Patent ID: 9197406
Filing Date: 2015-11-24
Classification: H04L,H04W

Abstract:
1. A system to provide key management layered on a quasi out-of-band authentication system, comprising: a communications port configured to (i) receive, via a communication channel from a network device associated with a user, a request for activation of a user interface window for that particular user at the network device, (ii) transmit, to an out-of-band authentication system, an activation personal identification number (PIN) to be forwarded to a communications device associated with the user via a voice or text message, and (iii) receive, via the communication channel from the network device, the previously transmitted activation PIN; and a processor configured to (i) authenticate the user based on the received activation PIN, (ii) establish, on top of the communication channel after authenticating the user, a secure, independent, encrypted communication channel between the user interface window and the security server; and (iii) at least one of (a) generate and direct transmission, to the user interface window, via the communications port and the secure, independent, encrypted communication channel, key material for cryptography based operations and (b) receive from the user interface window via the secure, independent, encrypted communication channel and the communications port, key material for cryptography based operations.