System and method for device registration and authentication

Patent metadata

Field	Value
Publication number	US-10708059-B2
Application number	US-201816008696-A
Country	US
Kind code	B2
Filing date	Jun 14, 2018
Priority date	Jan 10, 2012
Publication date	Jul 7, 2020
Grant date	Jul 7, 2020

Abstract

Systems and methods for device registration and authentication are disclosed. In one embodiment, a method for authentication of a device may include (1) receiving, at a mobile device, a first credential; (2) transmitting, over a network, the first credential to a server; (3) receiving, from the server, a first key and a first value, the first value comprising a receipt for the first credential; (4) receiving, at the mobile device, a data entry for a second credential; (5) generating, by a processor, a second key from the data entry; (6) retrieving, by the mobile device, a third credential using the first key and the second key; (7) signing, by the mobile device, the first value with the third credential; and (8) transmitting, over the network, the signed third value to the server.

First claim

We claim:

1. A method for authentication of a device, comprising:
in a mobile electronic device comprising at least one computer processor:
receiving a first credential;
transmitting, over a network, the first credential to a server;
receiving, from the server, a first value comprising a receipt for the first credential;
receiving a data entry for a second credential;
generating a key from the data entry;
retrieving a third credential using the key;
signing the first value with the third credential; and
transmitting, over the network, the signed first value to the server.

2. The method of claim 1 , wherein the third credential is retrieved from a device that is separate from the mobile device.

3. The method of claim 1 , wherein the third credential is retrieved from one of a token, a fob, a memory card, and a USB device.

4. The method of claim 1 , wherein the first credential comprises a biometric.

5. The method of claim 4 , wherein the biometric is a voice biometric.

6. The method of claim 1 , wherein the first credential comprises at least one of a value, a device footprint, and a geographic location for the device.

7. The method of claim 1 , wherein in response to receiving the first credential, the server verifies the first credential by verifying a predetermined number of elements comprising the first credential.

8. The method of claim 1 , wherein in response to receiving the first credential, the server verifies the first credential by verifying all elements comprising the first credential.

9. The method of claim 1 , further comprising:
signing the first credential with a device key.

10. The method of claim 1 , further comprising:
receiving a replacement device key from the server.

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Benson Glenn
• Re Salvatore Richard

Classifications

• H04L9/3234 Primary

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04W12/77

  Graphical identity · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• G06F21/31

  User authentication · CPC title