# US 10,375,063 B2 · Systems and methods for combined OTP and KBA identity authentication utilizing academic publication data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,063 B2 - Document ID: US10375063B2 - Status: Granted - Kind: B2 - Application number: 15/454,355 - Filed: 2017-03-09 - Published: 2017-06-29 - Granted: 2019-08-06 - Earliest claimed: 2014-07-29 - Assignees: LexisNexis Risk Solutions Inc. - Applicants: LexisNexis Risk Solutions Inc. - Inventors: Benny Rotem; Bryan Knauss; Elina Yaakobovich - Web page: https://patentgrep.com/patent/US10375063B2 ## CPC - H04L 63/0838: {using one-time-passwords} - G06F 16/951: Indexing; Web crawling techniques - G06F 16/9535: Search customisation based on user profiles and personalisation - G06F 16/9538: Presentation of query results - G06F 21/31: User authentication - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/42: using separate channels for security data - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G06F 2221/2103: Challenge-response - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Certain implementations include systems and methods for combined one-time-passcode (OTP) and knowledge-based-authentication (KBA) identity authentication. A method is provided that includes receiving a set of identity information associated with a subject; querying one or more databases; receiving personally identifiable information; producing at least one knowledge based authentication (KBA) identity proofing question having a personally identifiable correct answer; generating a unique correct one-time pass (OTP) code for the personally identifiable correct answer; generating one or more incorrect answers with corresponding incorrect codes; outputting, the at least one KBA identity proofing question; outputting the personally identifiable correct answer with the unique correct OTP code, and the one or more incorrect answers with corresponding incorrect codes; receiving a response code; comparing the response code and the unique correct OTP code; and responsive to a match between the response code and the unique correct OTP code, outputting a first indication of authentication. ## Claims ### Claim 1 A computer-implemented method comprising: receiving a set of identity information associated with a subject; querying one or more databases with at least a portion of the set of identity information; receiving, in response to the querying, personally identifiable information associated with the subject, wherein the personally identifiable information comprises academic publication information; producing, with one or more computer processors, and based at least in part on the personally identifiable information, at least one knowledge based authentication (KBA) identity proofing question having a personally identifiable correct answer; generating a unique correct one-time pass (OTP) code for the personally identifiable correct answer; sending, for display on a first computing device associated with the subject, the at least one KBA identity proofing question; sending, for display on a second computing device associated with the subject, the personally identifiable correct answer with the unique correct OTP code, and one or more incorrect answers with corresponding incorrect codes; receiving, responsive to the sending, a response code and at least one identifier related to the first computing device; comparing the response code and the unique correct OTP code; comparing the at least one identifier and the set of identity information associated with the subject; responsive to a match between the response code and the unique correct OTP code, and responsive to a match between the at least one identifier and at least a portion of the set of identity information associated with the subject, sending, for display on the first computing device associated with the subject, a first indication of authentication. ### Claim 2 (depends on 1) The method of claim 1, wherein the at least one identifier related to the first computing device comprises one or more of: a phone number, an IP address, a MAC address, a location, an indication of signal-to-noise, browser configuration information, operating system information, a listing of installed fonts, and a listing of installed plug-ins, and wherein the personally identifiable information further comprises one or more of: private information; public record information; governmental information; utility information; and financial information. ### Claim 3 (depends on 1) The method of claim 1, further comprising sending, for display on the first computing device associated with the subject, an indication of authentication failure responsive to a determined mismatch between the at least one identifier and at least a portion of the set of identity information associated with the subject. ### Claim 4 (depends on 3) The method of claim 3, wherein the mismatch is determined based on a location of one or more of the first and second computing devices being associated with a geographical region having a high crime rate. ### Claim 5 (depends on 1) The method of claim 1, wherein the at least one KBA identity proofing question is sent via a first communication channel, and wherein the personally identifiable correct answer with the unique correct OTP code is sent via a second communication channel. ### Claim 6 (depends on 5) The method of claim 5, wherein the second communication channel differs from the first communication channel. ### Claim 7 (depends on 1) The method of claim 1, wherein the first computing device differs from the second computing device. ### Claim 8 (depends on 1) The method of claim 1, further comprising: receiving new biometric information associated with the subject; querying one or more databases for previously stored biometric information associated with the subject; comparing the new biometric