Methods and systems for authenticating users

• US 9,781,107 B2
• Filed: 10/26/2015
• Issued: 10/03/2017
• Est. Priority Date: 08/05/2009
• Status: Active Grant

• Current Assignee: Corporation DAON Technology
• Original Assignee: Daon Holdings Limited
• Inventors: White, Conor Robert, Peirce, Michael, Cramer, Jason Scott, Steiner, Chet Bradford, Diebes, Suzanna
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin
• Application Number:
  US14/922,310
• Publication Number:
  US 20160042167A1
• Time in Patent Office: 708 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled. Additionally, the method includes validating the communications device, capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device, biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.

Claims

1. A method for authenticating users comprising:

determining, by a processor, based on a user request to conduct a transaction, a risk level for the transaction and at least one risk factor related to conditions under which the transaction is requested, the transaction for unlocking an electronic door lock;

determining, based on the transaction risk level and the at least one risk factor, a biometric parameter for authenticating the user;

authenticating the user based on the biometric parameter; and

transmitting a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.

2. A method for authenticating users in accordance with claim 1, said determining, based on a user request to conduct a transaction, step further comprising:

determining a type of the transaction;

identifying a policy that corresponds to the transaction; and

determining, based on the policy, the at least one risk factor.

3. A method for authenticating users in accordance with claim 2, said determining, based on the transaction risk level and the at least one risk factor, step comprising determining, based on the policy, the parameter for authenticating the user.

4. A method for authenticating users in accordance with claim 1, said determining, based on the user request to conduct the transaction, step comprising:

determining a type of the transaction;

selecting at least one rule included in a policy that corresponds to the transaction; and

identifying, based on the at least one rule, the at least one risk factor.

5. A computing device for authenticating users comprising:

a processor; and

a memory configured to store data, said computing device being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when executed by said processor, cause said computing device to;

determine, based on a user request to conduct a transaction, a risk level for the transaction and at least one risk factor related to conditions under which the transaction is requested, the transaction for unlocking an electronic door lock;

determine, based on the transaction risk level and the at least one risk factor, a biometric parameter for authenticating the user;

authenticate the user based on the biometric parameter; and

transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.

6. A computing device for authenticating users in accordance with claim 5, wherein the at least one risk factor comprises a timing of the transaction or a geographic location of the transaction.

7. A computing device for authenticating users in accordance with claim 5, wherein the instructions when read and executed by said processor further cause said computing device to:

determine a type of the transaction;

identify a policy that corresponds to the transaction; and

determine, based on the policy, the at least one risk factor.

8. A computing device for authenticating users in accordance with claim 5, wherein the instructions when read and executed by said processor further cause said computing device to:

determine a type of the transaction;

select at least one rule included in a policy that corresponds to the transaction; and

identify, based on the at least one rule, the at least one risk factor.

9. A computing device for authenticating users in accordance with claim 5, said computing device being an authentication computer system.

10. A computing device for authenticating users in accordance with claim 5, said computing device being a smart phone.

11. A computing device for authenticating users in accordance with claim 5, said computing device being a tablet computer.

12. A computer program recorded on a non-transitory computer-readable recording medium included in a computing device for enhancing accuracy of biometric authentication transaction results, the computer program being comprised of instructions, which when read and executed by the computing device, cause the computing device to:

determine, based on a user request to conduct a transaction, a risk level for the transaction and at least one risk factor related to conditions under which the transaction is requested, the transaction for unlocking an electronic door lock;

determine, based on the transaction risk level and the at least one risk factor, a biometric parameter for authenticating the user;

authenticate the user based on the biometric parameter; and

transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.

13. A computer program in accordance with claim 12, wherein the instructions, when read and executed by the computing device, cause the computing device to:

determine a type of the transaction;

identify a policy that corresponds to the transaction; and

determine, based on the policy, the at least one risk factor.

14. A computer program in accordance with claim 12, wherein the instructions, when read and executed by the computing device, cause the computing device to:

determine a type of the transaction;

select at least one rule included in a policy that corresponds to the transaction; and

identify, based on the at least one rule, the at least one risk factor.