Source: https://patents.google.com/patent/US8230486B2/en
Timestamp: 2018-12-14 05:59:21
Document Index: 629655672

Matched Legal Cases: ['Application No. 2004319571', 'Application No. 2005297350', 'Application No. 200480043373', 'Application No. 200510121789', 'Application No. 200510121789', 'Application No. 200510121789', 'Application No. 04802268', 'Application No. 04802268', 'Application No. 05706404']

US8230486B2 - Method and apparatus for providing mutual authentication between a sending unit and a recipient - Google Patents
Method and apparatus for providing mutual authentication between a sending unit and a recipient Download PDF
US8230486B2
US8230486B2 US10967669 US96766904A US8230486B2 US 8230486 B2 US8230486 B2 US 8230486B2 US 10967669 US10967669 US 10967669 US 96766904 A US96766904 A US 96766904A US 8230486 B2 US8230486 B2 US 8230486B2
US10967669
US20050144449A1 (en )
A method and apparatus for providing mutual authentication between a user and a sending unit, (i.e. target resource) in one embodiment, includes determining, for a user that has been assigned an article, such as a card or other suitable article that has indicia thereon, desired sender authentication information that corresponds to actual sender authentication information that is embodied on the article. The sender authentication information can be located on the article by using the location information provided by the sending unit in a challenge. The method includes determining for the user, corresponding article identification information, such as a serial number that has been assigned to the article, or a shared secret, and sending a challenge for the user wherein the challenge includes at least location information, to allow the user to identify desired sender authentication information located on the article, and sending the article identification information.
This is a continuation-in-part of U.S. patent application entitled METHOD AND APPARATUS FOR PROVIDING ELECTRONIC MESSAGE AUTHENTICATION, having Ser. No. 10/849,402, filed on May 19, 2004, having as inventors Voice et al. and owned by instant Assignee, which is a continuation in part of U.S. patent application entitled METHOD AND APPARATUS FOR SECURELY PROVIDING IDENTIFICATION INFORMATION USING TRANSLUCENT IDENTIFICATION MEMBER, having Ser. No. 10/748,523, filed on Dec. 30, 2003, having as inventors Chiviendacz et al. and owned by instant Assignee.
The invention relates generally to method and apparatus for providing authentication between a user and a target resource or information sending entity, and more particularly to methods and apparatus that employ soft tokens or hard tokens for providing mutual authentication between a user and a target resource.
Mutual authentication systems and methods are known that attempt to authenticate a user or recipient of information that is being provided by a content service provider or other target resource that is, for example, accessible through an on-line communication link such as through the Internet, Intranet, or any other suitable wireless or non-wireless network. Such methods and apparatus attempt to thwart malicious exploits by hackers and others that attempt to steal a user's identity. For example, a malicious entity may send an email using the address of a legitimate bank and directs the recipient to a “counterfeit website”. The recipient, believing that it is a legitimate site, may be tricked into providing information such as an account number and password that can be used by the malicious entity to access the recipient's online account. The problem may be particularly acute in the consumer world where conventional methods of online mutual authentication may be very complex, typically requiring expensive hardware deployment and complex user interactions that make such mutual authentication techniques impractical. As such, it would be desirable to provide a system and method that allows the confirmation of users or recipients that are accessing an intended target organization, (i.e. sending entity) in a relatively inexpensive but secure manner.
Two factor authentication techniques are known that, for example, use a first authentication factor to authenticate an end user's identity and a second factor that is used for authentication to supplement the user name and password typically used in the first factor authentication. The concept of a second factor is that a user can authenticate using something that they know (i.e. their password) and something that they have (i.e. the second factor which may be, for example, a hardware token). Typically the second factor mechanisms are hardware based and are physically distributed to the end user. For example, time synchronous tokens are known and are sometimes referred to as multi-factor authentication techniques. Several known techniques are described further below.
Also, various methods for performing authentication of a target organization in connection with Internet applications are known that include, for example, secure socket layer server authentication which provides certification from a trusted third party based on the identity of the organization hosting a given web application. However, this can require the user to perform the manual step of double clicking on an on-screen icon and reading through information. The requirement of manual action often precludes it from being performed consistently and, thus, undermines the effectiveness of the method. In addition, client security plug-in applications are also known that involve an end user downloading and installing client side software which provides a visual indication of when the user is communicating with the legitimate site. However, it can be burdensome for end users to download and install software or to go through several manual steps to confirm the identity of the target organization.
In addition, both user and target organization authentication methods can be impractical when extending to other channels of communication such as interactive voice response systems or communication through mobile devices, such as cellular phones, personal digital assistants, Internet appliances, or other mobile devices, as they can rely on a user display and entry methods unique to web based applications.
Another technique employs secret images that are shared between a sender and a recipient. As understood, a personalized image is sent by a user to an authentication server. The server stores the recipient sent image. The authentication server may then send the personalized image to the recipient with an email and the user seeing the image recognizes that it is the one he sent. Also, during logon to a site, the server may include the image in the logon page so that a user trusts the login page when the user sees their personalized image (see e.g., www.passmarksecurity.com). Among other drawbacks, this system appears to use the same image for multiple logins until the shared image is changed and may require the recipient to choose and send the image to a sending server.
