# US 8,752,153 B2 · Accessing data based on authenticated user, provider and system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,752,153 B2 - Document ID: US8752153B2 - Status: Granted - Kind: B2 - Application number: 13/184,910 - Filed: 2011-07-18 - Published: 2012-03-15 - Granted: 2014-06-10 - Earliest claimed: 2009-02-05 - Assignees: WWPass Corporation - Applicants: Mikhail Vysogorets; Eugene Shablygin - Inventors: Mikhail Vysogorets; Eugene Shablygin - Web page: https://patentgrep.com/patent/US8752153B2 ## CPC - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method that includes authenticating an authentication system, a user, and a service provider, generating an access code based on a combination of data related to the authenticated user and data related to the authenticated service provider, and using the access code to access at least some of data storage locations is described herein. ## Claims ### Claim 1 A computer-implemented method comprising: authenticating an authentication system, a user, and a service provider; generating, by a computer system, an access code based on a one way permutation of data related to the authenticated user and data related to the authenticated service provider, where the one way permutation is a function in which the data related to the authenticated user and the data related to the authenticated service provider cannot be determined by knowing the access code; determining one or more data storage locations based on the access code; using the access code to access at least some of the data storage locations; and retrieving the data from the accessed data storage locations. ### Claim 2 (depends on 1) The method of claim 1, further comprising storing data received from the user or the service provider at the one or more data storage locations determined based on an access code generated based on the one way permutation of data related to the user and data related to the service provider. ### Claim 3 (depends on 1) The method of claim 1, further comprising transmitting data from the user or the service provider to the one or more data storage locations, the locations being determined based on an access code generated based on the one way permutation of data related to the user and data related to the service provider. ### Claim 4 (depends on 3) The method of claim 3, further comprising encrypting the data prior to transmitting the data. ### Claim 5 (depends on 1) The method of claim 1, wherein retrieving data from the one or more data storage locations comprises retrieving data from multiple data storage areas with each of the multiple storage areas located in a geographical area that is different from the geographical area of the other ones of the multiple storage areas. ### Claim 6 (depends on 1) The method of claim 1, wherein retrieving data from the one or more data storage locations comprises retrieving data from multiple data storage areas with each of the multiple storage areas existing under a set of legal jurisdictions that is different from legal jurisdictions of each of the other ones of the multiple storage areas. ### Claim 7 (depends on 1) The method of claim 1, wherein retrieving data from the one or more data storage locations comprises retrieving data from multiple data storage locations with each of the multiple storage locations existing under the control of a single organization. ### Claim 8 (depends on 1) The method of claim 1, wherein retrieving data from the multiple data storage locations comprises retrieving the data from multiple geographically dispersed data storage locations that are separated such that a single natural disaster would not simultaneously affect any two of the storage locations. ### Claim 9 (depends on 1) The method of claim 1, wherein retrieving data from the multiple data storage locations comprises retrieving data from multiple data storage areas with locations that are separated by at least 10 miles. ### Claim 10 (depends on 1) The method of claim 1, wherein retrieving data from the multiple data storage locations comprises retrieving data from multiple data storage areas located on different continents. ### Claim 11 (depends on 1) The method of claim 1, wherein retrieving data from the multiple data storage locations comprises retrieving data from multiple data storage areas located in different countries. ### Claim 12 (depends on 1) The method of claim 1, wherein the data related to the authenticated user comprises a user ID identifying the authenticated user and the data related to the authenticated service provider comprises a service provider ID identifying the authenticated service provider. ### Claim 13 (depends on 12) The method of claim 12, wherein generating the access code comprises: receiving, by the authentication system, the user ID and the service provider ID, and deriving the access code using a one way function based on the user ID and the service provider ID. ### Claim 14 (depends on 12) The method of claim 12, wherein generating the access code comprises performing a one way function on the user ID, the service provider ID, and one or more additional inputs. ### Claim 15 (depends on 1) The method of claim 1, wherein authenticating the authentication system comprises exchanging results of mathematical calculations based on a shared secret between the authentication system and the user or service provider. ### Claim 16 (depends on 1) The method of claim 1, wherein authenticating the user comprises authenticating the user based on the presence of a physical token. ### Claim 17 (depends on 1) The method of claim 1, wherein authenticating the user comprises authenticating the user based on the presence of information resident on a user's mobile computing device. ### Claim 18 (depends on 1) The method of claim 1, wherein the user comprises a human. ### Claim 19 (depends on 1) The method of claim 1, wherein the user comprises a non-human entity. ### Claim 20 (depends on 1) The method of claim 1, wherein generating the access code comprises generating the access code based on the data related to the authenticated user, the data related to the authenticated service provider, and one or more additional inputs. ### Claim 21 (depends on 1) The method of claim 1, wherein authenticating the service provider comprises authenticating the service provider based on the presence of a physical token. ### Claim 22 (depends on 1) The method of claim 1, wherein authenticating the service provider comprises authenticating the service provider based on information resident on a computing device associated with the service provider. ### Claim 23 A computer-implemented method for authenticating transactions with multiple, different service providers based on the presence of a single physical token associated with a user, the method comprising: authenticating the user based on the presence of the physical token and authenticating a first service provider; generating, by a computer system, a first access code based on a one way permutation of data related to the authenticated user and data related to the authenticated first service provider, determining one or more data storage locations based on the first access code; using the first access code to access at least some of the data storage locations; authenticating the user based on the presence of the physical token and authenticating a second service provider, the second service provider being different than the first service provider; generating, by a computer system, a first access code based on a one way permutation of data related to the authenticated user and data related to the authenticated second service provider, determining one or more data storage locations based on the second access code; and using the second access code to access at least some of the data storage locations.