# US 9,882,723 B2 · Method and system for authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,882,723 B2 - Document ID: US9882723B2 - Status: Granted - Kind: B2 - Application number: 14/812,161 - Filed: 2015-07-29 - Published: 2015-11-19 - Granted: 2018-01-30 - Earliest claimed: 2008-10-14 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Christopher J. Pavlovski; Laurence J. Plant - Web page: https://patentgrep.com/patent/US9882723B2 ## CPC - H04L 9/3247: {involving digital signatures} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - G06Q 20/3821: {Electronic credentials} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/10: Integrity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method and system of authenticating communications sessions between two or more parties over one or more simultaneous communications channels using one or more communicating devices is provided including having a first party create a first set of signatures, wherein the first set of signatures includes a signature for each communications channel, communicating with at a second party over at least one communications channel, whereby the second party authenticates the first party's signature associated with the at least one communications channel and accepts communication with the first party. ## Claims ### Claim 1 A method of authenticating a communications session between two or more users over a plurality of communications channels, the method comprising the steps of: creating a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels; communicating one signature from the set of signatures to a user communications device comprising a first authentication module over a first of said plurality of communications channels, wherein the first authentication module of the user communications device retrieves a verification key from storage and authenticates the received signature using the retrieved verification key; accepting communication over the first communications channel only if the received signature is successfully authenticated by the first authentication module; communicating, only if a second of the plurality of communications channels are required, a second signature from the set of signatures to the user communications device over a second of said plurality of communications channels, wherein the first authentication module retrieves a verification key from storage and authenticates the second received signature using the retrieved verification key; and accepting communication over the second communications channel only if the second received signature is successfully authenticated by the first authentication module. ### Claim 2 (depends on 1) The method of claim 1, wherein the one or more communications channels are established simultaneously or sequentially. ### Claim 3 (depends on 1) The method of claim 1, wherein each signature comprises a channel identifier. ### Claim 4 (depends on 1) The method of claim 1, wherein a second user communications device creates a second set of signatures, wherein the second set of signatures comprises a different signature for each of a plurality of communication channels, and further wherein the first user communications device authenticates the second user communications device's signature associated with the at least one said plurality of communication channels. ### Claim 5 (depends on 1) The method of claim 1, wherein an plurality of user communications devices (“M”) communicate over a plurality of channels (“N”), and further wherein each user communications device provides a number of signatures equal to M×N. ### Claim 6 (depends on 5) The method according to claim 5, wherein a signature of each of the plurality of user communications devices is authenticated by each of the other of the plurality of user communications device with which it will communicate, before an authorized communication can occur. ### Claim 7 (depends on 1) The method of claim 1, wherein the plurality of communication channels comprise more than one form of interaction. ### Claim 8 (depends on 7) The method of claim 7, wherein the more than one form of interaction comprises one or more of instant messaging, voice-over-internet protocol, email, video conferencing, short message service, and/or haptics. ### Claim 9 (depends on 1) The method of claim 1, wherein the set of signatures is created prior to the communications session. ### Claim 10 (depends on 1) The method of claim 1, wherein the set of signatures is created during the communications session. ### Claim 11 (depends on 1) The method of claim 1, wherein the authentication process comprises checking a credential, the credential comprising a user identification, a password, biometric information, and/or a certificate. ### Claim 12 A method of authenticating a communications session between two or more users over a plurality of communications channels, the method comprising the steps of: creating a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels; communicating one signature from the set of signatures to a communications device comprising a first authentication module over a first of said plurality of communications channels, wherein the first authentication module of the user communications device retrieves a verification key from storage and authenticates the received signature using the retrieved verification key; communicating with the user communications device over the first communications channel only if the received signature is successfully authenticated by the first authentication module; communicating, only if a second of the plurality of communications channels are required, a second signature from the set of signatures to the user communications device over a second of said plurality of communications channels, wherein the first authentication module retrieves a verification key from storage and authenticates the second received signature using the retrieved verification key; and communicating with the user communications device over the second communications channel only if the second received signature is successfully authenticated by the first authentication module. ### Claim 13 (depends on 12) The method of claim 12, wherein each signature comprises a channel identifier. ### Claim 14 (depends on 12) The method of claim 12, wherein a second user communications device creates a second set of signatures, wherein the second set of signatures comprises a different signature for each of a plurality of communication channels, and further wherein the first user communications device authenticates the second user communications device's signature associated with the at least one said plurality of communication channels. ### Claim 15 (depends on 12) The method of claim 12, wherein an plurality of user communications devices (“M”) communicate over a plurality of channels (“N”), and further wherein each user communications device provides a number of signatures equal to M×N. ### Claim 16 (depends on 15) The method according to claim 15, wherein a signature of each of the plurality of user communications devices is authenticated by each of the other of the plurality of user communications device with which it will communicate, before an authorized communication can occur. ### Claim 17 A system for authenticating a communications session between two or more communicating parties over a plurality of communication channels, the system comprising: a first user communications device comprising a set of signatures, the set of signatures comprising a unique signature for each of a plurality of communications channels; and a second user communications device, the second user communications device comprising a first authentication module; wherein the first user communications device is configured to communicate one signature from the set of signatures to the second user communications device over one of a plurality of communications channels; wherein the second user communications device is configured to: (i) retrieve a verification key from storage in response to receiving the communicated signature; (ii) authenticate the communicated signature using the retrieved verification key; (iii) accept communication with the first user communications device only if the first user communications device's signature is successfully authenticated; (iv) receive, only if a second of the plurality of communications channels are required, a second signature from the set of signatures over a second of the plurality of communications channels; (v) retrieve a verification key from storage and authenticate the second received signature using the retrieved verification key; and (vi) accept communication over the second communications channel only if the second received signature is successfully authenticated by the first authentication module. ### Claim 18 (depends on 17) The system of claim 17, wherein one or more communications channels may be established simultaneously or sequentially. ### Claim 19 (depends on 17) The system of claim 17, wherein the plurality of communications channels comprise instant messaging, voice-over-internet protocol, email, video conferencing, short message service, and/or haptics. ### Claim 20 (depends on 19) The system of claim 19, wherein the system comprises a plurality of user communication devices for receiving communication from one user communication device, wherein the one user communication device broadcasts to the plurality of user communication devices in a unilateral communication stream.