Centralized identification and authentication system and method
OwnerNader Asghari-Kamrani, Kamran Asghari-Kamraniinventors
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for enabling online entities to determine whether a user is truly the person who he says using a two-factor authentication technique and authenticating user's identity utilizing an authenticator.
Claims29
An authentication system for enhancing computer network security by authenticating a user in an electronic communication between a computing device of the user and an online computer system, the authentication system comprising one or more computing devices configured to perform operations comprising:
- while the online computer system is connected to the computing device of the user via a communication network, electronically receiving a request for a SecureCode;
- generating the SecureCode;
- while the online computer system is connected to the computing device of the user via the communication network, electronically providing to the user the SecureCode in response to the request for the SecureCode, wherein:
- the SecureCode is invalid after a predetermined time passes,
- the SecureCode is invalid after one use of the SecureCode for authentication, and
- the SecureCode is only valid for authenticating the user;
- and
- while the online computer system is connected to the computing device of the user via the communication network, electronically receiving from the online computer system a digital authentication request for authenticating the user, wherein:
- the digital authentication request comprises a digital identity of the user, and
- the digital identity includes the SecureCode;
- and
- while the online computer system is connected to the computing device of the user via the communication network, authenticating the user by evaluating a validity of the SecureCode included in the digital authentication request.
An authentication method for enhancing computer network security by authenticating a user in an electronic communication between a computing device of the user and an online computer system, the method comprising:
- while the online computer system is connected to the computing device of the user via a communication network, electronically receiving, a request for a SecureCode;
- generating the SecureCode;
- while the online computer system is connected to the computing device of the user via the communication network, electronically providing to the user the SecureCode in response to the request for the SecureCode, wherein:
- the SecureCode is invalid after a predetermined time passes,
- the SecureCode is invalid after one use of the SecureCode for authentication, and
- the SecureCode is only valid for authenticating the user;
- and
- while the online computer system is connected to the computing device of the user via the communication network, electronically receiving from the online computer system a digital authentication request for authenticating the user, wherein:
- the digital authentication request comprises a digital identity of the user, and
- the digital identity includes the SecureCode;
- and
- while the online computer system is connected to the computing device of the user via the communication network, authenticating the user by electronically evaluating a validity of the SecureCode included in the digital authentication request.
A system for enhancing computer network security comprising one or more computing devices configured to perform operations comprising:
- engaging in an electronic communication with a computing device of a user via a communication network;
- while the system is connected to the computing device of the user via the communication network, electronically sending a request for user-authentication information;
- while the system is connected to the computing device of the user via the communication network, electronically receiving from the user a response to the request for user-authentication information, wherein:
- the response to the request for user-authentication information comprises a digital identity of the user,
- the digital identity of the user includes a SecureCode generated by an authentication system and electronically provided to the user,
- the SecureCode becomes invalid after a predetermined time passes,
- the SecureCode becomes invalid after one use of the SecureCode for authentication, and
- the SecureCode is only valid for authenticating the user;
- while the system is connected to the computing device of the user via the communication network, electronically sending to the authentication system a digital user authentication request for authenticating the user, wherein the digital user authentication request includes the SecureCode;
- while the system is connected to the computing device of the user via the communication network, electronically receiving a response to the digital user authentication request indicating whether the authentication system authenticated the user;
- and
- enabling the user to proceed with the electronic communication when the response to the digital user authentication request indicates that the authentication system authenticated the user.
The system of claim of 26, wherein the sending the request for user-authentication information, receiving the response to the request for user-authentication information, the sending the digital user authentication request, and the receiving the response to the digital user authentication request all occur during the real-time interaction.
A method for enhancing computer network security comprising:
- engaging, by an online computer system, in an electronic communication with a computing device of a user via a communication network;
- while the online computer system is connected to the computing device of the user via the communication network, electronically sending a request for user-authentication information;
- while the online computer system is connected to the computing device of the user via the communication network, electronically receiving from the user a response to the request for user-authentication information, wherein:
- the response to the request for user-authentication information comprises a digital identity of the user,
- the digital identity of the user includes a SecureCode generated by an authentication system and electronically provided to the user,
- the SecureCode becomes invalid after a predetermined time passes,
- the SecureCode becomes invalid after one use of the SecureCode for authentication, and
- the SecureCode is only valid for authenticating the user;
- while the online computer system is connected to the computing device of the user via the communication network, electronically sending to the authentication system a digital user authentication request for authenticating the user, wherein the digital user authentication request includes the SecureCode;
- while the online computer system is connected to the computing device of the user via the communication network, electronically receiving a response to the digital user authentication request;
- and
- enabling the user to proceed with the electronic communication when the response to the digital user authentication request indicates that the authentication system authenticated the user.
Dependencies are inferred from the claim text.