Other authentication systems are also known that have been employed, for example, in the military, numeral cipher/authentication systems have been used that employ cards that are held by a sender and recipient. A transmission is authenticated for example by using a challenge and reply authentication scheme. A sender of an electronic transmission for example may use the card and randomly select a row and column and transmit the row and column identifiers as a challenge. For a reply, row and column identifiers are used to look up an alphabetical letter which is then communicated back. As s such, the sender can be assured that the receiver is in possession of a card. However, the authentication of the sender to the receiver is typically done by repeating the same challenge and reply in reverse, and both sender and receiver must be in possession of the same authentication card to achieve mutual authentification.
FIG. 22 is a block diagram illustrating one example of a system for providing electronic message authentication in accordance with one embodiment of the invention;
FIG. 24 is a block diagram illustrating one example of a system for providing mutual authentication between a user and a target resource in accordance with one embodiment of the invention;
FIG. 25 is a flowchart illustrating one example of a method for providing mutual authentication between a user and a target resource in accordance with one embodiment of the invention;
FIG. 26 is a flowchart illustrating an example of another embodiment of a method for providing mutual authentication between a user and a target resource in accordance with one embodiment of the invention;
FIG. 27 is a flowchart illustrating another example of a method for providing mutual authentication between a user and a target resource in accordance with one embodiment of the invention; and
FIG. 28 is a block diagram illustrating one example of a device for providing mutual authentication between a user and a target resource in the form of a diagrammatical representation, in accordance with one embodiment of the invention.
Briefly, a method for providing mutual authentication between a user and a sending unit, (i.e. target resource) in one embodiment, includes determining, for a user that has been assigned an article, such as a card or other suitable article that has indicia thereon, desired sender authentication information that corresponds to actual sender authentication information that is embodied on the article. The sender authentication information can be located on the article by using the location information provided by the sending unit in a challenge. The method includes determining for the user, corresponding article identification information, such as a serial number that has been assigned to the article, or a shared secret, and sending a challenge for the user wherein the challenge includes at least location information, to allow the user to identify desired sender authentication information located on the article, and sending the article identification information. The user then receives the location information and article identification information and uses the article identification information as authenticating information that indicates that the sender has sent the information is trustworthy since the article that is in the possession of the user also includes the article identification information thereon. The user then uses the location information that has been sent to the user device, to determine for example the corresponding desired sender authentication information that is located on the article, such as by column and row information sent by the target resource and sends a reply to the challenge back to the target resource (i.e. sending unit). The sender then authenticates the user based on the reply to the challenge. The reply includes user authentication information obtained from the article namely the desired sender authentication information. If the received sender authentication information sent by the user device (and obtained from the article), based on the location information, matches the desired sender authentication information, the target resource grants suitable access to the user (i.e. the user device). As such, article identification information is sent along with location information by a sender after, for example, a first level of authentication has been determined to be successful. The first level of authentication may include, for example, the user sending a password and user ID to the target resource in an initial stage of a logon procedure, as known in the art, whereafter the sending of the location information and article identifier information is subsequently sent based on a successful first factor authentication process.
In another example, a method for providing mutual authentication does not require the sending of the article identification information to the user, but instead only requires the sending of the location information to allow the user to identify the corresponding authentication information on the article and send a reply back to the target resource for verification. However, in this embodiment, if the reply does not include the expected target resource authentication information as expected by the sending unit, the method includes repeating the same challenge for the user that includes the same location information that was previously sent. This process is repeated over, for example, each successive session, until the user sends the appropriate target source authentication information that was derived from the article based on the location information sent in the challenge.
In addition, suitable devices are also disclosed that carry out the above methods. Also, a combination of the two methods is employed to effect a type of enhanced mutual authentication process.
Also disclosed is a method for providing electronic message authentication that employs an article (also referred to as a member or token), such as a card, sticker, or any other suitable article, that includes sender authentication information and location information, such as row and column headings. In one example, each recipient of interest is issued an article that embodies sender authentication information that is identifiable by corresponding location information such as column and row identifiers. When the sender of an electronic message wants to send a message to a recipient of interest, the sender sends the electronic message and both location information and corresponding desired sender authentication information located at the location identified by the location information. This includes data representing the location and authentication information (such as an index to, a reference to, the location information or authentication information itself, or any suitable representation thereof). The recipient may then, in one embodiment, look on their article (e.g. card) at the corresponding location and see if the sent desired sender authentication information matches the sender authentication information located on the article (also referred to as expected sender authentication information). If a match occurs, then the recipient trusts the sender of the message. The recipient need not send back any information to the sender. As such, a simple card or other article may be used to authenticate a sender of a message to thwart phishing, or other sender authentication problems. Other examples will be recognized by those of ordinary skill in the art.
