Secure user authentication leveraging quantum key and steganography

Patent metadata

Field	Value
Publication number	US-12034718-B2
Application number	US-202217678363-A
Country	US
Kind code	B2
Filing date	Feb 23, 2022
Priority date	Feb 23, 2022
Publication date	Jul 9, 2024
Grant date	Jul 9, 2024

Abstract

Secure user authentication is provided by leveraging the use of quantum keys, steganography and random user keys/passcodes. Random user passcodes limit both the entity's control over the user and potential exposure of the passcode to wrongdoers. From a security standpoint, use of quantum keys and quantum communication channels heightens security during transmission of keys, such that if a wrongdoer would attempt to hack the transmission, the quantum sequence would break, which would not only prevent the hack but also result in remedial actions, such as preventing the authentication-requiring event, providing alerts and the like. Further, use of steganography also heightens security by preventing exposure to the keys during transmission and/or while the authentication process is occurring on the display of the user's mobile device.

First claim

What is claimed is:

1. A system for secure user authentication, the system comprising:
a user communication apparatus comprising a first computing platform including a first memory, one or more first processing devices in communication with the first memory, and a user authentication application executable by at least one of the one or more first processing devices and configured to:
in response to a user initiating an event requiring user authentication, prompt the user to input a random user key, and
in response to prompting the user, receive a first user input of the random user key and communicate the random user key and event information to a quantum computing platform;

the quantum computing platform comprising a quantum memory, one or more quantum processors in communication with the quantum memory, and a quantum sequence generator executable by at least one of the quantum processors and configured to:
in response to receiving the random user key and event information, generate a quantum sequence including a plurality of quantum keys and the random user key; and

a classical computing platform comprising a second memory, one or more second processing devices in communication with the second memory, and a Multimedia Messaging Service (MMS) message generator executable by at least one of the second computing devices and configured to:
generate a weblink including the quantum sequence and the event information, apply steganography to the weblink to create an image file or video file,
generate an MMS message including the image file or video file, and
communicate the MMS message to a user-registered mobile communication device,

wherein in response to the mobile communication device receiving the MMS message, the authentication application is further configured to:
in response to the user viewing and activating the MMS message, prompt the user to input the random user key,
in response to prompting the user, receive a second user input of the random user key to authenticate the MMS message, convert the MMS message to the weblink, and extract the random user key from the weblink, and
authenticate the user for performing the event based on a match between the random user key extracted from the weblink and the random user key in the second user input.

2. The system of claim 1 , wherein the authentication application is further configured to:
in response to authenticating the user for performing the event, transmit the weblink to an event processing entity over a quantum communication channel.

3. The system of claim 2 , further comprising an event processing computing platform comprising a third memory one or more third processing devices in communication with the memory and an event processing application executable by at least one of the one or more third processing devices and configured to:
in response to receiving the weblink, filter out the quantum sequence from the weblink to identify the event information and complete the event based on the event information.

4. The system of claim 3 , wherein the event processing application is further configured in response to:
in response to determining that the quantum sequence in the weblink has been broken during transmission, cancel the event and initiate communication of an error message to the mobile communication device that prompts the user to input a different random user key.

5. The system of claim 1 , wherein the MMS message generator is further configured to communicate the MMS message to the mobile communication device over a quantum communication channel.

6. The system of claim 5 , wherein the authentication application is further configured to:
in response to determining that the quantum sequence in the weblink hidden in the image file or video file of the MMS message has been broken during transmission, initiate communication of an error message to the mobile communication device that prompts the user to input a different random user key.

7. The system of claim 1 , wherein the quantum sequence generator is further configured to:
generate the quantum sequence including the plurality a quantum keys, metadata associated with each of the quantum keys and the random user key, wherein (i) each quantum key is followed by corresponding metadata in the quantum sequence, and (ii) the random user key is disposed in-between at least two quantum keys in the quantum sequence.

8. A computer-implemented method for secure user authentication, the method is executed by one or more processing devices and comprises:
in response to a user initiating an event on a communication device that requires user authentication, prompting the user to devise and enter a random user key;
in response to prompting the user to devise and enter the random user key, receiving a first user input of the random user key and communicating the random user key and event information to a quantum computing platform;
in response to the quantum computing platform receiving the random user key and event information, generating a quantum sequence including a plurality of quantum keys and the random user key;
generating a weblink including the quantum sequence and the event information;
applying steganography to the weblink to create an image file or video file;
generating an MMS message including the image file or video file, and communicating the MMS message to user-registered mobile communication device;
in response to the mobile communication device receiving the MMS message and the user viewing and activating the MMS message, prompting the user to re-renter the random user key;
in response to prompting the user to re-enter the random user key, receiving a second user input of the random user key to authenticate the MMS message and converting the MMS message to the weblink;
extracting the random user key from the weblink; and
authenticating the user for performing the event based on a match between the random user key extracted from the weblink and the random user key in the second user input.

9. The computer-implemented method of claim 8 , further comprising:
in response to authenticating the user for performing the event, transmitting the weblink to an event processing entity over a quantum communication channel.

10. The computer-implemented method of claim 9 , further comprising:
in response to the event processing entity receiving the weblink, filtering out the quantum sequence from the weblink to identify the event information and complete the event based on the event information.

11. The computer-implemented method of claim 9 , further
in response to determining that the quantum sequence in the weblink has been broken during transmission, cancelling the event and initiating communication of an error message to the mobile communication device that prompts the user to input a different random user key.

12. The computer-implemented method of claim 8 , wherein communicating the MMS message to the mobile communication device further comprises communicating the MMS message to the mobile communication device over a quantum communication channel.

13. The computer-implemented method of claim 12 , further comprising
in response to determining that the quantum sequence in the weblink hidden in the image file or video file of the MMS message has been broken during transmission, initiating communication of an error message to the mobile communication device that prompts the user to input a different random user key.

14. The computer-implemented method of claim 8 , wherein generating the quantum sequence further comprises generating the quantum sequence including the plurality a quantum key

Assignees

• Bank Of America

Inventors

• Mohanty Swetapadma

Classifications

• H04L9/0852

  Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03) · CPC title

• H04L2209/16

  Obfuscation or hiding, e.g. involving white box · CPC title

• H04L9/321

  involving a third party or a trusted authority · CPC title

• H04L9/0662

  with particular pseudorandom sequence generator · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title