US 2014/0157393 A1 · PROXY AUTHENTICATION NETWORK

Abstract

A Proxy Authentication Network includes a server that stores credentials for subscribers, along with combinations of devices and locations from which individual subscribers want to be authenticated. Data is stored in storage: the storage can be selected by the subscriber. The data stored in the storage, which can be personally identifiable information, can be stored in an encrypted form. The key used to encrypt such data can be divided between the storage and server. In addition, third parties can store portions of the encrypting key. Subscribers can be authenticated using their credentials from recognized device/location combinations; out-of-band authentication supports authenticating subscribers from other locations. Once authenticated, a party can request that the encrypted data be released. The portions of the key are then assembled at the storage. The storage then decrypts the data, generates a new key, and re-encrypts the data for transmission to the requester.

Claims38

Dependent claims

A method of authenticating via a computer server, comprising:

the computer server receiving via a first communications channel an authentication token from a first authentication client;
the computer server determining an authenticity of the authentication token;
and in accordance with an outcome of the authenticity determining, the computer server transmitting a payload to a second authentication client via a second communications channel distinct from the first communications channel.

Dependencies are inferred from the claim text.

Facts

Application

14/174,059Filed 6 Feb 2014

Priority

13 Jun 2005

Published

5 Jun 2014

Term ends

Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/0884
For authentication of entities: by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity…
G06F 21/33
User authentication: using certificates
H04L 9/085
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…
H04L 9/0861
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: generation of secret information…

Family

Application60/690,548Us provisional application · filed 13 Jun 2005

Application11/423,565Continuation · filed 12 Jun 2006

Application13/197,640Continuation · filed 3 Aug 2011

Application14/174,059Continuation

US 2006/0282662 A1Published application

US 2011/0289314 A1Published application

US 8,028,329 B2Related patent

US 8,856,891 B2Related patent

US 2014/0157393 A1This patent

From the US filing history. Foreign family members aren’t listed.

Proxy authentication network

Life of this patent

Proxy authentication network

Life of this patent

Abstract

Claims38