Back to results
US 12,002,048 B1Granted
Authentication system and method
OwnerAlexander Zaharopoulos Hughesinventor
Life of this patent
Estimating the term…
Abstract
An indication that a user wishes to conduct a bank transaction is received. An authentication path to be presented to the individual is pseudo-randomly determined. The authentication path comprises a combination of authentication challenges to be presented to the individual. A determination is made whether the user presented valid responses to the authentication challenges. The user is authenticated to conduct the bank transaction based on whether the user is determined to have presented valid responses to the authentication challenges.
Claims20
A method, comprising:
- receiving, by one or more processors, an indication that a user has requested to perform an activity requiring authorization;
- determining, by the one or more processors, that authorization of the activity requires a pseudo-random authentication process;
- generating, by the one or more processors, an authentication path for presentation to the user, the authentication path comprising a first portion and a second portion, wherein:
- the first portion of the authentication path comprises at least one authentication challenge of a plurality of authentication challenges determined and presented to the user responsive to the indication that the user has requested to perform the activity and prior to the user specifying parameters of the activity;
- and
- the second portion of the authentication path comprises two or more authentication challenges of the plurality of authentication challenges determined and presented to the user after the user specifies the parameters of the activity, an order of the second portion being pseudo-randomly determined responsive to the parameters of the activity being specified by the user and based on a type of the activity being specified by the user, wherein the second portion of the authentication path is presented to the user after valid responses to the at least one authentication challenge of the first portion have been provided;
- determining, by the one or more processors, that the user presented valid responses to the second portion of the authentication path;
- and
- authorizing, by the one or more processors, responsive to determining that the user presented valid responses to the second portion of the authentication path, the user to perform the activity requiring authorization.
6 more elements
A system, comprising:
- a processor and non-transitory machine readable storage media having instructions stored therein that, when executed by the processor, cause the processor to:
- receive an indication that a user has requested to perform an activity requiring authorization;
- determine that authorization of the activity requires a pseudo-random authentication process;
- generate an authentication path for presentation to the user, the authentication path comprising a first portion and a second portion, wherein:
- the first portion of the authentication path comprises at least one authentication challenge of a plurality of authentication challenges determined and presented to the user responsive to the indication that the user has requested to perform the activity and prior to the user specifying parameters of the activity;
- and
- the second portion of the authentication path comprises two or more authentication challenges of the plurality of authentication challenges determined and presented to the user after the user specifies the parameters of the activity, an order of the second portion being pseudo-randomly determined responsive to the parameters of the activity being specified by the user and based on a type of the activity being specified by the user, wherein the second portion of the authentication path is presented to the user after valid responses to the at least one authentication challenge of the first portion have been provided;
- determine that the user presented valid responses to the second portion of the authentication path;
- and
- authorize, responsive to the determination that the user presented valid responses to the second portion of the authentication path, the user to perform the activity requiring authorization.
7 more elements
Dependencies are inferred from the claim text.