IP Library Patent Application 13429631
Patent Application
App. No. 13/429,631

Encoding an Authentication Session in a QR Code

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
13/429,631
Abstract

A system and method is provided for authenticating logins. An authentication server may receive a request for an authentication code from a requesting site, wherein the request is associated with a login session being performed via the requesting site and a first device associated with a user. The authentication server may generate the authentication code, wherein the authentication code comprises a universally unique identifier and an identifier that identifies the authentication server. The authentication server may communicate the generated authentication code to the requesting site. The authentication server may receive the universally unique identifier from a second device associated with the user, wherein the universally unique identifier is retrieved by decoding an optically captured representation of the authentication code at the second device. The authentication server may determine whether the login session is authenticated based on the universally unique identifier.

Claims (44)

1 . A method for authenticating logins, the method comprising:

receiving, by an authentication server, a request for an authentication code from a requesting site separate from the authentication server, wherein the request is associated with a login session being performed via the requesting site and a first device associated with a user;

generating, by the authentication server, the authentication code, the authentication code comprising a universally unique identifier and an identifier that identifies the authentication server, the authentication code being encoded using an optical encoding that is configured to be decoded based on an optically captured representation of the authentication code;

communicating, by the authentication server, the generated authentication code to the requesting site;

receiving, by the authentication server, the universally unique identifier from a second device associated with the user, wherein the universally unique identifier is retrieved by decoding the authentication code at the second device, and wherein the second device is different than the first device;

determining, by the authentication server, whether the login session is authenticated based on the universally unique identifier;

generating, by the authentication server, authentication information based on the determination; and

communicating, by the authentication server, the authentication information to the requesting site, wherein the authentication information is displayed at the first device.

2 . The method of claim 1 , wherein the authentication code comprises one or more authentication parameters used to verify an identity of the user.

3 . The method of claim 2 , wherein the one or more authentication parameters comprises a media record of the user captured at the second device while the user recites a particular phrase.

4 . The method of claim 3 , further comprising:

receiving, by the authentication server, the media record from the second device;

verifying, automatically by the authentication server, the identity of the user based on the media record; and

determining, by the authentication server, whether the login session is authenticated based on the universally unique identifier and the verification.

5 . The method of claim 3 , further comprising:

receiving, by the authentication server, the media record from the second device;

manually verifying the identity of the user based on the media record; and

determining, by the authentication server, whether the login session is authenticated based on the universally unique identifier and the verification.

6 . The method of claim 1 , wherein the authentication information comprises information regarding whether a login request associated with the login session is granted or denied.

7 . The method of claim 1 , wherein the authentication code comprises a OR code or a barcode.

8 . A system for authenticating logins, the system comprising one or more processors configured to:

receive a request for an authentication code from a requesting site separate from the authentication server, wherein the request is associated with a login session being performed via the requesting site and a first device associated with a user;

generate the authentication code, the authentication code comprising a universally unique identifier and an identifier that identifies the authentication server, the authentication code being encoded using an optical encoding that is configured to be decoded based on an optically captured representation of the authentication code;

communicate the generated authentication code to the requesting site;

receive the universally unique identifier from a second device associated with the user, wherein the universally unique identifier is retrieved by decoding the authentication code at the second device, and wherein the second device is different than the first device;

determine whether the login session is authenticated based on the universally unique identifier;

generate authentication information based on the determination; and

communicate the authentication information to the requesting site, wherein the authentication information is displayed at the first device.

9 . The system of claim 8 , wherein the authentication code comprises one or more authentication parameters used to verify an identity of the user.

10 . The system of claim 9 , wherein the one or more authentication parameters comprises a media record of the user captured at the second device while the user recites a particular phrase.

11 . The system of claim 10 , wherein the one or more processors are further configured to:

receive the media record from the second device;

automatically verify the identity of the user based on the media record; and

determine whether the login session is authenticated based on the universally unique identifier and the verification.

12 . The system of claim 10 , wherein the one or more processors are further configured to:

receive the media record from the second device; and

determine whether the login session is authenticated based on the universally unique identifier and a manual verification of the identity of the user based on the media record.

13 . The system of claim 8 , wherein the authentication information comprises information regarding whether a login request associated with the login session is granted or denied.

14 . The system of claim 8 , wherein the authentication code comprises a QR code or a barcode.

15 . A tangible computer readable medium having one or more computer-readable instructions thereon which when executed by one or more processors cause the one or more processors to:

capture, by a first device associated with the user, an authentication code displayed on a second device associated with the user, wherein the second device is different than the first device, wherein the authentication code comprises a universally unique identifier and an identifier that identifies an authentication server; and wherein the second device displays the authentication code via a website hosted by a web server and the authentication code is generated by the authentication server;

decode, by the first device, from the captured authentication the universally unique identifier and identifier that identifies the authentication server; and

communicate, by the first device, the universally unique identifier to the authentication server based on the identifier, wherein a login session is verified based on the communicated universally unique identifier.

16 . The tangible computer readable medium of claim 15 , wherein the instructions cause the processors to optically capture the authentication code displayed on the second device.

Assignments (2)
MERGER Recorded Sep 27, 2013
From: COMPUTER ASSOCIATES THINK, INC.
To: CA, INC.
Reel/Frame 031294/0495 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 26, 2012
From: GIARDINA, NATHAN J.; TYREE, DAVID
To: COMPUTER ASSOCIATES THINK, INC.
Reel/Frame 027925/0500 →