# US 10,771,971 B2 · Secured multi-factor authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,971 B2
- Document ID: US10771971B2
- Status: Granted
- Kind: B2
- Application number: 15/787,292
- Filed: 2017-10-18
- Published: 2019-04-18
- Granted: 2020-09-08
- Earliest claimed: 2017-10-18
- Applicants: Samuel Salloum
- Inventors: Samuel Salloum
- Web page: https://patentgrep.com/patent/US10771971B2

## CPC

- H04W 12/06: Authentication
- H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)}
- H04L 63/0838: {using one-time-passwords}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- H04L 67/306: User profiles
- H04L 2463/082: applying multi-factor authentication
- H04W 4/14: Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The aspects disclosed herein are directed to systems and methods for employing multi-factor authentication for the transfer of goods or information. By employing the aspects disclosed herein, the authentication may become more secure and less vulnerable to attacks by unauthorized parties. The aspects disclosed herein may be implemented as a thin-client implementation, or a thick-client implementation.

## Claims

### Claim 1

A method for providing multi-factor authentication at a client to access a server via an authentication process, comprising:
receiving, via the server, a command indicating an application is opened;
providing, via the server, an application login;
generating, via the server, a random number based on a one-time password (OTP) created at the server;
receiving, via the server, the random number from the server;
receiving the OTP from the server via a communication technique independent of the client;
disabling a primary interface device associated with the client prior to the authentication process timing out;
prompting, via the client, a request to enter the OTP;
mapping the entered OTP into a client generated random number;
determining whether the random number from the client generated random number matches the server generated random number mapped to OTP; and
allowing access from the client in response to the matching being affirmative, wherein an application employed to convert the random number is provided via the server, and generated simultaneously with the generation of the OTP.

### Claim 2 (depends on 1)

The method according to claim 1, further comprising prior to receiving the random number, requiring a login via the user device, the login being authenticated by the server.

### Claim 3 (depends on 1)

The method according to claim 1, wherein the entry of the client OTP is performed using a secondary user interface that is different from the primary interface device associated with the client.

### Claim 4 (depends on 1)

The method according to claim 1, wherein the determination is performed at the server.

### Claim 5 (depends on 1)

The method according to claim 1, wherein the determination is performed at the client.

### Claim 6 (depends on 1)

The method according to claim 1, wherein the OTP is communicated to the user associated with client, via a medium independent of the client.

### Claim 7 (depends on 6)

The method according to claim 6, wherein the communication is through SMS.

### Claim 8 (depends on 6)

The method according to claim 6, wherein the communication is through electronic mail.

### Claim 9 (depends on 1)

The method according to claim 1, wherein the OTP is configured to expire after a predetermined amount of time.

### Claim 10 (depends on 1)

The method according to claim 1, wherein the primary interface device is a keyboard.

### Claim 11 (depends on 3)

The method according to claim 3, wherein the secondary user interface is one of a graphical user interface, a voice input, or a digits bar.

### Claim 12 (depends on 1)

The method according to claim 1, wherein the random number comprises a predetermined number of digits per every digit of the OTP, wherein the predetermined number of digits is greater than one.