IP Library Granted Patent US 8,505,079
Granted Patent B2
US 8,505,079 · App. 13/279,292 · Granted Aug 6, 2013

Authentication system and related method

Inventor: Gopal Nandakumar (San Antonio, TX)
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,505,079
App. No.
13/279,292
Granted
Aug 6, 2013
Kind
B2
Abstract

A system and method whereby the identity of a person, entity, device or the like attempting to gain access to a secured resource may be securely authenticated includes a means for receiving from a requester purporting to be an authorized user of a secured resource a request for access by an unauthorized user (such as, for example, a retail store, a service station, an on-line service provider or merchandiser, a healthcare provider, a medical insurer, an information consumer or the like) to the secured resource; a means for determining a key string adapted to provide a basis for authenticating the identity of the requester; a means for receiving an authentication credential associated with the request for access; and a means for evaluating the authentication credential to authenticate the identity of the requester.

Claims (48)

1. An authentication system for authenticating the identity of a requester of access by an unauthorized service client to a secured resource, said authentication system comprising:

a messaging gateway having a first set of instructions embodied in a computer readable medium, said first set of instructions operable to receive from a requester purporting to be an authorized user of a secured resource a request for access by an unauthorized service client to said secured resource;

a server in secure communication with said messaging gateway, said server having a second set of instructions embodied in a computer readable medium operable to determine a key string known to both said secured resource and the authorized user said requestor purports to be, said key string being adapted to provide a basis for authenticating the identity of said requester;

a service user interface in communication with said server, said service user interface having a third set of instructions embodied in a computer readable medium operable to receive input from said unauthorized service client;

wherein said second set of instructions is further operable to receive an authentication credential from said unauthorized service client associated with said request for access, said authentication credential having been provided to said unauthorized service client by said requestor; and

wherein said second set of instructions is further operable to evaluate said authentication credential to authenticate the identity of said requester.

2. The authentication system as recited in claim 1 wherein:

said second set of instructions is further operable to generate a confirmation message indicating receipt of said request for access; and

said first set of instructions is further operable to communicate said confirmation message to said authorized user that said requester purports to be.

3. The authentication system as recited in claim 1 wherein said second set of instructions is further operable to for determine from among a plurality of secured resources associated with said authorized user the identity of a single secured resource to which said requester requests access.

4. The authentication system as recited in claim 3 , wherein said second set of instructions is further operable to determine a priority value for each of said plurality of said secured resources.

5. The authentication system as recited in claim 3 , wherein said second set of instructions includes instructions to:

for generate an inquiry message;

transmit said inquiry message to said authorized user; and

receive a response to said inquiry message and determine based upon said response to said inquiry message the identity of a single secured resource to which said requester requests access.

6. The authentication system as recited in claim 1 , wherein said second set of instructions includes instructions operable to invalidate said authentication credential based upon passage of time.

7. The authentication system as recited in claim 1 , said second set of instructions operable to conduct for the benefit of said unauthorized service client a transaction reliant upon access to said secured resource.

8. The authentication system as recited in claim 7 , said second set of instructions further operable to:

generate a receipt for said transaction; and

transmit said receipt to said authorized user.

9. The authentication system as recited in claim 7 , wherein said transaction comprises providing a financial benefit.

10. The authentication system as recited in claim 1 , wherein said request for access comprises a transient identifier for said unauthorized service client, said transient identifier being dynamically generated by said authentication system.

11. A method for authenticating the identity of a requester of access to a secured resource, said method for authenticating comprising the steps of:

receiving at a messaging gateway having a first set of instructions embodied in a computer readable medium, said first set of instructions operable to receive from a requester purporting to be an authorized user of a secured resource, a request for access by an unauthorized service client to a secured resource from a requester purporting to be an authorized user of said secured resource;

determining a key string with a server in secure communication with said messaging gateway, said server having a second set of instructions embodied in a computer readable medium operable to determine a key string known to both said secured resource and the authorized user said requestor purports to be, said key string being adapted to provide a basis for authenticating the identity of said requester;

a service user interface in communication with said server, said service user interface having a third set of instructions embodied in a computer readable medium operable to receive input from said unauthorized service client;

wherein said second set of instructions is further operable to receive from said unauthorized service client an authentication credential associated with said request for access, said authentication credential having been provided to said unauthorized service client by said requestor; and

wherein said second set of instructions is further operable for evaluating said authentication credential to authenticate the identity of said requester.

12. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the steps of:

generating a confirmation message indicating receipt of said request for access; and

communicating said confirmation message to said authorized user that said requester purports to be.

13. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of determining from among a plurality of secured resources associated with said authorized user the identity of a single secured resource to which said requester requests access.

14. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 13 , wherein said step of determining said single secured resource comprises sorting said plurality of secured resources by priority values.

15. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 13 , wherein said step of determining said single secured resource comprises:

generating an inquiry message, said inquiry message referring to each of said plurality of secured resources by a pseudonym;

transmitting said inquiry message to said authorized user;

receiving a response to said inquiry message from said authorized user; and

determining based upon said response to said inquiry message the identity of a single secured resource to which said requester requests access.

16. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of determining based upon passage of time whether said authentication credential should be deemed invalid.

17. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the step of conducting for the benefit of said unauthorized service client a transaction reliant upon access to said secured resource.

18. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 17 , said method for authenticating further comprising the steps of:

generating a receipt for said transaction; and

transmitting said receipt to said authorized user.

19. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 17 , wherein said transaction comprises providing a financial benefit.

20. The method for authenticating the identity of a requester of access to a secured resource as recited in claim 11 , said method for authenticating further comprising the steps of:

generating a dynamic identifier for said unauthorized service client;

transmitting to said unauthorized service client said dynamically generated identifier; and

receiving said dynamically generated identifier from said requester as at least part of said request for access.

Assignments (3)
CORRECTIVE ASSIGNMENT TO CORRECT THE INCORRECT SPELLING OF RECEIVING PARTY'S NAME TEXTILE COMPUTER SYSTEM, INC. PREVIOUSLY RECORDED ON REEL 034284 FRAME 0335. ASSIGNOR(S) HEREBY CONFIRMS THE PATENT ASSIGNMENT. Recorded Jun 19, 2017
From: NANDAKUMAR, GOPAL
To: TEXTILE COMPUTER SYSTEMS, INC.
Reel/Frame 042913/0799 →
CHANGE OF ADDRESS OF ASSIGNEE Recorded Aug 23, 2016
From: TEXTILE COMPUTER SYSTEMS, INC.
To: TEXTILE COMPUTER SYSTEMS, INC.
Reel/Frame 039775/0874 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 1, 2014
From: NANDAKUMAR, GOPAL
To: TEXTILE COMPUTER SYSTEM, INC.
Reel/Frame 034284/0335 →
Continuity (1)
Related Publication 20130104201A1 · Apr 25, 2013