The translucent identification member 14 may be a card, sheet, film or other member that may include if desired any suitable adhesive or connecting structure to be applied over a window of a transaction card, or any other suitable material. The translucent identification member may also be connected to a transaction card, such as, for example, by using a suitable connecting structure to join the translucent identification member to an end or side of a transaction card. The one or more obscured identifiers 38 that are printed on the translucent identification member 38, as noted above, may be characters (e.g., ASCII), symbols, print patterns, colored versions thereof or any other suitable indicia. The one or more obscured identifiers 38 appear to be visually obscured and hence seemingly random when viewed by a recipient. In other embodiments it may be desirable to print patterns of ink that do not connote characters but instead visually conceal a message or other information so that when overlayed on top of a display the pattern generated by the display in combination with the printed image, allows the viewer to visually decipher a revealed identifier.
FIGS. 10 and 11 illustrate another embodiment of the operation of the system after the issuance of the translucent identification member has occurred. As shown in block 1000, the method includes requesting and obtaining recipient specific information 32 such as previously described with reference to FIG. 5. Once the translucent identification member 14 has been printed or manufactured, it is then provided to the recipient by hand or through mail or any other suitable technique as shown in block 1002. As shown in block 1004, a bank server of a bank determines if a recipient has requested authentication, such as to a logon request. If a request has been received, a web page may be sent requesting entry of the recipient information 32 including the password and the translucent identification member serial number 44 as a first level of a multi-factor authentication process as shown in block 1006. This may be done for example through the screen shown in FIG. 5. As shown in block 206, the bank server determines whether the entered recipient specific information 32 and password and translucent identification member serial number 44 are correct for example by passing along the information to the translucent identification member authenticator 24. If the first authentication level passes, the method includes, as shown in block 1010, displaying the visual filtering pattern 44 that when visually combined with the one or more obscured identifiers 38 on the translucent identification member 14, reveals only one of the one or more obscured identifiers as the appropriate identifier to be entered for the current session or transaction. The bank server may then, through the web server, request entry of the revealed identifier 700 as selectively revealed through the filtering pattern displayed on the display by providing the screen as shown in FIG. 6. This is shown in block 1010. In response to the request, the translucent identification member authenticator 24 receives the revealed one time use identifier 700 and compares the received identifier to a corresponding expected ID determined for example by the visual filter generator or authenticator 24. This is shown in block 1012. Given the “filter”, the user's data entry and stored information about that user, the authenticator can validate whether the user entered correct data or not (either on its own or by passing it to a “server”). If the desired identifier is generated before requesting it from the user, the system also generates the right filter to reveal the pre-determined identifier (all before presenting to the user). Alternatively, if the user is provided with a pattern (the filter) and then the system validates the identifier that the user entered with the identifier that would have resulted from that pattern, a desired identifier need not be picked ahead of time and the “filter generator”, therefore does not require knowledge of anything else. The data representing the visually revealed identifier (e.g., the data itself, an encrypted form thereof or other suitable data, may also be received using a device other than the device on which the visual filtering pattern is displayed. For example, the identifier may be revealed on a screen of one device and a handheld device or non-handheld device may be used to enter and send the visually revealed identifier to another device or system that checks whether there is a match.
FIG. 24 illustrates one example of a system 2400 that provides mutual authentication between a user (e.g. recipient unit) and a sender unit, also referred to as a target resource. As described for example with respect to FIGS. 18-23 and elsewhere, in this example, the article 1800 serves as an authentication card which is assigned to each end user and includes, for example, random and/or unique markings known only by the sender unit (e.g. target resource) and the end user. By providing evidence of that knowledge to the recipient, the sending unit can demonstrate its identity and by the end user causing the recipient unit to return information located in the authentication card, the end user demonstrates his/her identity as the proper end user.
As noted above, the system 2400 may include a sender authentication member issuer 2202 that produces the article 1800 based on, for example, recipient specific information 32 (i.e. user authentication information) which may be, but is not limited to, for example a password and/or user ID. The system 2400 also includes sender unit 2402 which may be a server or any suitable device as previously described and may also include, as noted above, a group of servers or circuits that carry out the operations described herein. The system 2400 also includes a database 2404 similar to the databases previously described which, in this example, also stores the user authentication information 32 to allow a first level user authentication operation to be carried out. In addition, as described above, the database 2404 also stores the sender authentication information that is located on the article as well as the article identifier so that the sender unit 2402 may provide the second level authentication process as described herein.
The sender unit 2402 also includes, for example, memory that contains executable instructions that when executed by one or more processing devices operates as a first level user authenticator 2406 and a second level authenticator 2408. As noted above, it will be recognized however that these operations may be carried by separate servers or other computing units located or accessible through the Internet, an intranet or any suitable network. It will also be recognized that the communications described herein may be communicated wirelessly for example where the recipient unit 20 is a wireless handheld device or other suitable portable wireless device.
