Patent classifications
G06F21/42
Secure ID authentication
A secure ID authentication system for authenticating over a multi-channel cellular radio network a response from a user module comprising a SIM card to a request from an application programming interface (API) to authenticate a transaction, in which; a request is sent to an identity application server (IAS) holding a database of user module ID information; the IAS transmits the request over a first channel of the cellular network as a class 2 SMS message to the SIM card; the SIM card causes the request to be displayed on the user module; when a response is entered, the user module encrypts the response and associated data and transmits the encrypted data over a second channel of the cellular network to an over-the-air (OTA) gateway to the IAS; and the IAS decrypts the data and transmits the response to the API.
Personal identification number (PIN) replacement in a one-time passcode based two factor authentication system
Biometric information is used to generate a one-time passcode in a two factor authentication process. A current biometric sample is obtained from a user requesting access to a secure resource, together with a user identifier and a current token code. A bio-hash value that encodes a distinct biometric identifier of the authentic user for the user identifier, combined with the authentic user's PIN, is retrieved. A computed PIN is generated based on biometric information extracted from the current biometric sample and the bio-hash value. The computed PIN is combined with the current token code to generate a one-time passcode. The one-time passcode and the user identifier are conveyed to an external user identity verification process that uses the one-time passcode to validate the computed PIN and current token code contained in the one-time passcode.
Preventing Unauthorized Access to Secured Information Systems Using Multi-Device Authentication Techniques
A computing platform may receive, from a client portal server, a request to authenticate a first user to a first user account. The computing platform may generate a first one-time passcode for a first computing device associated with the first user account and may send, to the first computing device, the first one-time passcode. The computing platform also may generate a second one-time passcode for a second computing device associated with the first user account and may send, to the second computing device, the second one-time passcode. Thereafter, the computing platform may receive first one-time passcode input and second one-time passcode input, which the computing platform may validate. Based on the validating, the computing platform may generate a validation message directing the client portal server to provide the first user with access to the first user account, which the computing platform may send to the client portal server.
Preventing Unauthorized Access to Secured Information Systems Using Multi-Device Authentication Techniques
A computing platform may receive, from a client portal server, a request to authenticate a first user to a first user account. The computing platform may generate a first one-time passcode for a first computing device associated with the first user account and may send, to the first computing device, the first one-time passcode. The computing platform also may generate a second one-time passcode for a second computing device associated with the first user account and may send, to the second computing device, the second one-time passcode. Thereafter, the computing platform may receive first one-time passcode input and second one-time passcode input, which the computing platform may validate. Based on the validating, the computing platform may generate a validation message directing the client portal server to provide the first user with access to the first user account, which the computing platform may send to the client portal server.
Preventing Unauthorized Access to Secured Information Systems Using Multi-Device Authentication Techniques
A computing platform may receive, from a client portal server, a request to authenticate a user to a user account. The computing platform may generate a first one-time passcode for a first computing device associated with the user account and may send, to the first computing device, the first one-time passcode. The computing platform also may generate a first registered-device authentication prompt for a second computing device associated with the user account and may send, to the second computing device, the first registered-device authentication prompt. Thereafter, the computing platform may receive first one-time passcode input and a first response to the first registered-device authentication prompt, which the computing platform may validate. Based on the validating, the computing platform may generate a validation message directing the client portal server to provide the user with access to the user account, which the computing platform may send to the client portal server.
Preventing Unauthorized Access to Secured Information Systems Using Multi-Device Authentication Techniques
A computing platform may receive, from a client portal server, a request to authenticate a user to a user account. The computing platform may generate a first one-time passcode for a first computing device associated with the user account and may send, to the first computing device, the first one-time passcode. The computing platform also may generate a first registered-device authentication prompt for a second computing device associated with the user account and may send, to the second computing device, the first registered-device authentication prompt. Thereafter, the computing platform may receive first one-time passcode input and a first response to the first registered-device authentication prompt, which the computing platform may validate. Based on the validating, the computing platform may generate a validation message directing the client portal server to provide the user with access to the user account, which the computing platform may send to the client portal server.
Communication Channel Enhancement
A system for automatic authentication of service requests includes authentication of a remote access device. This authentication may be accomplished automatically prior to text or audio communication between a customer and a service agent. In some embodiments, authentication is accomplished automatically by authentication of the remote access device or accomplished by asking the customer questions. A single authentication of the remote access device may be used to authenticate a service request transferred between service agents. The authentication of the remote device may include, for example, use of a personal identification number, a fingerprint, a photograph, and/or a hardware identifier. Some embodiments include an intelligent pipeline configured for managing queues of customer service requests and/or customer service agent control over a customer's access device. Some embodiments include logic configured to manage and enhance communication channels between devices.
Wearable display and method of controlling the wearable display generating a user interface according to that of an external device
A Head Mount Display (HMD) and a method for controlling the HMD are disclosed. The method includes detecting an external device in an image captured by the HMD, recognizing at least one component from a first User Interface (UI) of the external device, the at least one component including a keypad or a window for outputting data corresponding to an input signal to the keypad, generating a second UI including the recognized at least one component, displaying the second UI in the HMD, wherein the at least one component of the first UI being displayed on the external device is overlaid with the displayed second UI using the image from which the external device is detected, and displaying data corresponding to an input signal currently received at the external device on the second UI in the HMD.
Wearable display and method of controlling the wearable display generating a user interface according to that of an external device
A Head Mount Display (HMD) and a method for controlling the HMD are disclosed. The method includes detecting an external device in an image captured by the HMD, recognizing at least one component from a first User Interface (UI) of the external device, the at least one component including a keypad or a window for outputting data corresponding to an input signal to the keypad, generating a second UI including the recognized at least one component, displaying the second UI in the HMD, wherein the at least one component of the first UI being displayed on the external device is overlaid with the displayed second UI using the image from which the external device is detected, and displaying data corresponding to an input signal currently received at the external device on the second UI in the HMD.
Augmented reality cross-domain solution for physically disconnected security domains
A method comprising the steps of: displaying primary data having a first sensitivity level on a first display screen that is operatively coupled to a first computer; capturing an image of the first display screen with an image capture device that is operatively coupled to a second computer that is communicatively isolated from the first computer such that no data is shared between the first and second computers; executing with the second computer a display recognition and characterization algorithm to recognize the primary data based only on the captured image of the first display screen; and augmenting the primary data by displaying secondary data on a second display, wherein the secondary data is related to, and has a higher sensitivity level than, the primary data.