Method and system for authentication
AssigneeInternational Business Machines Corporation
InventorsChristopher J. Pavlovski, Laurence J. Plant
Life of this patent
Estimating the term…
Abstract
A method and system of authenticating communications sessions between two or more parties over one or more simultaneous communications channels using one or more communicating devices is provided including having a first party create a first set of signatures, wherein the first set of signatures includes a signature for each communications channel, communicating with at a second party over at least one communications channel, whereby the second party authenticates the first party's signature associated with the at least one communications channel and accepts communication with the first party.
Claims20
A method of authenticating a communications session between two or more users over a plurality of communications channels, the method comprising the steps of:
- creating a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels;
- communicating one signature from the set of signatures to a user communications device comprising a first authentication module over a first of said plurality of communications channels, wherein the first authentication module of the user communications device retrieves a verification key from storage and authenticates the received signature using the retrieved verification key;
- accepting communication over the first communications channel only if the received signature is successfully authenticated by the first authentication module;
- communicating, only if a second of the plurality of communications channels are required, a second signature from the set of signatures to the user communications device over a second of said plurality of communications channels, wherein the first authentication module retrieves a verification key from storage and authenticates the second received signature using the retrieved verification key;
- and
- accepting communication over the second communications channel only if the second received signature is successfully authenticated by the first authentication module.
A method of authenticating a communications session between two or more users over a plurality of communications channels, the method comprising the steps of:
- creating a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels;
- communicating one signature from the set of signatures to a communications device comprising a first authentication module over a first of said plurality of communications channels, wherein the first authentication module of the user communications device retrieves a verification key from storage and authenticates the received signature using the retrieved verification key;
- communicating with the user communications device over the first communications channel only if the received signature is successfully authenticated by the first authentication module;
- communicating, only if a second of the plurality of communications channels are required, a second signature from the set of signatures to the user communications device over a second of said plurality of communications channels, wherein the first authentication module retrieves a verification key from storage and authenticates the second received signature using the retrieved verification key;
- and
- communicating with the user communications device over the second communications channel only if the second received signature is successfully authenticated by the first authentication module.
A system for authenticating a communications session between two or more communicating parties over a plurality of communication channels, the system comprising:
- a first user communications device comprising a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels;
- and
- a second user communications device, the second user communications device comprising a first authentication module;
- wherein the first user communications device is configured to communicate one signature from the set of signatures to the second user communications device over one of a plurality of communications channels;
- wherein the second user communications device is configured to:
- (i) retrieve a verification key from storage in response to receiving the communicated signature;
- (ii) authenticate the communicated signature using the retrieved verification key;
- (iii) accept communication with the first user communications device only if the first user communications device's signature is successfully authenticated;
- (iv) receive, only if a second of the plurality of communications channels are required, a second signature from the set of signatures over a second of the plurality of communications channels;
- (v) retrieve a verification key from storage and authenticate the second received signature using the retrieved verification key;
- and (vi) accept communication over the second communications channel only if the second received signature is successfully authenticated by the first authentication module.
Dependencies are inferred from the claim text.