for generating a third passcode for a transaction between the user and the third provider using the first algorithm.

19. The tangible, non-transitory computer-readable medium of claim 18, wherein the instructions further cause the processor to:

receive passcode information from a provider interface associated with the third provider; and

generate the third passcode using the first passcode generator, the first algorithm, and the passcode information from the third provider.