Multi-channel multi-factor authentication
AssigneeVeritrix, Inc.
InventorPaul Headley
Life of this patent
Estimating the term…
Abstract
Systems and methods for authenticating electronic transactions are provided. The authentication methods employ a combination of security features and communication channels. These security features can be based, for example, on unique knowledge of the person being authenticated, a unique thing that the person has, unique personal features and attributes of the person, the ability of the person to respond, and to do so in a fashion that a machine cannot, and so forth. Methods for enrolling the person prior to authentication are also provided, as well as systems for enrollment and authentication.
Claims19
A method for authenticating a user comprising:
- receiving a claimant target over a first channel, the claimant target being associated with a user ID;
- selecting an entry from a knowledge base associated with the user ID;
- sending a prompt, where the prompt does not include the entry;
- receiving a biometric response including voice data spoken by a claimant in response to the prompt;
- performing a voice recognition analysis on the voice data to identify the entry within the voice data;
- and
- performing a voice identification analysis to determine a match between the claimant and the user.
An authentication system comprising:
- enrollment logic configured to enroll a user by
- associating the user with a user ID,
- associating the user ID and with a device address, and
- creating a knowledge base associated with the user ID, the knowledge base including a set of records, each record including a pair of entries;
- and
- authentication logic configured to authenticate a claimant as the user by receiving a claimant target over a first channel,
- selecting a first entry from the knowledge base associated with the user ID,
- sending a prompt, where the prompt does not include the first entry,
- receiving a biometric response including voice data spoken by the claimant in response to the prompt,
- performing a voice recognition analysis on the voice data to identify the first entry within the voice data, and
- performing a voice identification analysis to determine a match between the claimant and the user.
An authentication system comprising:
- authentication logic configured to authenticate a claimant by
- receiving a claimant target over a first channel,
- selecting a first entry from a knowledge base associated with the claimant target,
- sending a prompt, where the prompt does not include the first entry,
- receiving a biometric response including voice data spoken by the claimant in response to the prompt,
- performing a voice recognition analysis on the voice data to identify the first entry within the voice data, and
- performing a voice identification analysis to determine a match between the claimant and a user associated with the claimant target.
Dependencies are inferred from the claim text.