Multichannel device utilizing a centralized out-of-band authentication system (cobas)

A software method for employing a multichannel security system to control access to a computer, comprising the steps of:

• receiving at an interception device in a first channel a login identification demand to access a host computer also in the first channel;
• verifying the login identification;
• receiving at a security computer in a second channel the demand for access and the login identification;
• outputting from the security computer a prompt requesting transmission of data;
• receiving the transmitted data at the security computer;
• comparing the transmitted data to predetermined data;
• and
• depending on the comparison of the transmitted and the predetermined data, outputting an instruction from the security computer to the host computer to grant access to the host computer or deny access thereto.

A software method for controlling access to a host computer, comprising the steps of:

• receiving a request from a client computer for access to the host computer;
• outputting an instruction to present a login screen at the client computer;
• receiving an identification and first password from the client computer;
• retrieving a predetermined password from a subscriber database associated with the identification;
• verifying the first password matches the predetermined password;
• outputting a call-back request to a peripheral device comprising initiating a communication to the peripheral device and receiving a signal indicating a connection with the peripheral device;
• outputting an instruction to retrieve a predetermined second password;
• outputting to the peripheral device a prompt to enter a user-entered password;
• receiving from the peripheral device the user-entered password;
• verifying the received user-entered password;
• outputting to the peripheral device a second prompt to speak a password;
• receiving from the peripheral device the spoken password;
• verifying the received spoken password;
• and
• outputting an announcement that access to the host computer is granted.

A multichannel security system for granting and denying access to a host computer in a network environment comprising:

• a security computer for communicating data via an authentication channel and an access channel;
• a line module program for intercepting a login identification accompanying a demand from an accessor in the access channel to access the host computer also in the access channel, verifying the login identification, and transmitting the login identification to an authentication channel;
• an authentication program in the authentication channel for authenticating the login identification received from the line module program;
• a prompt module program for selecting an announcement, outputting to a peripheral device or computer the announcement, verifying a speech or dual tone multi frequency (DTMF) password received, and optionally converting the speech to text;
• and
• a granting module program for granting and denying access to the host computer based on the received speech or password.

A software method for employing a multichannel security system to control access to a computer, comprising the steps of:

• receiving at a security computer predetermined data sent via an authentication channel from a peripheral device;
• identifying the peripheral device from a subscriber database and verifying the predetermined data by comparing it to stored data associated with the peripheral device;
• receiving a demand to access a host computer via an access channel comprising a login identification of an accessor;
• receiving the login identification at an interception device and routing the login identification to the security computer;
• and
• at the security computer, verifying that the login identification matches the predetermined data, and if it does, outputting an instruction to either grant or deny access to the access channel.

A software method for employing a multichannel security system to control access to a host computer in an access channel using a mobile device in an authentication channel, comprising the steps of:

• providing a first software module on an Internet-connected web server in an access channel, the server being associated with a commercial institution, wherein the first software module receives a user ID associated with a subscriber account, and outputs information about the user ID;
• and
• providing a second software module on a security computer different than the web server, wherein the security computer is in an authentication channel, and wherein the second software module receives the user ID from the access channel, retrieves predetermined data from a subscriber database associated with the user ID, including at least a telephone number or IP address of a mobile device, and outputs in the authentication channel an instruction to the mobile device,
• wherein when a subscriber attempts to logon to a host computer in the access channel at the commercial institution, the second software module compares an input from the mobile device to the predetermined data and outputs an instruction to the first software module to grant access to the host computer or deny access thereto.

A software method for employing a multichannel security system to control access to a computer, comprising the steps of:

• receiving in a first channel a login identification demand to access a host computer also in the first channel;
• verifying the login identification;
• receiving at a security computer in a second channel the demand for access and the login identification;
• outputting from the security computer a prompt requesting a transmission of data;
• receiving the transmitted data at the security computer;
• comparing the transmitted data to predetermined data;
• and
• depending on the comparison of the transmitted and the predetermined data, outputting an instruction from the security computer to the host computer to grant access to the host computer or deny access thereto.

Apparatus for implementing a multichannel security system to control access to a computer, comprising:

• a device for receiving a login identification and demand to access a host computer, wherein the device and the host computer are in a first channel;
• and
• a security computer in a second channel for receiving the login identification and the access demand and outputting a prompt requesting a transmission of data once said login identification is verified by said security computer,
• wherein said security computer comprises a component for receiving the transmitted data and comparing said transmitted data to predetermined data, such that, depending on the comparison of the transmitted and the predetermined data, said security computer outputs an instruction to the host computer to grant access to the host computer or deny access thereto.