US 9,430,630 B2Granted

Credential-free identification and authentication

AssigneeTextpower, Inc.

InventorsRobert Foster, Scott Goldman, Mark Nielsen

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method of authenticating a user so that the user can access a website without entering a unique user credential. A user accesses a target and is presented with an authentication code and an address, and the user sends a message containing the authentication code to that address. Alternatively, the user is pre-supplied with an address and is presented only with an authentication code when the user accesses the target. The user's identity is authenticated by comparing an aspect of the metadata of the message with known metadata aspects, and the user is authenticated by comparing the authentication key presented to the user with the one received in the message. Both the user and the user's identity are authenticated in a single step without requiring the user to input any unique user credential.

Claims14

Dependent claims

A method of utilizing a user-operated device to authenticate a user with respect to a target service, comprising:

presenting, to a target user interface, an authentication passkey and an authentication address without first requiring the user to provide a unique user credential;
receiving, from the user-operated device, a message addressed to the authentication address, and comprising a test passkey and a device identifier;
detecting a similarity between the test passkey and the authentication passkey;
identifying the user-operated device as an authorized device by comparing the device identifier against a stored set of identifiers;
retrieving user credentials comprising at least a user identifier and a password by querying a user database using solely the device identifier;
and
submitting the retrieved user credentials to target user interface for accessing the target service.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/815,895Filed 31 Jul 2015 · us provisional application
Priority: 31 Jul 2014
Published: US 2016/0034680 A14 Feb 2016
Granted: 30 Aug 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

G06F 21/42
User authentication: using separate channels for security data
G06F 21/34
User authentication: involving the use of external additional devices, e.g. dongles or smart cards
G06F 21/35
Involving the use of external additional devices, e.g. dongles or smart cards: communicating wirelessly
G07F 19/206
Automatic teller machines [ATMs]: software aspects at ATMs