Transaction authentication by a token, contingent on personal presence
To authorize a transaction between a host and a server, a token is operationally connected to the host. The host receives an identification credential of a user. The identification credential is verified by the token and/or by the server. If the token detects a prescribed human action, the token generates token authentication data and the host sends the token authentication data to the server. Upon receiving the authentication data, the server authenticates the transaction. A device for authenticating a transaction includes a device interface for interacting with a host, a connector for reversibly operationally connecting the device to the host, and a controller that authenticates the transaction only once, contingent on detecting a prescribed anonymous human action. One such human action is providing one or more inputs at the host's user interface synchronously with outputs at the device's user interface.
1. A method of confirming by a peripheral device, which is operationally connected to a host, that a user is interfacing with the host in person, the method comprising:
performing by the peripheral device:
generating at least one output at a peripheral device user output on the peripheral device;
receiving a report from the host on user input that is input via the host;
determining that the report was received within a predetermined time since generating the at least one output;
confirming, in response to the received report and in response to determining that the report was received within the predetermined time since generating the at least one output, that the user is interfacing with the host in person; and
in response to confirming that the user is interfacing with the host in person:
generating authentication token data; and
sending, to the host, the authentication token data.
2. The method of claim 1 , wherein generating the at least one output involves generating a plurality of outputs.
3. The method of claim 2 , wherein the plurality of outputs are distributed randomly in time.
4. The method of claim 1 , wherein generating the at least one output comprises generating an audiovisual signal.
5. The method of claim 1 , wherein:
the peripheral device comprises multiple functionalities; and
at least one of the functionalities comprises an authentication functionality configured to generate the authentication token data.
6. The method of claim 1 , wherein the peripheral device comprises an authentication functionality configured to generate the authentication token data.
7. A method of confirming by a peripheral device, which is operationally connected to a host, that a user is interfacing with the host in person, the method comprising:
performing by the peripheral device:
generating an output
receiving a report from the host on user input that is input via the host;
determining that the report was received within a predetermined time since generating the output;
confirming, in response to the received report and in response to determining that the report was received within the predetermined time since generating the output, that the user is interfacing with the host in person; and
in response to confirming that the user is interfacing with the host in person:
generating authentication token data; and
sending, to the host, the authentication token data.
8. The method of claim 7 , wherein generating the output involves generating a plurality of outputs.
9. The method of claim 8 , wherein the plurality of outputs are distributed randomly in time.
10. The method of claim 7 , wherein generating the output comprises generating an audiovisual signal.
11. The method of claim 7 , wherein:
the peripheral device comprises multiple functionalities; and
at least one of the functionalities comprises an authentication functionality configured to generate the authentication token data.
12. The method of claim 7 , wherein the peripheral device comprises an authentication functionality configured to generate the authentication token data.