AUTHENTICATION SYSTEM
A system and method whereby the identity of a person, entity, device or the like attempting to gain access to a secured resource may be securely authenticated includes a means for receiving from a service client (such as a retail store, service station, on-line service provider or merchandiser, healthcare provider, medical insurer, information consumer or the like) a request for access to a secured resource, where the request for access was previously submitted to the service client by a requester purporting to be an authorized user of said secured resource; means for generating and communicating to the purported authorized user a challenge string adapted to provide a basis for authenticating the identity of the requester; a means for receiving from the service client a response string corresponding to the challenge string; and a means for evaluating the response string to authenticate the identity of the requester.
1 . An authentication system for authenticating the identity of a requester of access to a secured resource, said authentication system comprising:
means for receiving from a service client a request for access to a secured resource, said request for access having been submitted to said service client by a requester purporting to be an authorized user of said secured resource;
means for generating a challenge string, said challenge string being adapted to provide a basis for authenticating the identity of said requester;
means for communicating said challenge string to said authorized user that said requester purports to be;
means for receiving from said service client a response string corresponding to said challenge string; and
means for evaluating said response string to authenticate the identity of said requester.
2 . The authentication system as recited in claim 1 , wherein said means for evaluating said response string further comprises means for invalidating said response string based upon passage of time.
3 . The authentication system as recited in claim 1 , said authentication system further comprising means for conducting for the benefit of said service client a transaction reliant upon access to said secured resource.
4 . The authentication system as recited in claim 3 , said authentication system further comprising:
means for generating a receipt for said transaction; and
means for transmitting said receipt to said authorized user.
5 . The authentication system as recited in claim 3 , wherein said transaction comprises providing a financial benefit.
6 . The authentication system as recited in claim 5 , wherein said secured resource comprises a payment resource selected from the group consisting of:
a credit card account;
a banking account; and
an automated teller machine account.
7 . The authentication system as recited in claim 5 , wherein said service client comprises a vendor selected from the group consisting of:
a retail store;
a service station;
an on-line service provider; and
an on-line merchandiser.
8 . The authentication system as recited in claim 3 , wherein said secured resource comprises a medical record.
9 . The authentication system as recited in claim 8 , wherein said service client comprises an information consumer selected from the group consisting of:
a healthcare provider; and
a medical insurer.
10 . The authentication system as recited in claim 3 , wherein said secured resource comprises an information product.
11 . The authentication system as recited in claim 10 , wherein said information product comprises a credit data.
12 . The authentication system as recited in claim 1 , said authentication system further comprising means for establishing a test adapted to detect the existence of a spoofing type deception.
13 . The authentication system as recited in claim 12 , wherein said test adapted to detect the existence of a spoofing type deception is further adapted to at least in part authenticate the identity of said requester.