Multichannel device utilizing a centralized out-of-band authentication system (cobas)

A method for controlling access to a host computer, the method comprising:

• receiving, at a security computer, through a first communication path, a user's request to access the host computer and the user's login identification,
• wherein the user's login identification was received by an accessor device from the user, and
• wherein the user's request to access was diverted to the security computer;
• verifying the login identification;
• outputting, at the security computer, a prompt requesting transmission of data from the user through a second communication path, wherein the second communication path differs from the first communication path by at least one path resource;
• receiving, at the security computer, the requested transmission of data from the user through a communication path other than the first communication path, wherein the communication path other than the first communication path differs from the first communication path by at least one path resource;
• authenticating the user's identity, at the security computer, based on the received data transmission from the user;
• and
• in response to said user being authenticated, sending a message from the security computer to the host computer that causes the user to be granted or denied access to the host computer.

A method for controlling access to a host computer, comprising the steps of:

• receiving at a security computer a user's request to access to the host computer, wherein the request to access was transmitted from an accessor device and diverted to the security computer;
• receiving at the security computer a user identification and a first password from the accessor device, wherein the user identification and first password were received by the accessor device from the user;
• verifying at the security computer that the first password matched a predetermined password associated with the user;
• outputting a request for response to a peripheral device, wherein the outputting comprises initiating a communication to the peripheral device and receiving a response indicating a connection with the peripheral device;
• outputting to the peripheral device a prompt to the user to provide a spoken password;
• receiving from the peripheral device the user-provided spoken password;
• verifying at the security computer that the received user-provided spoken password matches a predetermined spoken password;
• and
• outputting a message to cause the host computer to grant access based on the user-provided spoken password.

A security system for controlling access to a host computer using a mobile device, the system comprising a security computer configured to:

• receive a user identification from a first communication path, wherein the user identification was input by a user requesting access to an Internet-connected web server, wherein the web server is associated with a commercial institution;
• receive predetermined data associated with the user identification, wherein the predetermined data comprises an address of a mobile device;
• output to the mobile device an instruction through a second communication path, wherein the second communication path differs from the first communication path by at least one path resource and wherein the instruction requests a user input;
• receive the requested user input through a path other than the first communication path;
• authenticate the user's identity based on the received user input;
• and
• based on the authentication of the user's identity, output an instruction that causes the user to be granted or denied access to the host computer.

A method for controlling access to a host computer, the method comprising:

• receiving, at a security computer, through a first communication path, a user's request to access the host computer and the user's login identification,
• wherein the user's login identification was received by an accessor device from the user, and
• wherein the user's request to access was diverted to the security computer;
• verifying the login identification;
• outputting, at the security computer, a prompt requesting transmission of data from the user through a second communication path, wherein the second communication path differs from the first communication path by at least one path resource;
• receiving, at the security computer, the requested transmission of data from the user;
• authenticating the user's identity, at the security computer, based on the received data transmission from the user;
• and
• in response to said user being authenticated, sending a message from the security computer to the host computer that causes the user to be granted or denied access to the host computer.