Public authentication systems and methods

Patent metadata

Field	Value
Publication number	US-10164973-B1
Application number	US-201615365520-A
Country	US
Kind code	B1
Filing date	Nov 30, 2016
Priority date	Dec 2, 2015
Publication date	Dec 25, 2018
Grant date	Dec 25, 2018

Abstract

Techniques provided herein relate to electronic authentication on public systems. A backend system receives at least one electronic data action request from a publicly available client system that is shared amongst a plurality of users. At least a portion of the primary authentication information is received from a secondary device separate from the publicly available client system. The electronic data action request is authenticated by determining if the primary authentication information matches expected primary authentication information that is expected to complete the electronic data action request. Performance of the electronic data action request is facilitated when the primary authentication information matches the expected primary authentication information.

First claim

The invention claimed is:

1. An authentication system for electronic data, comprising:
a publicly available client system configured to provide an access protected interface to a backend system, the access protected interface providing one or more electronic data action requests to the backend system, wherein the publicly available client system comprises a graphical user interface that prompts the user to enter a first portion of primary authentication information;
a secondary device, separate from the publicly available client system, configured to provide a second portion of the primary authentication information to the backend system; and
the backend system, configured to:
receive at least one electronic data action request from the publicly available client system that is shared amongst a plurality of users;
receive the first portion of the primary authentication information from the publicly available client system;
receive the second portion of the primary authentication information from the secondary device separate from the publicly available client system;
authenticate the at least one electronic data action request provided by the publicly available client system by determining that the first portion and the second portion of the primary authentication information matches expected primary authentication information that is expected to complete the electronic data action request; and
facilitate performance of the at least one electronic data action request in response to the primary authentication information matching the expected primary authentication information.

2. The authentication system of claim 1 , wherein the first portion comprises a username and the second portion comprises a password.

3. The authentication system of claim 1 , wherein the graphical user interface configured to prompt the user to enter the first portion and the second portion of the primary authentication information at the secondary device.

4. The authentication system of claim 3 , wherein the graphical user interface configured to provide temporary authentication information to be entered at the publicly available client system.

5. The authentication system of claim 1 , wherein secondary authentication information is provided to the backend system by the publicly available client system, the secondary device, or both, wherein the secondary authentication information is further used to authenticate the at least one electronic data action request.

6. The authentication system of claim 1 , wherein the one or more electronic data action requests comprises a request to access user-specific financial records.

7. The authentication system of claim 1 , wherein the one or more electronic data action requests comprises a request to debit a financial account, credit the financial account, or both.

8. The authentication system of claim 1 , wherein the primary authentication information comprises a unique identifier of the secondary device.

9. The authentication system of claim 8 , wherein the unique identifier comprises a media access control (MAC) address of the secondary device.

10. The authentication system of claim 1 , wherein the primary authentication information comprises a cookie, token, or both stored on the secondary device.

11. The authentication system of claim 1 , wherein the primary authentication information comprises biometric information obtained via one or more sensors of the secondary device.

12. A tangible, non-transitory, machine-readable medium, comprising machine-readable instructions, to:
provide at least one electronic data action request from a publicly available client system that is configured to be shared amongst a plurality of users, wherein the at least one electronic data action request is to be executed via an access protected interface provided by the publicly available client;
provide at least a portion of primary authentication information from a secondary device separate from the publicly available client system;
render a graphical user interface that prompts a user to enter a first portion of the primary authentication information at the publicly available client system;
provide a second portion of the primary authentication information at the secondary device; and
such that a backend system may:
authenticate the at least one electronic data action request provided by the publicly available client system by determining that the primary authentication information matches expected primary authentication information that is expected to complete the at least one electronic data action request; and
facilitate performance of the at least one electronic data action request in response to the primary authentication information matching the expected primary authentication information.

13. The machine-readable medium of claim 12 , wherein the first portion comprises a username and the second portion comprises a password.

14. The machine-readable medium of claim 12 , wherein the graphical user interface configured to prompt the user to enter an entire portion of the primary authentication information at the secondary device.

15. A computer-implemented method, comprising:
receiving at least one electronic data action request from a publicly available client system that is configured to be shared amongst a plurality of users;
receiving a first portion of primary authentication information for the at least one electronic data action request from the publicly available client system;
receiving a second portion of the primary authentication information from a secondary device separate from the publicly available client system;
authenticating the at least one electronic data action request provided by the publicly available client system by determining that the first portion and the second portion of the primary authentication information matches expected primary authentication information that is expected to complete the at least one electronic data action request; and
facilitate performance of the at least one electronic data action request in response to the primary authentication information matching the expected primary authentication information.

16. The computer-implemented method of claim 15 , wherein the one or more electronic data action requests comprises a request to access user-specific financial records.

17. An authentication system for electronic data, comprising:
a publicly available client system configured to provide an access protected interface to a backend system, the access protected interface providing one or more electronic data action requests to the backend system, wherein the publicly available client system comprises a graphical user interface that provides temporary authentication information;
a secondary device, separate from the publicly available client system, configured to provide at least a portion of primary authentication information to a backend system; and
the backend system configured to:
receive at least one electronic data action request from the publicly available client system that is shared amongst a plurality of users;
receive the temporary authentication information from the publicly available client system;
receive the at least a portion of the primary authentication information from the secondary device separate from the publicly available client system;
authenticate the at least one electronic data action request provided by the publicly available client system by determining that the at least a portion of the primary authentication information matches expected primary authentication information and that

Assignees

• Usaa

Inventors

• Prasad Bharat
• Oakes Iii Charles Lee
• Vijayvergia Gunjan C
• Jayapalan Vijay
• Buckingham Thomas Bret

Classifications

• H04L63/102

  Entity profiles · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title