Method and apparatus for providing user authentication and identification based on a one-time password

Patent metadata

Field	Value
Publication number	US-9100392-B2
Application number	US-201314033103-A
Country	US
Kind code	B2
Filing date	Sep 20, 2013
Priority date	Sep 20, 2013
Publication date	Aug 4, 2015
Grant date	Aug 4, 2015

Abstract

An approach is provided for authenticating and/or identifying a user through machine-transferrable one-time password codes. A user device sends to an authentication platform a request for a one-time password for authenticating a user at a relying party device. A machine readable form of the one-time password deliverable to the relying party device over an air gap between the user device and the relying party device is determined and transmitted. The relying party device reverts the machine readable form back to the one-time password, and transmits the one-time password to the authentication platform to authenticate the user device.

First claim

What is claimed is:

1. A method comprising:
receiving at an authentication server a request for a one-time password for authenticating a user at a relying party device;
determining by the authentication server a machine readable form of the one-time password, wherein the machine readable form is deliverable from a user device associated with the user to the relying party device over an air gap between the user device and the relying party device; and
transmitting by the authentication server the one-time password and a flag indicating the machine readable form to the user device, causing the user device to use the one-time password as a seed to generate the machine readable form.

2. A method of claim 1 , wherein the user device receives the one-time password and the flag, and wherein the user device uses the one-time password to generate the machine readable form as indicated by the flag.

3. A method of claim 1 , further comprising:
determining a media capability of the user device, the relying party device, or a combination thereof,
wherein the determination of the machine readable form is further based on the media capability.

4. A method of claim 1 , further comprising:
coordinating an activation of one or more sensors, one or more presentation modules, or a combination thereof for a delivery of the machine readable form from the user device to the relying party device.

5. A method of claim 4 , wherein the relying party device converts the machine readable form to the one-time password to authenticate the user.

6. A method of claim 1 , wherein the determination of the machine readable form is further based on a user preference, a user selection, a user history, a service provider preference, an attribute of the air gap, or a combination thereof.

7. A method of claim 1 , wherein the request is initiated by the user specifying authentication credentials at the relying party device, and wherein the authentication credentials include a user identifier.

8. A method of claim 1 , wherein the machine readable form includes one or more audio-based forms, one or more visual-based forms, or a combination thereof; and wherein a delivery method of the machine readable from includes an audio presentation, a visual presentation, a transfer over local wireless means, or a combination thereof.

9. A method of claim 1 , wherein the user device is on an off-path channel, and the machine readable form is delivered from the user device via the air gap to the relying party device without user intervention.

10. An apparatus comprising a processor configured to:
receive a request for a one-time password for authenticating a user at a relying party device;
determine a machine readable form of the one-time password, wherein the machine readable form is deliverable from a user device associated with the user to the relying party device over an air gap between the user device and the relying party device; and
transmit the one-time password and a flag indicating the machine readable form to the user device, causing the user device to use the one-time password as a seed to generate the machine readable form.

11. An apparatus of claim 10 , wherein the user device receives the one-time password and the flag, and wherein the user device uses the one-time password to generate the machine readable form as indicated by the flag.

12. An apparatus of claim 10 , wherein the processor is further configured to:
determine a media capability of the user device, the relying party device, or a combination thereof,
wherein the determination of the machine readable form is further based on the media capability.

13. An apparatus of claim 10 , wherein the processor is further configured to:
coordinate an activation of one or more sensors, one or more presentation modules, or a combination thereof for a delivery of the machine readable form from the user device to the relying party device.

14. An apparatus of claim 13 , wherein the relying party device converts the machine readable form to the one-time password to authenticate the user.

15. An apparatus of claim 10 , wherein the determination of the machine readable form is further based on a user preference, a user selection, a user history, a service provider preference, an attribute of the air gap, or a combination thereof.

16. An apparatus of claim 10 , wherein the request is initiated by the user specifying authentication credentials at the relying party device, and wherein the authentication credentials include a user identifier.

17. An apparatus of claim 10 , wherein the machine readable form includes one or more audio-based forms, one or more visual-based forms, or a combination thereof; and wherein a delivery method of the machine readable from includes an audio presentation, a visual presentation, a transfer over local wireless means, or a combination thereof.

18. An apparatus of claim 10 , wherein the user device is on an off-path channel.

19. A system comprising:
a relying party configured to authenticate a user;
an authentication server configured to receive a request for a one-time password for authenticating the user at the relying party device; to determine a machine readable form of the one-time password, wherein the machine readable form is deliverable from a user device associated with the user to the relying party device over an air gap between the user device and the relying party device; and to transmit the one-time password and a flag indicating the machine readable form to the user device; and
the user device configured to use the one-time password as a seed to generate the machine readable form.

20. A system of claim 19 , wherein the user device is configured to receive the one-time password and the flag; and to use the one-time password to generate the machine readable form as indicated by the flag.

Assignees

• Verizon Patent & Licensing Inc

Inventors

• Hubner Paul V
• Clavenna Ii Robert A
• Archer Steven T
• Tippett Peter

Classifications

• H04L63/0838 Primary

  using one-time-passwords · CPC title