Systems and methods for identification and authentication of a user

#1. Field of the Invention

#The present invention generally relates to computer security and more specifically to systems and methods for identifying and authenticating a user.

#2. Description of the Related Art

#So that the manner in which the above recited features of the present invention can be understood in detail, a more particular description of the invention, briefly summarized above, may be had by reference to embodiments, some of which are illustrated in the appended drawings. It is to be noted, however, that the appended drawings illustrate only typical embodiments of this invention and are therefore not to be considered limiting of its scope, for the invention may admit to other equally effective embodiments.

#FIG. 1 is a conceptual block diagram of a system configured to identify and authenticate the identity of a user, according to one embodiment of the invention.

#FIG. 2 is a flow chart of method steps for enrolling a user in a security service, according to one embodiment of the invention.

#In general, the invention relates to a computer security system for use in the identification and authentication of a user prior to an on-line transaction. The system will be described herein in relation to a single user. However, it should be understood that the systems and methods described herein may be employed with any number of users without departing from the principles of the present invention. The description of the invention is separated into four sections: the architecture, the enrollment process, a secure access transaction, and a secure payment transaction. To better understand the novelty of the system of the present invention and the methods of use thereof, reference is hereafter made to the accompanying drawings.

#FIG. 1 is a conceptual block diagram of a system 100 configured to identify and authenticate the identity of a user, according to one embodiment of the invention. The system 100 includes a user machine 105, which may be any type of individual computing device such as, for example, a desk-top computer, a lap-top computer, a hand-held phone device, or a personal digital assistant. Generally, the user machine 105 is configured to be a communication link between the user and the other components in the system 100. The user machine 105 includes a security agent 110. Generally, the security agent 110 is a software entity that runs on the user machine 105. As described in further detail herein, the security agent 110, among other things, is configured to create an identity profile 115 of a user and of user machine 105, collect certain data from the user machine 105 or manage secure access or secure payment transactions made from user machine 105. Additionally, the security agent 110 is designed to offer protection against phishing, pharming, Trojan programs or worms.

#As also shown, the user machine 105 includes the profile 115, which represents the identity of the user. The profile 115 is unique for each user. As described in further detail herein, once the profile 115 has been created for the user, the identity of the user can be subsequently verified by a series of interactions between the security agent 110 and the authentication server 125 based on the profile 115. The profile 115 includes data about the user and the user machine 105 and can be used to establish a multifactor identification for the user whenever the user attempts to conduct transactions via the user machine 105. The first factor of authentication is a username and/or password, which relates to “what the user knows.” The second factor of authentication is unique information about the user machine 105, which relates to “what the user has.” The third factor of authentication is unique information about the user, such as biometric identity, which relates to “who the user is.”