Dynamic pin dual factor authentication using mobile device
The present invention provides cost efficient two way authentication method in which the authentication module can be provided as a Plug and Play (PnP) architecture enabling dual layer security with reduced cost where the actions are initiated by a server and user input is received through an audio session for added security. The second level authentication can be carried out with mobile as client device making it cost efficient. The invention can be hosted as an independent service or can be integrated with existing authentication mechanisms, making it elegant for usage.
1. A computer-implemented method of authenticating a user for usage of a portal at a user terminal, the method comprising steps of:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
validating the user based on the obtained at least one credential;
displaying, a code at the portal accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating the authentication of the user on failing to establish the audio session;
receiving, by the authentication module, the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.
2. The method of claim 1 , wherein the credential comprises at least one of a username and a password.
3. The method of claim 1 , wherein the code is at least one of a group containing password, security answer, CAPTCHA, and any identification number.
4. The method of claim 1 , wherein the portal can be used for at least one of authenticating a user login, transaction, user profile change, and application access.
5. The method of claim 1 , wherein the code generated can be at least one of a preset password, random characters generated at run time, and other user information.
6. A computer-implemented method of authenticating a user for usage of a portal at a user terminal, the method comprising steps of:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
validating the user based on the obtained at least one credential;
displaying, a code at a computing interface accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating the authentication of the user on failing to establish the audio session;
receiving, by the authentication module, the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.
7. A computer-implemented method of authenticating a user for usage of a portal at a user terminal, the method comprising steps of:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
displaying, a code at the portal accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating the authentication of the user on failing to establish the audio session;
receiving, by the authentication module, the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.
8. The method of claim 7 , wherein the credential comprises at least one of a username and a password.
9. The method of claim 7 , wherein the code is at least one of a group containing password, security answer, CAPTCHA, and any identification number.
10. The method of claim 7 , wherein the portal can be used for at least one of authenticating a user login, transaction, user profile change, and application access.
11. The method of claim 7 , wherein the code generated can be at least one of a preset password, random characters generated at run time, and other user information.
12. A computer-implemented method of authenticating a user for usage of a portal at a user terminal, the method comprising steps of:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
displaying, a code at a computing interface accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating, by the authentication module, the authentication of the user on failing to establish the audio session;
receiving, by the authentication module, the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.
13. A system for authenticating a user for usage of a portal at a user terminal, the system comprising:
a memory comprising program instructions;
a processor configured to execute the program instructions stored in the memory;
an user interface in communication with the processor and configured to receive at least one user credential, the user interface being accessed by the user via the user terminal;
a server of the portal in communication with the processor and configured to:
display a code at the user interface on receiving the user credentials; and
transmit one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
the authentication module, in communication with the processor and configured to:
initiate establishment of an audio session with a registered user device based on the at least one user credential received from the server, wherein the registered user device is different from the user terminal;
check the establishment of the audio session at the registered device and invalidate the authentication of the user on failing to establish the audio session;
receive the code from the user through the registered device if the audio session is established with the user;
compare the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticate the user for usage of the portal at the user terminal based on the comparison.
14. A system of claim 13 , wherein the registered device is at least one of a laptop, a desktop computer, a wireless device, a wireless email device, an integrated device, a mobile phone and a personal digital assistant (PDA).
15. A system of claim 13 , where in the audio session comprises at least one of audio input, audio output, and audio interaction.
16. A system of claim 13 , where in the network can be one of private, public and hybrid.
17. A non-transitory computer usable medium having a computer readable program code embodied therein for authenticating a user for usage of a portal at a user terminal comprising a program code adapted for:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
validating the user based on the obtained at least one credential;
displaying, a code at the portal accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating the authentication of the user on failing to establish the audio session;
receiving the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.
18. A non-transitory computer usable medium having a computer readable program code embodied therein for authenticating a user for usage of a portal at a user terminal comprising a program code adapted for:
obtaining at least one credential inputted by the user through the portal, the portal being accessed by the user via the user terminal;
displaying, a code at the portal accessed by the user via the user terminal, wherein the code is generated by a server of the portal;
transmitting, by the server, one or more user details and the generated code to an authentication module, wherein the authentication module is maintained as a separate entity that is independent of the server of the portal;
initiating establishment, by the authentication module in communication with the server, of an audio session with the user at a registered device of the user, wherein the registered device is different from the user terminal;
checking, by the authentication module, the establishment of the audio session at the registered device and invalidating the authentication of the user on failing to establish the audio session;
receiving, by the authentication module, the code from the user through the registered device if the audio session is established with the user;
comparing, by the authentication module, the code received from the user via the registered device during the established audio session with the generated code received from the server of the portal; and
authenticating the user for usage of the portal at the user terminal based on the comparison.