US 2021/0067501 A1Published application

Security Tool

AssigneeBank of America Corporation

InventorManu Jacob Kurian

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system includes a database and a processor. The database stores a key indicating that a user previously accessed a first subsystem. An authentication string stores a first part of the key and a first authentication server stores a second part. The processor receives a request from the user seeking access to a second subsystem. The processor launches a first virtual host to receive the authentication string and send it to the first authentication server, to extract the first part of the key, assemble a test key including the first and second parts of the key, and determine that the test key matches the key stored in the database. The first virtual host then launches a second virtual host to receive login credentials and send them to a second authentication server to authenticate the user. In response, the second virtual host provides the user with access to the second subsystem.

Claims20

Dependent claims

A system comprising:

a database configured to store a first key associated with a first user, the first key comprising a first part of the first key and a second part of the first key, the first key generated by a first subsystem in response to the first user accessing the first subsystem, wherein the first part of the first key is further stored in an authentication string stored in a first device of the first user and the second part of the first key is further stored in a first authentication server;
a hardware processor configured to:
receive a first request indicating that the first user is seeking to access a second subsystem, wherein the first user previously accessed the first subsystem;
launch a first virtual host configured to:
perform a first authentication of the first user, without yet connecting the first user to the second subsystem, wherein performing the first authentication comprises:
receiving the authentication string from the first user, the authentication string comprising the first part of the first key and indicating that the first user previously accessed the first subsystem;
sending the authentication string to the first authentication server, the first authentication server storing the second part of the first key, the first authentication server configured to:
extract the first part of the first key from the authentication string;
assemble a test key comprising the first part of the first key and the second part of the first key;
and
determine that the test key matches the first key stored in the database;
and
receiving a first response from the first authentication server, the first response indicating that the first authentication server has authenticated the first user;
and
in response to receiving the first response, launch a second virtual host configured to:
perform a second authentication of the first user, without yet connecting the first user to the second system, wherein performing the second authentication comprises:
receiving login credentials from the first user;
sending the login credentials to a second authentication server, the second authentication server configured to authenticate the first user and determine that the first user to authorized to access the second subsystem, based on the login credentials;
and
receiving a second response from the second authentication server, the second response indicating that the second authentication server has authenticated the first user based on the login credentials;
and
in response to receiving the second response, provide the first user with access to the second subsystem.

19 more elements

A method comprising:

receiving a first request indicating that a first user is seeking to access a second subsystem, wherein the first user previously accessed a first subsystem;
performing, using a first virtual host, a first authentication of the first user, without yet connecting the first user to the second system, wherein performing the first authentication comprises:
receiving an authentication string from the first user, the authentication string stored in a first device of the first user, the authentication string comprising a first part of a first key, the first key stored in a database and comprising the first part of the first key and a second part of the first key, the first key generated by the first subsystem in response to the first user accessing the first subsystem;
sending the authentication string to a first authentication server, the first authentication server storing the second part of the first key, the first authentication server configured to:
extract the first part of the first key from the authentication string;
assemble a test key comprising the first part of the first key and the second part of the first key;
and
determine that the test key matches the first key stored in the database;
and
receiving a first response from the first authentication server, the first response indicating that the first authentication server has authenticated the first user;
and
in response to receiving the first response, performing, using a second virtual host, a second authentication of the first user, without yet connecting the first user to the second subsystem, wherein performing the second authentication comprises:
receiving login credentials from the first user;
sending the login credentials to a second authentication server, the second authentication server configured to authenticate the first user and determine that the first user is authorized to access the second subsystem, based on the login credentials;
and
receiving a second response from the second authentication server, the second response indicating that the second authentication server has authenticated the first user based on the login credentials;
and
in response to receiving the second response, providing, using the second virtual host, the first user with access to the second subsystem.

15 more elements

A system comprising:

a storage element operable to store a first key associated with a first user, the first key comprising a first part of the first key and a second part of the first key, the first key generated by a first subsystem in response to the first user accessing the first subsystem, wherein the first part of the first key is further stored in an authentication string stored in a first device of the first user and the second part of the first key is further stored in a first authentication server;
a processing element operable to:
receive a first request indicating that the first user is seeking to access a second subsystem, wherein the first user previously accessed the first subsystem;
launch a first virtual host operable to:
perform a first authentication of the first user, without yet connecting the first user to the second system, wherein performing the first authentication comprises:
receiving the authentication string from the first user, the authentication string comprising the first part of the first key and indicating that the first user previously accessed the first subsystem;
sending the authentication string to the first authentication server, the first authentication server storing the second part of the first key, the first authentication server operable to:
extract the first part of the first key from the authentication string;
assemble a test key comprising the first part of the first key and the second part of the first key;
and
determine that the test key matches the first key stored in the storage element;
and
receiving a first response from the first authentication server, the first response indicating that the first authentication server has authenticated the first user;
and
in response to receiving the first response, launch a second virtual host operable to:
perform a second authentication of the first user, without yet connecting the first user to the second system, wherein performing the second authentication comprises:
receiving login credentials from the first user, the login credentials comprising a username and a password;
sending the login credentials to a second authentication server, the second authentication server operable to authenticate the first user and determine that the first user to authorized to access the second subsystem, based on the login credentials;
and
receiving a second response from the second authentication server, the second response indicating that the second authentication server has authenticated the first user based on the login credentials;
and
in response to receiving the second response, provide the first user with access to the second subsystem.

19 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/559,772Filed 4 Sep 2019
Published: 4 Mar 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 9/321
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 63/083
For authentication of entities: using passwords
H04L 9/0637
Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation: modes of operation, e.g. cipher…
H04L 9/3239
Using cryptographic hash functions: involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD