Back to results
US 8,621,560 B2Granted
User authentication using personal objects
AssigneeInternational Business Machines Corporation
InventorsBryan Sweeley, Eng-Kiat Koh, Teck Joo Chua
Life of this patent
Estimating the term…
Abstract
A method and system of authentication for accessing one or more applications by a user by using a personal object belonging to the user. Such a personal object is one that is already in use by the user for purposes other than accessing the one or more applications.
Claims34
A computer-implemented method for providing a user secure access to a plurality of applications on an application server, the computer-implemented method comprising:
- receiving an object ID associated with a personal object;
- receiving an application password from the user;
- appending the object ID to the application password to form an extended application password;
- sending the extended application password to an object verifier for verification as a password for accessing said plurality of applications;
- receiving a dynamically generated single-use password from said object verifier for accessing one or more applications of said plurality of applications responsive to successful authentication at said object verifier;
- and
- using said dynamically generated single-use password from said object verifier for accessing said one or more applications on the application server.
4 more elements
An authentication system for authenticating a user who wishes to access a plurality of applications, said authentication system comprising:
- an object ID reader;
- wherein the object ID reader is configured to read an object ID, wherein the object ID is associated with a personal object belonging to a user;
- an agent for communicating with an application server associated with said plurality of applications and an object verifier, wherein the agent is configured to:
- receive the object ID associated with the personal object;
- receive an application password from the user;
- append the object ID to the application password to form an extended application password;
- send the extended application password to the object verifier for verification as a password for accessing said plurality of applications;
- receive a dynamically generated single-use password from the object verifier for accessing one or more applications of the plurality of applications responsive to successful authentication at the object verifier;
- and
- use the dynamically generated single-use password from the object verifier for accessing the one or more applications on the application server.
7 more elements
Dependencies are inferred from the claim text.