Systems and methods for performing authentication

A method for authenticating in conjunction with the use of a remote device of a customer, the remote device including a secure processor, the method comprising:

• generation by the secure processor of a display in a display portion, the display containing a plurality of glyphs, the generation using processing known to a remote authenticator system, the secure processor communicating with the display portion via a first transmission path;
• inputting a customer selection made by the customer of some of the glyphs displayed using a pattern previously agreed on and known by the authenticator system;
• transmitting the customer selection via a second transmission path to the remote authentication system,
• repetition of the generation and selection of the glyphs by the remote authentication system so as to generate a comparison selection, and
• performing a comparison of the customer selection vis-á-vis the comparison selection, so as to authenticate the customer selection;
• and
• outputting results from the comparison.

A method for authenticating a requested transaction effected by a user device, the method including:

• receiving an authentication request from an authentication entity, the authentication request dictating a checksum operation to be performed on particular data in the user device;
• performing the checksum operation on the particular data, so as to generate a checksum authentication query value (CAQ value);
• comparing the CAQ value with an authenticated checksum value;
• and
• generating an authentication determination, based on the comparing, so as to authenticate the requested transaction.

A system for authenticating that memory of a remote device matches a known processing code, in conjunction with performing a financial transaction, the remote device operated by a customer, the system comprising:

• a communications portion, constituted by a first non-transitory processor, programmed to receive transaction data from the remote device, the transaction data related to a requested financial transaction, the communications portion inputting device identification information from the remote device;
• and
• a processing portion, constituted by a second non-transitory processor, disposed in an authentication entity, the processing portion programmed to:
• select at least one query, based on the device identification information, the query comprising instructions to check processing code in the remote device for performing a validity test;
• send, by the processor, the at least one query to the remote device the query comprising one or more cryptographic hash functions and a request for a one or more cryptographic checksums of the processing code in a relevant section memory of the device, wherein the relevant section of memory is determined based at least in part on the device identification information, and wherein the one or more cryptographic hash functions specify variable boundaries of at least a part of the memory of the device upon which the cryptographic hash function is performed, and the number of cryptographic checksums requested totals one more than the number of variable boundaries specified and where the one or more cryptographic hash functions request the one or more cryptographic checksums between one of a fixed boundary and a variable boundary, and two variable boundaries, said cryptographic hash function, and variable boundaries, being computed by the processor based at least in part on the device identification information;
• receive a query response, which constitutes a response to the query, from the remote device;
• perform the validity test by processing the query response with an expected query response to determine whether the query response and the expected query response match;
• and
• based on the processing, determine whether the validity test is passed, and
• output approval of the requested financial transaction if the validity test is passed;
• or
• output disapproval of the requested financial transaction if the validity test is not passed.

A system for authenticating a requested transaction effected by a user

• device, the system comprising:
• a communications portion receiving an authentication request from an authentication entity, the authentication request dictating a checksum operation to be performed on particular data in the user device;
• and
• a processing portion in communication with the communications portion, the processing portion:
• performing the checksum operation on the particular data, so as to generate a checksum authentication query value (CAQ value);
• comparing the CAQ value with an authenticated checksum value;
• and
• generating an authentication determination, based on the comparing, so as to authenticate the requested transaction.