US 2014/0317713 A1Published application

Method and System of User Authentication Using an Out-of-band Channel

AssigneeMpayme Ltd.

InventorAlessandro GADOTTI

Life of this patent

Estimating the term…

Loading patent…

Abstract

The user authentication method comprises: a central processing server generates an encoded data, such as a QR code, from encoding a session number, which can be randomly generated; a first client computing device displays a login page that includes the QR code to a user for authentication; the user uses a mobile communication that has already been registered and paired with the user account stored in the central processing server to image-capture the QR code, and sends the decoded QR code data to the central processing server; the central processing server validates the decoded QR code data against the session number; upon a positive validation, the user may need to enter his/her security PIN according to configuration in the second mobile communication and be sent to the central processing server for validation; and upon a positive validation, the user authentication is completed.

Claims10

Dependent claims

A computer processor implemented method for online user authentication, comprising:

generating an encoded data, by a central processing server, wherein the encoded data is encoded for a data comprising a session number stored in the central processing server;
presenting the encoded data to a user for user authentication;
image-capturing the encoded data, by a mobile communication device equipped with a camera or optical scanner, wherein the mobile communication device is associated with a user account associated with the user, wherein the user account record is stored in the central processing server, and wherein the user account record comprises an identification data of the mobile communication device;
decoding the image-captured encoded data, by the mobile communication device, to extract the session number;
sending, by the mobile communication device, the extracted session number and an identification data of the mobile communication device to the central processing server;
and
authenticating the user, by the central processing, by matching the extracted session number and the identification data of the mobile communication device received from the mobile communication to the session number stored in the central processing and the identification data of the mobile communication device in the user account record.

4 more elements

A system for online authenticating a user, comprising:

a central processing server configured to:
generate an encoded data, wherein the encoded data is encoded for a data comprising a session number stored in the central processing server;
and
authenticate the user by matching the extracted session number and an identification data of an mobile communication device received from the mobile communication to the session number stored in the central processing and the identification data of the mobile communication device in an user account record associated with the user;
the mobile communication device, which is equipped with a camera or optical scanner, is configured to:
image-capture the encoded data when the encoded data is presented for user authentication;
decode the image-captured encoded data to extract the session number;
and
send the extracted session number and an identification data of the mobile communication device to the central processing server;
wherein the mobile communication device is associated with the user account, wherein the user account record is stored in the central processing server, and wherein the user account record comprises an identification data of the mobile communication device.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/321,830Filed 2 Jul 2014
Priority: 2 Sep 2012
Published: 23 Oct 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
G06F 21/36
User authentication: by graphic or iconic representation
G06F 21/42
User authentication: using separate channels for security data
G06Q 20/322
Using wireless devices: aspects of commerce using mobile devices [M-devices]

Family

Application13/602,197Continuation in part · filed 2 Sep 2012
Application61/842,386Us provisional application · filed 3 Jul 2013
Application14/321,830Continuation in part
US 2013/0262309 A1Published application
US 2014/0317713 A1This patent

From the US filing history. Foreign family members aren’t listed.