information with the previously store biometric information; and responsive to a match between the new and previously stored biometric information, sending, for display on one or more of the first computing device and the second computing device, a second indication of authentication. ### Claim 9 (depends on 8) The method of claim 8, wherein the biometric information comprises one or more of: fingerprint image, voiceprint, facial feature image, and iris image. ### Claim 10 (depends on 1) The method of claim 1, wherein receiving the set of identity information comprises receiving, as applicable, one or more of: a name, an address, a birth date, a phone number, at least portion of a social security number, an IP address, a location, and a communication device electronic fingerprint. ### Claim 11 A system comprising: at least one memory for storing data and computer-executable instructions; and at least one processor configured to access the at least one memory and further configured to execute the computer-executable instructions to: receive a set of identity information associated with a subject; query one or more databases with at least a portion of the set of identity information; receive, in response to the querying, personally identifiable information, wherein the personally identifiable information comprises academic publication information; produce, with one or more computer processors, and based at least in part on the personally identifiable information, at least one knowledge based authentication (KBA) identity proofing question having a personally identifiable correct answer; generate a unique correct one-time pass (OTP) code for the personally identifiable correct answer; send, for display on a first computing device associated with the subject, the at least one KBA identity proofing question; send, for display on a second computing device associated with the subject, the personally identifiable correct answer with the unique correct OTP code, and one or more incorrect answers with corresponding incorrect codes; receive, responsive to the sending, a response code and at least one identifier related to the first computing device; compare the response code and the unique correct OTP code; compare the at least one identifier and the set of identity information associated with the subject; responsive to a match between the response code and the unique correct OTP code, and responsive to a match between the at least one identifier and at least a portion of the set of identity information associated with the subject, send, for display on the first computing device associated with the subject, a first indication of authentication. ### Claim 12 (depends on 11) The system of claim 11, wherein the at least one identifier related to the first computing device comprises one or more of: a phone number, an IP address, a MAC address, a location, an indication of signal-to-noise, browser configuration information, operating system information, a listing of installed fonts, and a listing of installed plug-ins, and wherein the personally identifiable information further comprises one or more of: private information; public record information; governmental information; utility information; and financial information. ### Claim 13 (depends on 11) The system of claim 11, wherein the at least one processor is further configured to execute the computer-executable instructions to send, for display on the first computing device associated with the subject, an indication of authentication failure responsive to a determined mismatch between the at least one identifier and at least a portion of the set of identity information associated with the subject. ### Claim 14 (depends on 13) The system of claim 13, wherein the mismatch is determined based on a location of one or more of the first and second computing devices being associated with a geographical region having a high crime rate. ### Claim 15 (depends on 11) The system of claim 11, wherein the at least one KBA identity proofing question is sent via a first communication channel, and wherein the personally identifiable correct answer with the unique correct OTP code is sent via a second communication channel. ### Claim 16 (depends on 15) The system of claim 15, wherein the second communication channel differs from the first communication channel. ### Claim 17 (depends on 11) The system of claim 11, wherein the first computing device differs from the second computing device. ### Claim 18 (depends on 11) The system of claim 11, wherein the at least one processor is further configured to execute the computer-executable instructions to: receive new biometric information associated with the subject; query one or more databases for previously stored biometric information associated with the subject; compare the new biometric information with the previously store biometric information; responsive to a match between the new and previously stored biometric information, send, for display on one or more of the first computing device and the second computing device, a second indication of authentication; and responsive to a mismatch between the new and previously stored biometric information, send, for display on one or more of the first computing device and the second computing device, an indication of a mismatch. ### Claim 19 (depends on 11) The system of claim 11, wherein the set of identity information comprises one or more of: a name, an address, a birth date, a phone number, at least portion of a social security number, an IP address, a location, and a communication device electronic fingerprint. ### Claim 20 (depends on 11) The system of claim 11, wherein a first communication channel is configured for communication with the first computing device, and wherein a second communication channel is configured for communication with the second computing device.