Multichannel device utilizing a centralized out-of-band authentication system (COBAS)

A security system for granting and denying access to a host computer, said access in response to a demand from an accessor for access to the host computer, said accessor having a cellular telephone for providing communications to the security system, said security system comprising:

• a login identification accompanying said demand from said accessor;
• an interception mechanism for receiving said login identification, said interception mechanism being in an access channel;
• an authentication channel operating independently from said access channel, said authentication channel comprising:
• a security computer adapted in an access-channel mode to receive said login identification from said interception mechanism and to communicate access information to said host computer and in an authentication-channel mode to communicate with said cellular telephone;
• a subscriber database for retrieval of peripheral addresses corresponding to said login identification;
• wherein said security computer is adapted to connect to said associated cellular telephone of said accessor;
• a prompt mechanism for instructing said accessor to enter and transmit predetermined data using said cellular telephone;
• a comparator for authenticating an access demand in response to receipt of said predetermined data from said cellular telephone;
• said security computer, upon verifying a match between said predetermined data and said transmitted data, providing in the access-channel mode instructions to the host computer to grant access thereto along said access channel;
• an authentication program mechanism, operating independently from said host computer, for authenticating said accessor demanding access to said host computer;
• a biometric analyzer operating in response to said instructions from said authentication program means to analyze a monitored parameter of said accessor;
• and,
• a biometric parameter database addressable by said biometric analyzer for retrieval of a previously registered sample of said accessor, said sample corresponding to the identification of said accessor.

A security system for granting and denying access to a host computer, said access in response to a demand over the internet from an accessor for access to the host computer, said accessor having a personal digital assistant (PDA) for providing communications to the security system, said security system comprising:

• a login identification accompanying said demand over the internet from said accessor;
• an interception mechanism for receiving and verifying said login identification, said interception mechanism in an access channel;
• an authentication channel operating independently from said access channel and, said authentication channel, in turn, comprising;
• a security computer adapted in an access-channel mode to receive said login identification from said interception mechanism and to communicate access information to said host computer and in an authentication-channel mode to communicate with said PDA;
• a subscriber database for retrieval of peripheral addresses corresponding to said login identification;
• said security computer adapted to connect to said PDA;
• a prompt mechanism for instructing said accessor to enter and transmit predetermined data from said PDA;
• a comparator for authenticating access demands in response to transmission of said predetermined data from said PDA;
• said security computer, upon verifying a match between said stored predetermined data and the entered and transmitted data, providing in the access-channel mode instructions to the host computer to grant access thereto along said access channel;
• an authentication program mechanism, operating independently from said host computer, for authenticating an accessor demanding access to said host computer;
• a biometric analyzer operating in response to instructions from said authentication program mechanism to analyze a monitored parameter of said accessor;
• and,
• a biometric parameter database addressable by said biometric analyzer for retrieval of a previously registered sample of said accessor, said sample corresponding to the identification of said accessor.