Referring also to FIG. 25, a method for providing mutual authentication between a user and a sender unit, such as a target resource, is described. The article as noted above may include a transaction card, a card not having any transaction information, a translucent card, an electronic card (e.g. visually displayed card) that may be, for example, stored in memory on the recipient unit or any other suitable unit and then displayed to a user upon user request or automatically in response to receipt of the challenge, or the article may take any other suitable form. Also, the location information sent in the challenge includes, for example, electronically transmitted data for display in a display device. As noted above, this may take the form of row and column information or any other suitable information that may be electronically transmitted and, for example, displayed on display 30 for the user or audibly presented. It will be assumed that for this embodiment, a user has received the sender authentication article 1800 and in this example it is not a translucent article so that no visual filter need be used in this example. However, it will be recognized that the operations described herein may be suitably carried out for any suitable article including a translucent card or article. This method may be carried out, for example, by the system shown in FIG. 24, or by any suitable system or structure. In this example, article identification information need not be sent to the recipient unit by the sender unit 2402. However, it may be, if desired. In this example, the sender unit 2402 repeatedly checks to see whether a reply to a sent challenge includes sender authentication information that was identified by location information in a sent challenge matches expected (e.g, that desired by the sender) sender authentication information. If not, the challenge is repeatedly sent multiple times during a session, or over multiple sessions until the desired sender authentication information that is received by the sending unit matches the expected authentication information.
Although not shown in FIG. 25, a first level authentication process may be initially carried out. For example, this may include receiving user authentication information 2410 that may include, for example, a user password and user ID, from the recipient unit 20, and hence the user. This is received, for example, by the first level user authenticator 2406. The first level user authenticator 2406 then authenticates the user based on the received user authentication information 2410 by using the user authentication information 32 obtained, for example, from the database 2402. If they match, user authentication is successful. A “yes” indication 2412 is then sent to the second level authenticator 2408 indicating that a second authentication process may be carried out. It is preferable, for example, also that during the first level authentication process, a lock out mechanism is implemented such as one that limits the number of authentication attempts during this first level authentication process preventing a brute force attack. Upon successful completion of the first step of authentication, the user is prompted to authenticate with article specific information as described below.
As shown in block 2500, the method includes determining, for a user that has been assigned the article 1800, desired sender authentication information that corresponds to sender authentication information that is embodied on the article. This may be done, for example, by the second level authenticator 2408 suitably selecting sender authentication information from the database 2404 that is located on the article 1800 based on the user authentication information 32. As noted above, this indicia on the article is stored by the sender authentication member issuer 2202 in the database 2404. The sender authentication information can be located on the article 1800 by a user by using the location information, such as row and column identifiers, or any other suitable location information as described above.
As shown in block 2502, the method includes sending, such as by the sender unit 2402, a challenge for the user that includes at least location information that identifies the desired sender authentication information that can be located on the article 1800. A challenge may include, for example, one or more coordinate sets that are for example, displayed to a user via display 30. The challenge is preferably particular to each user and must be retrieved, based on the identity or user authentication information from the first level user authentication process. This ensures that the user is presented with the same challenge until successful authentication is complete. The repeating of the same challenge can prevent an attacker from mounting a brute force attack based on knowledge of only a few of the user's card contents which, for example, may have been obtained using various potential attack mechanisms. The randomly generated challenge is then carried out and stored once the user has successfully authenticated through a second level authentication process. The challenge 2414 may be sent in any suitable manner and may take any suitable form including, but not limited to, an SSL communication or non-secure communication if desired. As shown in block 2504, the method includes receiving a reply to the sent challenge. In this example, a reply designated as 2416 is received from the recipient unit 20 and is generated by the recipient unit under control of the user, for example, using the location information sent in the challenge 2414, such as a row and column ID to determine sender authentication information located on the card. The user enters this information through a suitable user interface in response to the challenge. As such, with respect to the embodiment of FIGS. 24-28, the reply includes desired (desired by the sender unit) sender authentication information obtained from the article. This reply information, although referred to as “sender authentication information” is actually used to authenticate the user by the sender unit, or other entity, since the reply contains information only obtainable by the holder of the authentication card.
As shown in block 2506, the method includes determining, such as by the sender unit 2402, whether the received reply to the challenge includes the desired sender authentication information that was identified by the location information sent in the challenge. As shown in block 2508, if the received sender authentication information in the reply is not the desired sender authentication information that was identified in the challenge by the location information, the sender unit 2402, in this example, then resends the same challenge containing the same location information that was previously sent, to the recipient unit 20. As shown in block 2510, the method includes repeating the steps of analyzing the received reply and if the reply does not include sender authentication information that was expected based on the location information sent in the challenge, the sender unit sends the same challenge during the same session, until the received reply includes the desired sender authentication information that is on the article or until a suitable number of tries have been attempted as set by the sender unit, for example. The challenge is repeated until the reply includes the expected desired sender authentication information.
