System and method for mobile identity protection for online user authentication

Patent metadata

Field	Value
Publication number	US-10455419-B2
Application number	US-201715621186-A
Country	US
Kind code	B2
Filing date	Jun 13, 2017
Priority date	Mar 16, 2007
Publication date	Oct 22, 2019
Grant date	Oct 22, 2019

Abstract

An automated system and method for authenticating entities or individuals attempting to access a computer application, network, system or device using a wireless device is provided. The system employs one or more short-range wireless interfaces (e.g. BLUETOOTH or Wi-Fi) or long-range wireless interfaces (e.g. cellular or WiMAX) to detect the presence or location of the wireless device and it's proximity to the secure system to be accessed. The wireless device incorporates a unique identifier and secure authentication key information associated with the user of the wireless device. An authentication result is generated and may be used for a variety of applications. The application may process the result and determine the degree of access for which the entity or individual is allowed.

First claim

What is claimed is:

1. A method comprising:
obtaining, by an authentication application associated with a mobile access point in response to an attempt to access an application requiring secure access, an authentication key from a wireless device, the authentication key being generated from key logic generation resources, and being associated with a wireless device identifier;
obtaining, by the authentication application, a location of the wireless device;
generating, by the authentication application, an authentication result based on at least the location of the wireless device, a time that the location of the wireless device was obtained, and the authentication key from the wireless device; and
allowing access to the application requiring secure access based upon the authentication result.

2. The method of claim 1 , wherein the mobile access point and the wireless device communicate using a short range communication mechanism comprising a Bluetooth protocol.

3. The method of claim 1 , further comprising:
obtaining, from the wireless device, a wireless device ID from the wireless device.

4. The method of claim 1 , wherein the mobile access point is a personal computer.

5. The method of claim 1 , wherein the application requiring secure access is on the mobile access point.

6. The method of claim 1 , wherein the mobile access point authenticates the wireless device and wherein the application requiring secure access is in the mobile access point.

7. The method of claim 1 , wherein the authentication application, which is separate from the mobile access point, authenticates the wireless device.

8. The method of claim 1 , wherein the application requiring secure access is a social networking application.

9. The method of claim 1 , wherein the authentication application is on an external platform accessible via the Internet, and is separate from the mobile access point.

10. The method of claim 1 , wherein communications between the wireless device and the mobile access point are encrypted.

11. A system comprising:
a processor; and
a non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising
obtaining, by an authentication application associated with a mobile access point in response to an attempt to access an application requiring secure access, an authentication key from a wireless device, the authentication key being generated from key logic generation resources, and being associated with a wireless device identifier,
obtaining, by the authentication application, a location of the wireless device,
generating, by the authentication application, an authentication result based on at least the location of the wireless device, a time that the location of the wireless device was obtained, and the authentication key from the wireless device, and
allowing access to the application based upon the authentication result.

12. The system of claim 11 , wherein the wireless device and the mobile access point communicate via a short range communication mechanism comprising a Bluetooth protocol.

13. The system of claim 11 , wherein the method further comprises:
obtaining, from the wireless device, a wireless device ID from the wireless device.

14. The system of claim 11 , wherein the mobile access point is a personal computer.

15. The system of claim 11 , wherein application requiring secure access is on the mobile access point.

16. The system of claim 11 , wherein the mobile access point authenticates the wireless device and wherein the application requiring secure access is in the mobile access point.

17. The system of claim 11 , wherein the authentication application, which is separate from the mobile access point, authenticates the wireless device.

18. The system of claim 11 , wherein the application requiring secure access is a social networking application.

19. The system of claim 11 , wherein the authentication application is on an external platform accessible via the Internet, and is separate from the mobile access point.

20. The system of claim 11 , wherein communications between the wireless device and the mobile access point are encrypted.

Assignees

• Visa Int Service Ass

Inventors

• Dennis Charles L
• Snyder Randall A
• Buhrmann Michael F
• Boyle Patrick J

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title