Smart Device User Authentication
AssigneeRSSBus, Inc.
InventorsGent Hito, Tomas Restrepo Madrid
Life of this patent
Estimating the term…
Abstract
Techniques for simplifying an authentication process from the viewpoint of a user while providing improved security to the many users currently employing no or weak security techniques. In logging into a web site hosted by a web server, a session begins by a user connecting and logging in with a device, such as a personal computer. Rather than a user name and password approach which is presently typical, the personal computer communicates with another user device, such as a smart phone. In one approach, an encoded acoustic signal is employed for this communication. The smart phone securely communicates with an authentication server which informs the web server whether the user has been authenticated or not.
Claims20
A user verification method comprising:
- beginning a log in process for a user to utilize a web site by employing a first device to communicate with a web server having an address on a first channel and hosting the web site;
- providing a signal from the first device to a second device which is portable;
- evaluating the signal from the first device by the second portable device;
- communicating the address of the web server and authentication information for the user on a second channel by the second portable device;
- and
- authorizing the user to conduct a session with the web site.
An authentication server comprising:
- memory storing a public and private key pair uniquely identifying a mobile device of a user to the authentication server;
- a first input connection to a first channel for communicating with the mobile device of the user;
- a second input connection to a second channel for communicating with a second device employed by the user to access a server application;
- and
- a software application executed by a processor to recognize the public and private key pair received from the mobile device utilizing the first input connection;
- the software application further receiving a unique session identifier on the second input connection and comparing the unique session identifier with a session identifier received on the first input connection from the mobile device.
Dependencies are inferred from the claim text.