FIG. 26 illustrates another method for providing mutual authentication between a user and a sender and may be carried out, for example, by the system 2400 of FIG. 24, or any other suitable system or devices. In this example, the repeated sending of the same challenge until a proper reply is received, is not carried out. In this embodiment, article identification information, such as a serial number located on the article, or any other suitable article identification is also sent to the user in addition to the location information in a challenge. As shown in block 2600, the method includes determining, such as by the sender unit 2402, desired sender authentication information that corresponds to sender authentication information that is embodied on the article and also determining for the same user, corresponding article identification information, such as the serial number on the article or shared secret or any other suitable identification information. As shown in block 2602, the method includes sending a challenge for the user that includes the determined location information and article identification information for authenticating the sending unit to the user.
As shown in block 2604, the method includes authenticating the user based on a reply to the challenge wherein the reply includes sender authentication information obtained from the article, based on the location information. In this example, the user does not, for example, enter or send a reply to the challenge unless the user verifies that the article identification information sent in the challenge, matches the article identification information on the article itself. As such, the user may authenticate the sending unit based on the article identification information. As such, in this example, the challenge includes article identification information in addition to the location information. The reply includes the sender authentication information located on the article, defined by the location information. If the article identifier in the challenge matches the article identifier on the article that is in the possession of the user, then the user trusts the sending unit. As shown in block 2606, the method includes authenticating the user based on the reply to the challenge. In this example, again a first level of authentication is preferably carried out that was previously described based on a user password and/or user ID. If that level of authentication is successful, then the method shown in FIG. 26 may be suitably carried out. As also noted, the article identification information may include a shared secret known to the user and to the sender or may be an article serial number, or any other suitable information.
FIG. 27 illustrates another method for providing mutual authentication between a user and sender which effectively combines some of the operations shown in FIGS. 25 and 26. As shown in block 2700, the method includes, performing a first authentication process such as by prompting for first level user authentication information. This may include, for example, the sending unit sending a request or providing a prompt for the user to enter a password and user ID. In response, the sending unit receives the first level user authentication information such as a password and stored user authentication information 32 (e.g. a hash of the received password) is verified to ensure that the received first level user authentication information is proper. As shown in block 2702, if the first level authentication is successful, the method includes determining for the user the desired sender authentication information that corresponds to the sender authentication information that is embodied on the article and determining, for example, article identification information that can be located on the article. As such, in this example, both location information and article identification information are sent in a challenge. The steps previously described with reference to FIGS. 25 and 26 are then carried out such that, for example, a challenge is repeatedly sent wherein the challenge is the same challenge until proper sender authentication information is received in a reply. As such, the user confirms that the display of an article identifier from the challenge matches the identifier on their card. This authenticates the sender unit or target organization as only it and the end user have knowledge of this identifier. The user inputs a suitable response to the challenge by looking at the contents of their card at the location information sent in the challenge. The sending unit can verify the reply and authenticate the user as only the end user with this card can correctly respond to the challenge. It will be recognized that the operations were described in the context of, for example, the Internet but the operations are equally applicable to other channels of communication such as interactive voice response or any other suitable communication system. For example, where interactive voice response is used, a user prompt would be provided by voice over a wireless or wire line telephony network from, for example, an automated system. A user response would be provided via touchtone keypads instead of, for example, through web form input. Any other suitable communication system may also be used.
Among other advantages, the described apparatus systems and methods provide secure authentication of both the end user and sending unit or target organization and may be relatively easy to use and relatively inexpensive to produce and distribute such as the authentication cards versus more complex technologies such as smart cards, hardware tokens or public key infrastructures. In addition, the system may be readily implemented using web clients across multiple communication channels for mobile devices, non-mobile devices, voice activated devices or any other suitable devices.
FIG. 28 diagrammatically represents the operations described above. For example, as shown by communication 2800, a user is presented with a conventional user name and password login screen and enters their user name and password and sends it as a login response 2800 to the sender unit 2402 which then performs an authentication process, as known in the art, by comparing the received password and user ID to those stored in the password database 2802, for example. If validation is successful, the sender unit 2402 sends a challenge 2414 to a recipient unit with, for example, a user's card identifier and challenge which includes location information so that the user can locate specific indicia on the card. This challenge is, for example, displayed for the user on the recipient unit. The user confirms the received card identifier with the card identifier on the authentication card in the user's possession and answers the challenge by sending a reply 2416 back to the sender unit 2402. This reply is then validated by the sender unit to validate the user to complete mutual authentication. However, if the second level authentication is not successful, the sender unit will repeatedly send the same challenge, namely the same location information back to the recipient unit until a proper reply has been received.
The above detailed description of the invention and the examples described therein have been presented for the purposes of illustration and description and that other variations will be recognized by those in the art. For example, it will be recognized that the various operations described herein may be distributed in a network or non-network configuration. For example, different operations of the authenticator, sending units or TIDM issuers or other operations may be performed by one or more third party web server(s) or other entities or devices. Other variations will also be recognized for the sender authentication apparatus and methods.
