Back to results
US 11,762,972 B1Granted
System and methods for a multi-factor remote user authentication
OwnerTara Chand Singhalinventor
Life of this patent
Estimating the term…
Abstract
A system of security for a remote user authentication service (RUAS) comprising: an authentication server, mobile wireless device with a SIM card embedded in the mobile wireless device and a RUAS logic that provide a multi-factor remote user authentication service, where one of the factors is a “what you have” factor of authentication, an electronic token in physical possession of the user that is interfaced with the authentication server over the global computer network; the SIM card, embedded in the mobile wireless device, emulates the electronic token to provide the “what you have” factor, thus obviating the need for the business to provision and for the user to carry a separate physical electronic token.
Claims16
A system of security for a remote user authentication service (RUAS) for authenticating a remote user to a business server, over a global computer network, the system of security comprising:
- an authentication server that has a CPU, a memory, a data server, and a RUAS logic stored in the memory and operating in the CPU;
- the authentication server enables a mobile wireless device of the remote user operating in a GSM wireless network, wherein the mobile wireless device has a SIM card embedded in the mobile wireless device, to interface with the authentication server;
- wherein, the SIM card, with a SIM memory is an electronic token, stores an Electronic Serial Number (ESN) and an International Mobility Equipment Identifier (IMEI), wherein they identify the mobile wireless device and the remote user to the GSM wireless network, wherein on an outgoing call from the mobile wireless device to a telephone number pre-assigned to the authentication server, the mobile wireless device reads from the SIM memory the ESN and the IMEI and transmits them to the GSM wireless network;
- wherein, the GSM wireless network using the ESN and the IMEI verifies the mobile wireless device and the remote user in a GSM wireless network database, and maps the mobile wireless device to a caller id and forwards the caller id to the authentication server;
- the RUAS logic verifies the SIM card of the mobile wireless device in the possession of the remote user as a “what you have” factor of authentication, wherein the RUAS logic matches the caller id for an incoming call from the mobile wireless device of the remote user with the remote user's caller id that had been pre-stored in the data server;
- the authentication server, on verification of the SIM card, delivers wirelessly a onetime use randomly generated alphanumeric to the remote user via the mobile wireless device, via an SMS system or an IVR system, for use as a “what you know” factor of authentication;
- and
- wherein the onetime use alphanumeric is used for a login screen of the remote user client connected to the authentication server on the global computer network, in a physical facility for entry access control for access to a closed facility, or for access to an Automated Teller Machine (ATM).
5 more elements
The system of security for a remote user authentication service (RUAS), as in 1, further comprising:
- the onetime use alphanumeric is transmitted by the RUAS logic to an application server for temporary storage for authenticating the remote user for the application where the caller id is used as an identifier and onetime alphanumeric is used for authentication.
A method of security for a remote user authentication service (RUAS) for authenticating a remote user to a business server, over a global computer network, the system of security comprising steps of:
- provisioning an authentication server that has a CPU, a memory, a data server, and a RUAS logic stored in the memory and operating in the CPU;
- enabling by the authentication server, providing a mobile wireless device of the remote user operating in a GSM wireless network, wherein the mobile wireless device has a SIM card embedded in the mobile wireless device, to interface with the authentication server;
- wherein the mobile wireless device providing the SIM card, as an electronic token with a SIM memory, storing an Electronic Serial Number (ESN) and an International Mobility Equipment Identifier (IMEI) therein, wherein on an outgoing call from the mobile wireless device to a telephone number pre-assigned to the authentication server, the mobile wireless device reading from the SIM memory the ESN and the IMEI and transmitting them to the GSM wireless network;
- wherein, verifying by the GSM wireless network using the ESN and the IMEI the mobile wireless device and the remote user in a GSM wireless network database, and mapping the mobile wireless device to a caller id and forwarding the caller id to the authentication server;
- verifying by the RUAS logic, the SIM card of the mobile wireless device in the possession of the remote user as a “what you have” factor of authentication, by matching the caller id for an incoming call from the mobile wireless device of the remote user with the remote user's caller id that had been pre-stored in the data server;
- delivering by the authentication server, on verification of the SIM card, wirelessly a onetime use randomly generated alphanumeric to the remote user via the mobile wireless device, via an SMS system or an IVR system, for use as a “what you know” factor of authentication;
- and
- wherein the onetime alphanumeric is used for a login screen of the remote user client connected to the authentication server on the global computer network, in a physical facility for entry access control for access to a closed facility, or for access to an Automated Teller Machine (ATM).
5 more elements
A method of providing multi-factor remote user authentication service (RUAS) for access to a business server using an authentication server on a global computer network having a CPU, a memory, a data server and RUAS logic stored in memory and operating on the CPU, comprising the steps of:
- providing by the RUAS, multi-factors of “what you have” and “what you know” for remote user authentication via utilizing a SIM card embedded in a mobile wireless device of a remote user operating in a GSM network, being mapped to a caller id in a GSM wireless network database, as the “what you have” factor of RUAS for eliminating authentication steps required of a remote user for the “what you have” factor;
- wherein the SIM card, acts as an electronic token with a SIM memory, storing an Electronic Serial Number (ESN) and an International Mobility Equipment Identifier (IMEI) therein, wherein on an outgoing call from the mobile wireless device to a telephone number pre-assigned to the authentication server, the mobile wireless device reading from the SIM memory the ESN and the IMEI and transmitting them to the GSM wireless network;
- wherein the GSM wireless network using the ESN and the IMEI to verify the mobile wireless device and the remote user in a GSM wireless network database, and maps the mobile wireless device to a caller id and forwards the caller id to the authentication server;
- verifying by the RUAS logic, the SIM card of the mobile wireless device in the possession of the remote user as a “what you have” factor of authentication, by matching a caller id for an incoming call from the mobile wireless device of the remote user with the remote user's caller id that had been pre-stored in the data server;
- transmitting, on verification of the SIM card, from the RUAS for receiving by the mobile wireless device, via an SMS system or an IVR system, a onetime use randomly generated alphanumeric, as a “what you know” factor for use in applications;
- and
- wherein the onetime use alphanumeric is for use with a login screen of the remote user client connected to the authentication server on the global computer network, in a physical facility for entry access control for access to a closed facility, or for access to an Automated Teller Machine (ATM).
4 more elements
Dependencies are inferred from the claim text.