User authentication using personal objects
A method and system of authentication for accessing one or more applications by a user by using a personal object belonging to the user. Such a personal object is one that is already in use by the user for purposes other than accessing the one or more applications.
1. A computer-implemented method for providing a user secure access to a plurality of applications on an application server, the computer-implemented method comprising:
receiving an object ID associated with a personal object;
receiving an application password from the user;
appending the object ID to the application password to form an extended application password;
sending the extended application password to an object verifier for verification as a password for accessing said plurality of applications;
receiving a dynamically generated single-use password from said object verifier for accessing one or more applications of said plurality of applications responsive to successful authentication at said object verifier; and
using said dynamically generated single-use password from said object verifier for accessing said one or more applications on the application server.
2. The computer-implemented method of claim 1 , wherein said personal object is any personal object from a set of personal objects comprising:
a watch;
a driver license;
a credit card;
a bank card;
a keychain;
a wallet;
a piece of jewelry;
a thumb drive;
a PDA;
a mobile phone; or
a handheld device.
3. The computer-implemented method of claim 1 , wherein said object ID is an embedded ID.
4. The computer-implemented method of claim 1 , wherein said object ID is an embedded device serial number.
5. The computer-implemented method of claim 1 , wherein said object ID is a UPC bar code.
6. The computer-implemented method of claim 5 , wherein said UPC bar code is a linear UPC code.
7. The computer-implemented method of claim 5 , wherein said UPC bar code is a two-dimensional UPC code.
8. The computer-implemented method of claim 5 , wherein said UPC bar code is a composite UPC code.
9. The computer-implemented method of claim 5 , wherein said UPC bar code is a matrix UPC code.
10. The computer-implemented method of claim 1 , wherein said object ID is an optical character recognition code.
11. The computer-implemented method of claim 1 , wherein said object ID is an RFID-based electronic product code (EPC).
12. The computer-implemented method of claim 1 , further comprising electronically obtaining said object ID by querying an electronic object ID reader for said object ID.
13. The computer-implemented method of claim 1 , further comprising electronically obtaining said object ID by interfacing with an electronic object ID reader for said object ID.
14. The computer-implemented method of claim 1 , wherein said one or more applications verify said dynamically generated single-use password at said object verifier responsive to said one or more applications receiving said dynamically generated single-use password for authentication.
15. The computer-implemented method of claim 1 , wherein the personal object is a personal object that a user already uses for purposes other than accessing the plurality of applications.
16. An authentication system for authenticating a user who wishes to access a plurality of applications, said authentication system comprising:
an object ID reader; wherein the object ID reader is configured to read an object ID, wherein the object ID is associated with a personal object belonging to a user;
an agent for communicating with an application server associated with said plurality of applications and an object verifier, wherein the agent is configured to:
receive the object ID associated with the personal object;
receive an application password from the user;
append the object ID to the application password to form an extended application password;
send the extended application password to the object verifier for verification as a password for accessing said plurality of applications;
receive a dynamically generated single-use password from the object verifier for accessing one or more applications of the plurality of applications responsive to successful authentication at the object verifier; and
use the dynamically generated single-use password from the object verifier for accessing the one or more applications on the application server.
17. The authentication system of claim 16 , wherein said agent interfaces with said object ID reader to obtain said object ID.
18. The authentication system of claim 16 , wherein said object ID reader is implemented as a combination of software and hardware.
19. The authentication system of claim 16 , wherein said object ID reader is implemented in software.
20. The authentication system of claim 16 , wherein said object ID reader is implemented in hardware.
21. The authentication system of claim 16 , wherein said agent is implemented as a combination of software and hardware.
22. The authentication system of claim 16 , wherein said agent is a software implementation.
23. The authentication system of claim 16 , wherein said agent is a hardware implementation.
24. The authentication system of claim 16 , wherein said personal object is any personal object from a set of personal objects comprising:
a watch;
a driver license;
a keychain;
a wallet;
a credit card;
a bank card;
a piece of jewelry;
a thumb drive;
a PDA;
a mobile phone; or
a handheld device.
25. The authentication system of claim 16 , wherein said object ID is an embedded ID.
26. The authentication system of claim 16 , wherein said object ID is an embedded device serial number.
27. The authentication system of claim 16 , wherein said object ID is a universal product code (UPC) bar code.
28. The authentication system of claim 27 , wherein said UPC bar code is a linear UPC code.
29. The authentication system of claim 27 , wherein said UPC bar code is a two-dimensional UPC code.
30. The authentication system of claim 27 , wherein said UPC bar code is a composite UPC code.
31. The authentication system of claim 27 , wherein said UPC bar code is a matrix UPC code.
32. The authentication system of claim 16 , wherein said object ID is an optical character recognition code.
33. The authentication system of claim 16 , wherein said object ID is an RFID-based electronic product code (EPC).
34. The authentication system of claim 16 , wherein the personal object is a personal object that a user already uses for purposes other than accessing the plurality of applications.