Multichannel device utilizing a centralized out-of-band authentication system (COBAS)

A multichannel security system for granting and denying access to a host computer, said access in response to a demand from an accessor for access to the host computer, said accessor having an associated cellular telephone for providing communications to the security system, said multichannel security system comprising:

• a login identification accompanying said demand from an accessor for access to said host computer;
• interception means for receiving and verifying said login identification, said interception means in an access channel;
• an authentication channel operating independently from said access channel and, said authentication channel, in turn, comprising;
• a security computer adapted in the access-channel mode to receive from said interception means said demand for access together with said login identification and to communicate access information to said host computer and in the authentication-channel mode communications with said associated cellular telephone of said accessor;
• a subscriber database in said security computer for retrieval of peripheral addresses corresponding to said login identification;
• said security computer adapted to connect to said associated cellular telephone of said accessor;
• prompt means for instructing said accessor to re-enter predetermined data at and retransmit predetermined data from said associated cellular telephone to said multichannel security system;
• comparator means in said security computer for authenticating access demands in response to retransmission of predetermined data from said associated cellular telephone of said accessor;
• said security computer, upon verifying a match between said predetermined data and the re-entered and retransmitted data, providing in the access-channel mode instructions to the host computer to grant access thereto along said access channel;
• an authentication program means, operating independently from said host computer, for authenticating an individual demanding access to said host computer;
• a biometric analyzer operating in response to instructions from said authentication program means to analyze a monitored parameter of said accessor;
• and,
• a biometric parameter database addressable by the biometric analyzer for retrieval of a previously registered sample of said individual, said sample corresponding to the identifier of said accessor.

A multichannel security system for granting and denying access to a host computer, said access in response to a demand over the internet from an accessor for access to the host computer, said accessor having an associated personal digital assistant (PDA) for providing communications to the security system, said multichannel security system comprising:

• a login identification accompanying said demand over the internet from an accessor for access to said host computer;
• interception means for receiving and verifying said login identification, said interception means in an access channel;
• an authentication channel operating independently from said access channel and, said authentication channel, in turn, comprising;
• a security computer adapted in the access-channel mode to receive from said interception means said demand over the internet for access together with said login identification and to communicate access information to said host computer and in the authentication-channel mode communications with said associated PDA of said accessor;
• a subscriber database in said security computer for retrieval of peripheral addresses corresponding to said login identification;
• said security computer adapted to connect to said associated PDA of said accessor;
• prompt means for instructing said accessor to re-enter predetermined data at and retransmit predetermined data from said associated PDA to said multichannel security system;
• comparator means in said security computer for authenticating access demands in response to retransmission of predetermined data from said associated PDA of said accessor;
• said security computer, upon verifying a match between said predetermined data and the re-entered and retransmitted data, providing in the access-channel mode instructions to the host computer to grant access thereto along said access channel;
• an authentication program means, operating independently from said host computer, for authenticating an individual demanding access to said host computer;
• a biometric analyzer operating in response to instructions from said authentication program means to analyze a monitored parameter of said accessor;
• and,
• a biometric parameter database addressable by the biometric analyzer for retrieval of a previously registered sample of said individual, said sample corresponding to the identifier of said accessor.