1. A method for providing mutual authentication between a user and a sender comprising:
(a) determining, for a user that has been assigned an article, desired sender authentication information that corresponds to sender authentication information that is embodied on the article, and wherein the sender identification information can be located on the article by using location information that is also embodied on the article;
(b) determining for the same user, corresponding article identification information;
(c) sending a challenge for the user that includes at least location information that identifies the desired sender authentication information and sending the article identification information for authenticating the sender to the user wherein a copy of the article identification information is located on the article and is distinct from the sender authentication information on the article; and
(d) authenticating the user based on a reply to the challenge that includes sender authentication information obtained from the article, based on the location information.
2. The method of claim 1 wherein prior to sending the challenge, the method includes:
receiving user authentication information from the user; and
authenticating the user based on the received user authentication information and if the user authentication is successful, then performing steps (a) and (b) based on the user authentication information.
3. The method of claim 1 wherein the article identification information includes at least one of: a shared secret known to the user and to the sender and an article serial number.
4. The method of claim 1 wherein the article identification information in the challenge comprises unencrypted article identification information.
5. A method for providing mutual authentication between a user and a sender comprising:
prompting for first level authentication information from a user;
receiving first level user authentication information from the user;
verifying the received first level user authentication information;
based on the received first level user authentication information, determining, for a user that has been assigned an article, desired sender authentication information that corresponds to sender authentication information that is embodied on the article that has been assigned to the user, and wherein the sender authentication information can be located on the article by using location information;
sending an electronic challenge for the user that includes at least: location information that designates sender authentication information located on the article and article identification information for authenticating the sender to the user wherein a copy of the article identification information is on the article and is distinct from the sender authentication information on the article;
verifying received sender authentication information obtained from the article, based on the location information, with expected sender authentication information; and
if the sender authentication information is not successfully verified, then continue to send the same electronic challenge with the same designated second level user authentication information located on the article and article identification information for authenticating the sender to the user for a next user session until the same electronic challenge is successfully verified.
6. The method of claim 5 wherein the article identification information includes at least one of: a shared secret known to the user and to the sender and an article serial number.
7. The method of claim 5 wherein the first level user authentication information includes user password information and user identification information.
8. The method of claim 5 wherein the location information and the article identification information includes electronically transmitted data for display on a display device.
9. The method of claim 5 wherein the article issued to the user contains sender authentication information that is arranged in rows and columns.
10. A device for providing mutual authentication with a user comprising:
memory containing executable instructions that cause the one or more processing devices to:
(a) determine, for a user that has been assigned an article, desired sender authentication information that corresponds to sender authentication information that is embodied on the article, and wherein the sender identification information can be located on the article by using location information embodied on the article;
(b) determine for the same user, corresponding article identification information wherein a copy of the article identification information is on the article and is distinct from the sender authentication information on the article;
(c) send a challenge for the user that includes at least location information that identifies the desired sender authentication information for authenticating the sender to the user and sending the article identification information for authenticating the sender to the user; and
(d) authenticate the user based on a reply to the challenge that includes user authentication information obtained from the article, based on the location information.
11. The device of claim 10 wherein the article identification information includes at least one of: a shared secret known to the user and to the device and an article serial number.
12. A device for providing mutual authentication with a user comprising:
send a prompt request for first level authentication information from the user;
verify received first level user authentication information that was received in response to the prompt request;
based on the received first level user authentication information, determine, for the user that has been assigned an article, desired sender authentication information that corresponds to sender authentication information that is embodied on the article that has been assigned to the user, and wherein the sender authentication information can be located on the article by using location information also embodied on the article;
send an electronic challenge for the user that includes at least: location information that designates sender authentication information located on the article and article identification information for authenticating the sender to the user wherein a copy of the article identification information is on the article and is distinct from the sender authentication information on the article;
verify received sender authentication information obtained from the article, based on the location information, with expected sender authentication information; and
if the sender authentication information is not successfully verified, then continue to send the same electronic challenge with the same sender authentication information located on the article and article identification information for authenticating the sender to the user for a next user session until the same electronic challenge is successfully verified.
