Multi-channel multi-factor authentication
AssigneeVeritrix, Inc.
InventorsPaul Headley, Kevin Collins
Life of this patent
Estimating the term…
Abstract
Systems and methods for authenticating electronic transactions are provided. The authentication methods employ a combination of security features and communication channels. These security features can be based, for example, on unique knowledge of the person being authenticated, a unique thing that the person has, unique personal features and attributes of the person, the ability of the person to respond, and to do so in a fashion that a machine cannot, and so forth. Methods for enrolling the person prior to authentication are also provided, as well as systems for enrollment and authentication.
Claims33
A method for authenticating a user comprising:
- receiving a claimant target over a first channel;
- retrieving a device address associated with a user ID;
- sending a prompt over a second channel to a device associated with the device address, the prompt being one of a plurality of prompts, each of the plurality of prompts having a biometric template of the user associated therewith;
- receiving a biometric response to the prompt;
- and
- determining a match between the biometric response and a biometric template associated with the prompt that was sent over the second channel.
A method for authenticating a user comprising:
- receiving a claimant target over a first channel;
- retrieving a device address associated with a user ID;
- establishing a second channel to a device associated with the device address;
- sending a prompt to the user, the prompt being one of a plurality of prompts, each of the plurality of prompts having a biometric template of the user associated therewith;
- receiving a biometric response to the prompt over the second channel;
- and
- determining a match between the biometric response and a biometric template associated with the prompt sent over the second channel.
A method for authentication consisting of:
- a claimant submitting a unique identifier over a first channel;
- the claimant receiving a prompt on a device;
- and
- the claimant submitting a biometric response to the prompt, where one of the two steps of receiving the prompt and submitting the biometric response is performed over a second channel.
An authentication system comprising:
- enrollment logic configured to enroll a user by
- associating the user with a user ID,
- associating the user ID and with a device address,
- associating a plurality of prompts with the user ID, and
- associating a plurality of biometric templates each with one of the plurality of prompts;
- and
- authentication logic configured to authenticate a claimant as the user by
- receiving a claimant target over a first channel,
- retrieving a device address associated with the user ID,
- sending a prompt from the plurality of prompts to a device associated with the device address over a second channel,
- receiving a biometric response to the prompt, and
- determining a match between the biometric response and a biometric template associated with the prompt.
An authentication system comprising authentication logic configured to authenticate a claimant by
- receiving a claimant target over a first channel;
- retrieving a device address associated with a user ID;
- sending a prompt from a plurality of prompts to a device associated with the device address over a second channel;
- receiving a biometric response to the prompt;
- and
- determining a match between the biometric response and a biometric template associated with the prompt.
Dependencies are inferred from the claim text.