System, device, and method for authentication of a user accessing an on-line resource

Patent metadata

Field	Value
Publication number	US-9864851-B2
Application number	US-201114235384-A
Country	US
Kind code	B2
Filing date	Jul 28, 2011
Priority date	Jul 28, 2011
Publication date	Jan 9, 2018
Grant date	Jan 9, 2018

Abstract

A system, device and method for authenticating a user. The system, device and method may employ a computing device for providing credentials required for access to an on-line resource available over a network. The computing device may connect to the on-line resource to register a user. The computing device may receive from the on-line resource at least one request for a credential to identify the user. In response to the request, the computing device may generate a random credential, store the random credential in association with an on-line resource identifier and the request in a data store accessible to the computing device and, submit the random credential to the on-line resource to register the user.

First claim

We claim:

1. A method comprising:
connecting a computing device to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;
receiving, at the computing device, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;
in response to receiving the at least one registration credential request, for each of the at least one registration credential request:
automatically generating, at the computing device, a random credential that satisfies one or more criteria associated with the registration credential request;
storing, at the computing device, the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and
submitting, from the computing device, the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after the computing device has submitted the automatically generated random credential to the on-line resource:
receiving a request to access the on-line resource through a user input interface of the computing device;
receiving, at the computing device, from the on-line resource, at least one authentication credential request;
identifying, for each of the at least one authentication credential request, the random credential associated with the authentication credential request; and
submitting at least one associated random credential to the on-line resource to gain access to the on-line resource.

2. The method of claim 1 wherein before the generating, the method further comprises:
receiving a user credential through a user input interface of the computing device; and,
storing the user credential in association with the on-line resource identifier.

3. The method of claim 1 , wherein the at least one authentication credential request is received at the computing device in response to the request for access to the on-line resource, wherein each of the at least one authentication credential comprises an authentication credential request identifier, and wherein the identifying comprises:
comparing each of the at least one authentication credential request identifier with the registration credential request identifiers stored in the data store in association with the on-line resource identifier for the on line resource to identify the random credentials associated with each of the authentication credential requests.

4. The method of claim 1 wherein before submitting the at least one associated random credential to the on-line resource, the method further comprises:
soliciting a confirmation user credential from the user;
receiving the confirmation user credential through the user input interface;
comparing the confirmation user credential with the user credential stored in association with the on-line resource identifier; and,
when the confirmation user credential matches the stored user credential, submitting each of the at least one associated random credential to the on-line resource.

5. The method of claim 1 wherein the storing further comprises storing a date on which the random credential was generated in association with the random credential, and wherein after the user is registered, the method further comprises:
checking the stored date for comparison with an update period; and,
when the update period has elapsed since the stored date, connecting to the on-line resource to update the random credential to identify the user.

6. The method of claim 1 wherein the registration credential request identifier comprises a content entry field identifier of a registration portal webpage sent from the on-line resource, the method further comprises:
identifying the content entry field identifier from the webpage; and,
saving the content entry field identifier as the registration credential request identifier.

7. The method of claim 1 wherein the at least one registration credential request comprises a request for at least one of a username, password, challenge question or challenge answer.

8. The method of claim 1 wherein the computing device comprises a mobile wireless communications device.

9. The method of claim 1 wherein after the computing device has submitted the random credential to the on-line resource and the user has been registered, the method further comprises:
receiving an instruction to access the on-line resource from a requesting device, the requesting device seeking access to the on-line resource and the instruction including the on-line resource identifier and one or more authentication credential request identifiers;
matching the received on-line resource identifier and one or more authentication credential request identifiers with the stored on-line resource identifier and stored registration credential request identifiers in the data store to identify the associated random credential for each of the one or more authentication credential request identifiers; and,
forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device for submission to the on-line resource.

10. The method of claim 9 wherein before forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device, the method further comprises:
soliciting a confirmation user credential from the user;
receiving the confirmation user credential through the user input interface;
comparing the confirmation user credential with the user credential stored in association with the on-line resource identifier; and,
when the confirmation user credential matches the stored user credential, forwarding the one or more authentication credential request identifiers and associated random credentials to the requesting device.

11. A computing device, comprising:
one or more processors; and
a non-transitory computer-readable storage medium coupled to the one or more processors and storing programming instructions for execution by the one or more processors, the programming instructions instruct the one or more processors to:
connect to an on-line resource over a network to register a user of the computing device, the on-line resource identified by an on-line resource identifier;
receive, from the on-line resource, at least one registration credential request for a credential to use in registering the user with the on-line resource, each of the at least one registration credential request comprising a registration credential request identifier;
in response to receiving the at least one registration credential request, for each of the at least one registration credential request:
automatically generate a random credential that satisfies one or more criteria associated with the registration credential request;
store the automatically generated random credential in association with the on-line resource identifier and the registration credential request identifier in a data store accessible to the computing device; and
submit the automatically generated random credential to the on-line resource as a response to the registration credential request; and

after submitting the automatically generated random credential to the on-line resource:
receive a request to access the on-line resource through a user input interface of the computing device;
receive, from the on-line reso

Assignees

• Adams Neil Patrick
• Vanstone Scott Alexander
• Brown Daniel Richard L
• Davis Dinah Lea Marie
• Labrador Christopher
• Menezes Alfred John
• Blackberry Ltd
• Certicom Corp

Inventors

• Adams Neil Patrick
• Vanstone Scott Alexander
• Brown Daniel Richard L
• Davis Dinah Lea Marie
• Labrador Christopher
• Menezes Alfred John

Classifications

• G06F21/33

  using certificates · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title