Systems and methods for multi-factor authentication
OwnerHoi Lam Luminventor
Life of this patent
Estimating the term…
Abstract
The present invention is directed to methods and systems for protecting privacy data stored on a portable device, which provides authentication support via a standardized API interface for automatically backup and account recovery. Methods and systems of the present disclosure identify a user group or users or devices based on the use of challenge response options of a concurrent site-specific account. Optionally, the methods and systems tailor these challenge response options based on an age segment of targeted users or based on features engaged by another user of the user group.
Claims10
A mobile KBA device for providing challenge response to an authentication request from an authenticating service, the mobile device including an imprinted private key, a knowledge base encrypted by the private key, and a processor operable to perform operations comprising:
- receiving an authentication request containing a challenge question and a set of response options;
- determining an answer to the challenge question by searching in the knowledge base;
- receiving sensory input from a user to determine a permission for responding to the authentication request;
- in response to determining an answer to the challenge question, further determining a match of the answer to the set of response options;
- and
- sending automatically the match to the authenticating service.
A method of registering a mobile KBA device to pair with an anonymous account at an online anonymity authority, wherein the anonymous account has a knowledge base, the method comprising:
- providing an account id for authenticating access to an anonymous account at the anonymity authority;
- pairing a public key with the anonymous account, wherein the public key is generated based on an imprinted private key of the mobile KBA device;
- and
- sending the knowledge base to the mobile KBA device.
A method of knowledge base management in an anonymity authority having an anonymous account, comprising:
- receiving a request for an operation on a knowledge base item belonging to an anonymous account;
- determining authenticity of the request with a public key registered at the anonymous account;
- performing the requested operation;
- and
- updating the anonymous account to put subsequent access to the knowledge base on notice.
A method of pairing an online portal with an anonymous account having a knowledge base, wherein both the online portal and the anonymous accounts are registered at an anonymity authority, the method comprising:
- providing an account id for identifying the anonymous account;
- providing a public key for identifying the online portal;
- and
- sending the knowledge base of the anonymous account to the online portal.
A method of authenticating an anonymous account at an online portal, wherein both the anonymous account and the online portal are registered with an anonymity authority, the method comprising:
- forwarding an authentication request received at the online portal to the anonymity authority, wherein the authentication request includes an account id of the anonymous account;
- obtaining a challenge question and a set of response options from the anonymity authority;
- forwarding one or more selected choices received at the online portal to the anonymity authority;
- and
- determining permission of the authentication request at the anonymity authority.
Dependencies are inferred from the claim text.