US10967669 2003-12-30 2004-10-18 Method and apparatus for providing mutual authentication between a sending unit and a recipient Active 2025-09-01 US8230486B2 (en)
US10748523 US8612757B2 (en) 2003-12-30 2003-12-30 Method and apparatus for securely providing identification information using translucent identification member
US10849402 US8060915B2 (en) 2003-12-30 2004-05-19 Method and apparatus for providing electronic message authentication
US10967669 US8230486B2 (en) 2003-12-30 2004-10-18 Method and apparatus for providing mutual authentication between a sending unit and a recipient
ES05706404T ES2398827T3 (en) 2004-10-18 2005-01-21 Method and apparatus for providing mutual authentication between a sending unit and a receiver
AU2005297350A AU2005297350B2 (en) 2004-10-18 2005-01-21 Method and apparatus for providing mutual authentication between a sending unit and a recipient
EP20050706404 EP1803251B1 (en) 2004-10-18 2005-01-21 Method and apparatus for providing mutual authentication between a sending unit and a recipient
CA 2584082 CA2584082C (en) 2004-10-18 2005-01-21 Method and apparatus for providing mutual authentication between a sending unit and a recipient
PCT/CA2005/000067 WO2006042392A1 (en) 2004-10-18 2005-01-21 Method and apparatus for providing mutual authentication between a sending unit and a recipient
CN 200510121789 CN1848723A (en) 2004-10-18 2005-10-18 Method and apparatus for providing mutual authentication between a sending unit and a recipient
US11300049 US9191215B2 (en) 2003-12-30 2005-12-12 Method and apparatus for providing authentication using policy-controlled authentication articles and techniques
US11302058 US8966579B2 (en) 2003-12-30 2005-12-12 Method and apparatus for providing authentication between a sending unit and a recipient based on challenge usage data
US13685248 US9100194B2 (en) 2003-12-30 2012-11-26 Method and apparatus for providing authentication between a sending unit and a recipient based on challenge usage data
US14942645 US10009378B2 (en) 2003-12-30 2015-11-16 Method and apparatus for providing authentication using policy-controlled authentication articles and techniques
US10849402 Continuation-In-Part US8060915B2 (en) 2003-12-30 2004-05-19 Method and apparatus for providing electronic message authentication
US11300049 Continuation-In-Part US9191215B2 (en) 2003-12-30 2005-12-12 Method and apparatus for providing authentication using policy-controlled authentication articles and techniques
US11302058 Continuation-In-Part US8966579B2 (en) 2003-12-30 2005-12-12 Method and apparatus for providing authentication between a sending unit and a recipient based on challenge usage data
US20050144449A1 true US20050144449A1 (en) 2005-06-30
US8230486B2 true US8230486B2 (en) 2012-07-24
ID=36202634
US10967669 Active 2025-09-01 US8230486B2 (en) 2003-12-30 2004-10-18 Method and apparatus for providing mutual authentication between a sending unit and a recipient
US (1) US8230486B2 (en)
EP (1) EP1803251B1 (en)
CN (1) CN1848723A (en)
CA (1) CA2584082C (en)
ES (1) ES2398827T3 (en)
WO (1) WO2006042392A1 (en)
WO2007044619A3 (en) * 2005-10-07 2009-04-23 Sapphire Mobile Systems Inc Anti-phishing system and methods
FR2895607B1 (en) * 2005-12-23 2008-05-02 Radiotelephone Sfr Method to unlock a resource by a contactless device
US8201227B2 (en) * 2008-05-06 2012-06-12 International Business Machines Corporation System and method for authenticating an end user
CN102137073B (en) 2010-01-22 2013-12-25 杭州华三通信技术有限公司 Method and access equipment for preventing imitating internet protocol (IP) address to attack
CN103346886B (en) 2013-07-01 2016-12-28 天地融科技股份有限公司 A method of transmitting electronic signature data and signature tokens
CN104866256A (en) * 2015-06-18 2015-08-26 龙海鹏 Printing solution and printer using printing solution
US3719801A (en) 1971-02-10 1973-03-06 Drexler Tech Associative selection and correlation apparatus
US4936778A (en) 1986-05-14 1990-06-26 Digital Equipment International Limited Method and apparatus for producing comparative data
FR2654238A1 (en) 1989-11-07 1991-05-10 Lefevre Jean Pierre Method for authenticating the identity of an individual and process óoeuvre layout authenticator device.
US5233436A (en) 1991-06-03 1993-08-03 Oksman Henry C Optical filter software copy protection
US5552845A (en) 1992-08-10 1996-09-03 Olympus Optical Co., Ltd. Camera
WO1999024267A1 (en) 1997-11-07 1999-05-20 Documotion Research, Inc. Tamper-evident form for securely carrying information
WO2002008974A2 (en) 2000-07-21 2002-01-31 Nexxgen Limited Improvements relating to the security of authentication systems
US20020078350A1 (en) 2000-12-19 2002-06-20 Ravi Sandhu System and method for password throttling
US20020081179A1 (en) 2000-12-21 2002-06-27 Jari Vallstrom Smart card of a terminal, a terminal using a smart card, and an improved method for identifying a user by means of a smart card
US20020091938A1 (en) 1999-05-18 2002-07-11 Matti Hiltunen Method and device for authenticating locally-stored program code
US20030009670A1 (en) 2001-04-02 2003-01-09 Digimarc Corporation Background watermark processing
US20040054863A1 (en) 2002-06-27 2004-03-18 Shunji Harada Recording medium holder and electronic card system
US20050050328A1 (en) 2003-09-02 2005-03-03 Authenture, Inc. Key generation method for communication session encryption and authentication system
US20050144451A1 (en) 2003-12-30 2005-06-30 Entrust Limited Method and apparatus for providing electronic message authentication
US20050149761A1 (en) 2003-12-30 2005-07-07 Entrust Limited Method and apparatus for securely providing identification information using translucent identification member
US6975727B1 (en) 1999-06-22 2005-12-13 Entrust Limited Dynamic security credential generation system and method
US20070015490A1 (en) 2005-07-14 2007-01-18 Arun Munje Password methods and systems for use on a mobile device
US20080109899A1 (en) 2004-06-09 2008-05-08 Lg Electronics Inc. One-Time Authentication System
US20080301371A1 (en) 2004-06-08 2008-12-04 Freescale Semiconductor, Inc. Memory Cache Control Arrangement and a Method of Performing a Coherency Operation Therefor
"RSA SecurID for Microsoft Windows", RSA Security, Inc. Brochure No. SIDMS DS0504; 2004.
