US 2026/0312951 A1 · SYSTEM AND METHOD FOR HIGHLY SECURE SHORT MESSAGE SERVICE (SMS) AND TIME-BASED ONE-TIME PASSWORDS (TOTP) SERVICES

Abstract

The present invention discloses a multi-factor authentication system that enhances the security of online services by integrating biometric authentication and contextual verification with traditional SMS-based One-Time Password (OTP) and Time-Based One-Time Password (TOTP) methods. The system requires the user to authenticate through biometric modalities such as fingerprint, facial recognition, iris detection or voice patterns before accessing the OTP/TOTP. Additionally, contextual data, including location, time, and device ID, is captured and verified to further secure the authentication process. The mobile application interacts with the service provider's backend server to request and verify OTP/TOTP codes, ensuring that only authorized users can access services. The system employs encryption and secure communication protocols to protect user data during transmission. By combining “what the user knows” (OTP/TOTP), “what the user has” (mobile device), and “who the user is” (biometric authentication), the invention strengthens authentication, reducing the risk of unauthorized access and enhancing overall security.

Claims12

Dependent claims

A multi-factor authentication system to access online service provided by a service provider, the system comprises:

a. a mobile application installed on a user's mobile device, configured to initiates an authentication request and facilitate the authentication process;
b. a biometric authentication module configured to verify the user's biometric identity;
c. a context authentication module configured to capture and verify multiple contextual parameters;
d. an application programming interface (API) configured to securely transmit authentication requests and contextual data between the mobile application and the service provider's backend server;
e. a processing module to process authentication requests and responses by verifying biometric input, decrypting received OTPs, and performing security checks before granting access;
f. a server associated with service provider to host the authentication backend, which generates and transmits SMS based OTP/TOTPs upon receiving an API request from the mobile application, and validates the received OTP/TOTP, biometric data, and contextual data against pre-stored user information in the database;
g. a database to store user credentials, including the biometric data (in encrypted form), contextual data, user credentials, and authentication logs for security auditing;
and
h. a communication network configured to securely transmit encrypted authentication data between the user's mobile device and the service provider's server.

6 more elements

Dependencies are inferred from the claim text.

System and method for highly secure short message service (sms) and time-based one-time passwords (totp) services

Life of this patent

System and method for highly secure short message service (sms) and time-based one-time passwords (totp) services

Life of this patent

Abstract

Claims12