Patent ID: 7168091

Claim:
A method for secure authentication of a user in a session conducted over a two-way telephony communication channel, comprising: allowing the user to access an authenticating entity via a two-way telephony communication channel; inserting a session identifier by the authenticating entity into the two-way telephony communication channel that is infeasible to detect or eliminate without knowledge of a secret known to the authenticating entity, wherein inserting the session identifier into the communication channel further comprises inserting pseudorandom noise deterministically generated according to the secret known only to the authenticating entity into the communication channel by the authenticating entity; receiving authentication information for the user by the authenticating entity via the two-way telephony communication channel; analyzing the authentication information by the authenticating entity to determine whether the session identifier inserted by the authenticating entity into the two-way telephony communication channel is associated with the received authentication information; and authenticating the user by the authenticating entity based on the authentication information if the session identifier is found to be associated with the authentication information.