America's Growth Capital; Authenticated Email Primer: Tumbleweed Jumps Into the Fray; Apr. 8, 2004; pp. 1-13.
Australian Office Action; Australian Application No. 2004319571; dated Mar. 13, 2009.
Australian Office Action; Australian Application No. 2005297350; dated Jun. 1, 2009.
Canadian Patent Office International Search Report for International Application No. PCT/CA2006/001562 dated Dec. 15, 2006.
Chinese Office Action; Chinese Application No. 200480043373.1; dated Mar. 27, 2009.
Chinese Office Action; Chinese Application No. 200510121789.7; dated Jun. 29, 2011.
Chinese Office Action; Chinese Application No. 200510121789.7; dated Nov. 25, 2011.
Chinese Office Action; Chinese Application No. 200510121789.7; dated Sep. 25, 2009.
Engineering Statistics Handbook, "Histogram"; Jun. 2004; pp. 1-3; http://www.itl.nist.gov/div898/handbook/eda/section3/histogra.html.
English Translation of WO 91/06904; published May 16, 1991; corresponding to FR2654238 (Lefevre).
EP Office Action; EP Application No. 04802268.5; dated Dec. 30, 2010.
International Search Report from Canadian Intellectual Property Office; International Application No. PCT/CA2005/000067; dated Jul. 18, 2005.
International Search Report from Canadian Patent Office for International Application No. PCT/CA2004/002091 dated Mar. 21, 2005.
International Search Report from Canadian Patent Office for International Application No. PCT/CA2006/002017, dated Mar. 30, 2007.
International Search Report from European Patent Office for International Application No. PCT/IB2004/002234 dated Jan. 24, 2005.
Microsoft, "Account Lockout Best Practices Whitepaper"; May 20, 2004; pp. 1-52.
PassMark; What are PassMarks?; from www.passmarksecurity.com; printed Apr. 21, 2005; p. 1.
PFBlog "Why Do Credit Cards Expire?"; Feb. 7, 2005; p. 1; www.pfblog.com/archives/1560-why-do-credit-cards-expire.html.
PFBlog "Why Do Credit Cards Expire?"; Feb. 7, 2005; p. 1; www.pfblog.com/archives/1560—why—do—credit—cards—expire.html.
SearchSecurity "TwoFactor Authentication"; Jun. 19, 2004; http://searchsecurity.techtarget.com/sDefinition/0,,sid14-gci992919,000.html.
SearchSecurity "TwoFactor Authentication"; Jun. 19, 2004; http://searchsecurity.techtarget.com/sDefinition/0,,sid14—gci992919,000.html.
Supplementary EP Search Report; EP Application No. 04802268.5; dated Aug. 4, 2010.
Supplementary EP Search Report; EP Application No. 05706404.0; dated Nov. 5, 2007.
Tech FAQ "What is two Factor Authentication?"; pp. 1-2; Mar. 13, 2005 (Internet Archive Wayback Machine).
The Anti-Phishing Working Group; Proposed Solutions to Address the Threat of Email Spoofing Scams; Dec. 2003; pp. 1-10.
The Dryad Numeral Cipherauthentication System; from https://hosta.atsc.eustis.army.mil; printed May 11, 2004; pp. 1-12.
CA2584082C (en) 2015-01-06 grant
CN1848723A (en) 2006-10-18 application
CA2584082A1 (en) 2006-04-27 application
EP1803251A4 (en) 2007-12-05 application
WO2006042392A1 (en) 2006-04-27 application
ES2398827T3 (en) 2013-03-22 grant
EP1803251A1 (en) 2007-07-04 application
EP1803251B1 (en) 2012-10-31 grant
US20050144449A1 (en) 2005-06-30 application
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:VOICE, CHRIS;REEL/FRAME:016338/0582
Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE INADVERTENTLY LISTED INCORRECTLY ON THE ORIGINAL ASSIGNMENT PREVIOUSLY RECORDED ON REEL 016338 FRAME 0582;ASSIGNOR:VOICE, CHRIS;REEL/FRAME:022790/0273
Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE INADVERTENTLY LISTED INCORRECTLY ON THE ORIGINAL ASSIGNMENT PREVIOUSLY RECORDED ON REEL 016338 FRAME 0582. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNEE SHOULD HAVE BEEN LISTED AS ENTRUST, INC. PURSUANT TO THE ATTACHED DECLARATION SIGNED BY THE CURRENT OWNER OF THE PATENT;ASSIGNOR:VOICE, CHRIS;REEL/FRAME:022790/0273