Patent ID: 9191386
Filing Date: 2015-11-17
Classification: G06F,H04L,H04W

Abstract:
1. A method, comprising: performing registration of a given user for multi-factor authentication, wherein registration of the given user comprises: registering a password as a first authentication factor for the given user; registering a security token, configured to generate one-time passcodes, as a second authentication factor for the given user; registering a swipe pattern as a third authentication factor for the given user, wherein registering the swipe pattern comprises: presenting the given user with an array of character locations; and storing, as the swipe pattern, a directional pattern of a subset of at least two of the character locations in the array; performing multi-factor authentication of the given user to authenticate access to a protected resource, wherein multi-factor authentication of the given user comprises: receiving authentication information from the given user during a given authentication session; identifying, in the received authentication information, a first portion and a second portion; verifying the first authentication factor by matching the first portion of the received authentication information to the previously-registered password for the given user; and verifying the second and third authentication factors by: generating a given one-time passcode, the given one-time passcode comprising a set of characters, wherein each of the characters in the set is associated with a corresponding respective one of the array of character locations presented to the given user; determining an expected sequence of characters in the given one-time passcode based on the stored swipe pattern for the given user; and matching the second portion of the received authentication information to the expected sequence of characters in the given one-time passcode; wherein registering the security token as the second authentication factor is performed at a first time using a first web site and registering the swipe pattern as the third authentication factor is performed at a second time different than the first time using a second web site different than the first web site; wherein at least one of the first web site and the second web site is operated by at least one of an authentication manager and the protected resource; wherein the set of characters presented to the given user as the given one-time passcode is re-generated by the security token responsive to at least one of expiration of a predefined time period and incrementing an event counter; and wherein the method is performed by at least one computing device.