Systems and methods for multi-factor remote user authentication

Patent metadata

Field	Value
Publication number	US-9529991-B2
Application number	US-201113199739-A
Country	US
Kind code	B2
Filing date	Sep 7, 2011
Priority date	Sep 16, 2005
Publication date	Dec 27, 2016
Grant date	Dec 27, 2016

Abstract

What is disclosed is a handheld multi-factor remote user authentication card device in the form factor of a prior art one factor of “what you have” security card. The handheld multifactor card-device has innovative features that enable this single card device itself to function and accomplish a multifactor remote user authentication of “what you know”, “what you have”, “where you are” and “what you are”, factors to a network. The authentication logic dynamically adjusts what factors are applicable for specific security application enabling a universal remote authentication card-device.

First claim

What is claimed is:

1. A remote user authentication system, comprising:
a. an authentication server and an authentication database, the authentication database has fields that correspond to four separate factors of remote user authentication of, (i) “what you have” (ii) “what you know”, (iii) “what you are”, and (iv) “where you are”, identifying a plurality of GPS geographic locations of a remote user;
b. an authentication logic operable in the server and the database, the logic receives and processes an authentication record transmitted from a card device of the remote user, wherein the authentication record has separate, four factors of authentication of “what you know”, “what you have”, “what you are”, and “where you are”, identifying a current GPS geographic location of the remote user, thereby, the remote user authentication system provides multiple factors of remote user authentication.

2. The system as in claim 1 , comprising:
the authentication database has fields from a group that correspond to multiple factors of authentication of, (i) an encrypted device id, (ii) a PIN, (iii) a thumbprint, and (iv) a plurality of GPS geographic locations in lat/long boundaries.

3. The system as in claim 1 , comprising:
the authentication database has fields from a group of (i) a serial number as the authentication record identifier, (ii) remote user identification data, (iii) an account status, and (iv) a history of remote user accesses.

4. The system as in claim 3 , comprising:
a. the authentication database has a field for heuristic card-specific algorithm for converting the PIN into an encryption key;
b. the logic uses the card-specific algorithm and the PIN to generate an encryption key and uses encryption key to decrypt the authentication record received from the remote user authentication device.

5. The system as in claim 1 , comprising:
the authentication database has fields from a group that correspond to aspects of authentication of, (i) a calendar window, and (ii) a time window that restrict the calendar time and the time of the day in which a remote user can authenticate to the authentication system.

6. The system as in claim 1 , comprising:
an interface to the authentication system for an authorized person such as a field supervisor, to change aspects of authentication of a calendar window, or a time window.

7. The system as in claim 1 , comprising:
an interface to the authentication system for an authorized person such as a field supervisor, to expand a GPS geographic location for field workers on a temporary basis for the “where you are” factor of authentication.

8. The system as in claim 1 , comprising:
the authentication logic is customized to different security applications enabling different factors of remote user authentication from multiple factors that may be applied, wherein the remote user authentication may be based on any two, or any three, or all four factors of authentication in a specific security application.

9. The system as in claim 1 , comprising:
the logic applies a security reliability logic to each of the received authentication factors to determine which ones of these factors have been received in the authentication record and are useable for authentication and thus are reliable and then based on this reliability determination dynamically select from the multiple factors of authentication received from the remote user authentication device at least two separate factors for granting authentication to a remote user.

10. An authentication database system, comprising:
a. a database server with a CPU and a data storage and resident in the data storage an authentication database for use in a remote user authentication system;
b. the database has fields for four separate factors of remote user authentication of, (i) what you have (ii) what you know, (iii) what you are, and (iv) where you are, identifying a plurality of GPS geographic locations of a remote user to authenticate an authentication record transmitted from a card device of the remote user including at least a current GPS geographic location of the remote user;
c. the database has additional fields from a group of (i) a serial number as the authentication record identifier, (ii) remote user identification data, (iii) an account status, and (iv) a history of remote user accesses.

11. The authentication database, as in claim 10 , comprising:
a field for heuristic card-specific algorithm for converting a PIN into an encryption key that is used for decrypting an authentication record received from a remote user card-device.

12. The authentication database, as in claim 10 , comprising:
fields for a calendar window and a time window, during which an authentication record can be authenticated.

13. The authentication database, as in claim 10 , comprising:
the field corresponding to “where you are” factor contains lat long boundaries of multiple GPS geographic areas from where a remote user may be authenticated.

14. A method for a remote user authentication system, comprising the steps of:
a. maintaining an authentication server, an authentication database, and an authentication logic operable in the server and the database, wherein providing by the authentication database fields that correspond to four separate factors of remote user authentication of, (i) “what you have” (ii) “what you know”, (iii) “what you are”, and (iv) “where you are”, identifying a plurality of GPS geographic locations of a remote user;
b. receiving and processing by the authentication logic an authentication record from a remote user, wherein having in the authentication record transmitted from a card device of the remote user separate, four factors of authentication of “what you know”, “what you have”, “what you are”, and “where you are, identifying a current GPS geographic location of the remote user”, thereby, providing by the remote user authentication system multiple factors of remote user authentication.

15. The method for an authentication system, as in claim 14 , comprising the steps of:
maintaining fields from a group of (i) a serial number as the authentication record identifier, (ii) remote user identification data, (iii) an account status, and (iv) a history of remote user accesses.

16. The method for an authentication system, as in claim 14 , comprising the steps of:
maintaining a field for heuristic card-specific algorithm for converting the PIN into an encryption key for decrypting the authentication record.

17. The method for an authentication system, as in claim 14 , comprising the steps of:
maintaining fields from a group that correspond to aspects of authentication of, (i) a calendar window, and (ii) a time window that restrict the calendar time and the time of the day in which a remote user can authenticate to the authentication system.

18. The method for an authentication system, as in claim 14 , comprising the steps of:
a. maintaining an interface to the authentication system for an authorized person such as a field supervisor, to change aspects of authentication of a calendar window, or a time window;
b. maintaining an interface to the authentication system for an authorized person such as a field supervisor, to expand the GPS geographic location for field workers on a temporary basis for the “where you are” factor of authentication.

19. The method for an authentication system, as in claim 14 , comprising the steps of:
customizing the authentication logic to different security applications enabling different factors of remote use

Assignees

• Singhal Tara Chand

Inventors

• Singhal Tara Chand

Classifications

• G07C9/26

  using a biometric sensor integrated in the pass · CPC title

• G07C9/257

  electronically (G07C9/26 takes precedence) · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/34 Primary

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title