System and method for identity authentication

Patent metadata

Field	Value
Publication number	US-2016337403-A1
Application number	US-201514708974-A
Country	US
Kind code	A1
Filing date	May 11, 2015
Priority date	May 11, 2015
Publication date	Nov 17, 2016
Grant date	—

Abstract

A system, comprising includes an orchestration server including a processor, the orchestration server to receive authentication factors. A rules engine connects with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine. The rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set.

First claim

1 . A system, comprising:
an orchestration server including a processor, the orchestration server to receive authentication factors; a rules engine connected with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine; and the rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set.

2 . The system of claim 1 , where the authentication factors include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

3 . The system of claim 1 , where the orchestration server receives the authentication factors from at least one of a mobile device and an enterprise server.

4 . The system of claim 1 , further including an interactive voice response server connected with the orchestration server, the interactive voice response server sending a voice biometric authentication factor to the orchestration server.

5 . The system of claim 4 , where the interactive voice response server initiates automated contact to obtain additional authentication factors.

6 . The system of claim 1 , further including an agent station, where the agent station is not involved during the authentication.

7 . The system of claim 1 , where authentication comprises a minimum number N of authentication factors out of M available choices being met.

8 . The system of claim 1 , where the decision on authentication is displayed as a score.

9 . The system of claim 1 , where the orchestration server grants a limited right if the authentication is partially passed.

10 . A method, comprising:
receiving a first authentication factor from a first source; receiving a second authentication factor from a second source; requesting a decision on authentication based on the first authentication factor and the second authentication factor; and providing an access right based on the decision on authentication.

11 . The method of claim 10 , where the first authentication factor and the second authentication factor include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

12 . The method of claim 10 , further comprising determining if an environment of the first source is outdoors, and if the environment of the first source is not outdoors, requesting a facial recognition authentication factor.

13 . The method of claim 10 , further comprising determining if an environment of the first source is noisy, and if the environment of the first source is not noisy, requesting a voice biometric authentication factor.

14 . The method of claim 10 , further comprising determining if the first source provides fingerprint identification, and if the first source provides fingerprint identification, requesting a fingerprint identification authentication factor.

15 . The method of claim 10 , where an agent station is not involved during the authentication.

16 . The method of claim 10 , where authentication comprises meeting a minimum number N of authentication factors out of M choices.

17 . The method of claim 10 , further comprising displaying the decision on authentication as a score.

18 . The method of claim 10 , further comprising granting a limited right if the authentication is partially passed.

19 . A contact center, comprising:
an orchestration server including a processor, the orchestration server to receive authentication factors; an interactive voice response server connected with the orchestration server, the interactive voice response server sending a voice biometric authentication factor to the orchestration server; a rules engine connected with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine; the rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set; and an agent station, where the agent station is not involved during the authentication.

20 . The contact center of claim 19 , where the authentication factors include at least two of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

Assignees

• Genesys Telecommunications Laboratories Inc

Inventors

• Stoops Daniel
• Kraeulter James
• Bell Cliff

Classifications

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title