# US 2019/0173855 A1 · System and method for authenticating users > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0173855 A1 - Document ID: US20190173855A1 - Status: Published application - Kind: A1 - Application number: 16/213,025 - Filed: 2018-12-07 - Published: 2019-06-06 - Earliest claimed: 2009-03-25 - Assignees: Pacid Technologies, LLC - Applicants: Pacid Technologies, LLC - Inventors: Guy Fielder - Web page: https://patentgrep.com/patent/US20190173855A1 ## CPC - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/14: using a plurality of keys or algorithms - G06F 2221/2123: Dummy operation - H04L 2209/24: Key scheduling, i.e. generating round keys or sub-keys for block encryption - H04L 2463/121: Timestamp - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A security application for a computing device, e.g., a mobile phone, allows generation of a secret according to a unique user input (e.g., user credentials). The secret is stored in a directory such that it is retrievable when the unique user input is received via a user interface of a device on which the security application executes or is coupled with. Responsive to receiving an identifier associated with the secret, the security application prompts, e.g., via a user interface of the mobile phone, entry of the unique user input; and, subsequently, verifies the unique user input. Following such verification, the security application provides the secret for use in encoding a communication with a remote computer-based station. Entry of the user credentials may be required prior to the security application generating the secret, and may be responsive to receipt of an invitation (e.g., from the remote computer-based station) to generate it. ## Claims ### Claim 1 A system for authenticating a user, comprising: a computing device configured by an application running on a processing unit of the computing device to generate a secret in response to the computing device receiving a unique user input, and to store said secret at the computing device along with an identifier so as to be retrievable when said unique user input is again provided by the user of the computing device; a remote computer-based station configured to send the computing device a first communication, said first communication including said identifier associated with the secret, wherein the computing device is further configured by the application running on the computing device to (i) prompt the user of the computing device for said unique user input, (ii) verify said unique user input in response to receiving said unique user input, and (iii) in response to verifying said unique user input, transmit to the remote computer-based station a second communication encoded using the secret, and the remote computer-based station is further configured to receive and process the second communication to authenticate the user. ### Claim 2 (depends on 1) The system of claim 1, wherein the secret comprises an encryption key and the computing device is further configured by the application to store the encryption key on the computing device along with other information and to use the identifier to distinguish the encryption key from the other information. ### Claim 3 (depends on 1) The system of claim 1, wherein the computing device comprises a mobile computing device. ### Claim 4 (depends on 3) The system of claim 3, wherein the mobile computing device is further configured by the application to await receipt of an invitation to create the secret prior to generating the secret. ### Claim 5 (depends on 1) The system of claim 1, wherein the computing device is further configured by the application to store the secret on the computing device in an encrypted format. ### Claim 6 (depends on 1) The system of claim 1, wherein the unique user input comprises user credentials. ### Claim 7 (depends on 1) The system of claim 1, wherein the first communication and the first and second communications comprise two related communications of a communication session. ### Claim 8 (depends on 1) The system of claim 1, wherein the computing device is further configured by the application to await receipt of an invitation to create the secret prior to generating the secret. ### Claim 9 (depends on 7) The system of claim 7, wherein the remote computer-based station is further configured to transmit the invitation to create the secret. ### Claim 10 (depends on 4) The system of claim 4, wherein the secret comprises an encryption key and the computing device is further configured by the application to store the encryption key on the computing device along with other information and to use the identifier to distinguish the encryption key from the other information. ### Claim 11 (depends on 4) The system of claim 4, wherein the first communication comprises a request for user credentials of the user of the computing device. ### Claim 12 (depends on 4) The system of claim 4, wherein the computing device is further configured by the application to await receipt of the invitation to create the secret from the remote computer-based station. ### Claim 13 (depends on 4) The system of claim 4, wherein the first and second communications comprise two related communications of a communication session. ### Claim 14 A remote computer-based station, comprising: a processor and a memory communicatively coupled to the processor, the memory storing an identifier received from a mobile device, and further storing instructions for execution by the processor, which instructions when executed by the processor cause the processor to performing steps including: sending a first communication to the mobile device that includes the identifier, receiving a second communication from the mobile device that is encoded using a secret that was generated according to a unique user input by an application running on the mobile device, said secret associated with the identifier; attempting to process the second communication by decoding it using security parameters associated with the identifier; authenticating the mobile device if the second communication is able to be decoded; and denying authentication to the mobile device if the second communication is not able to be decoded.