Systems and methods for authenticating users of a computer system

1. An authentication system for allowing access to a user account server, comprising:

a plurality of access devices capable of operatively connecting to the user account server, where at least one of the plurality of access devices comprises a touch screen for allowing entry of a plurality of calibration signatures and at least one session signature; and

at least one verification server capable of comparing session signatures to reference signatures; wherein

at least one user enters a plurality of calibration signatures using the touch screen of at least one of the plurality of access devices;

a user reference signature is generated from the plurality of the calibration signatures, where the user reference signature includes spatial characteristics, and includes tolerances indicative of variations associated with spatial characteristics, and is stored on the at least one verification server;

at least one user operates a first access device of the plurality of access devices to generate a verification image on the first access device;

the at least one user operates a second access device of the plurality of access devices to generate a session ID by performing image analysis of the verification image, and send the session ID to the at least one verification server;

when prompted by the at least one verification server, the at least one user operates the second access device to enter a user session signature;

the second access device transmits the user session signature to the at least one verification server;

after receipt of the session ID and the user session signature, the at least one verification server compares the user session signature with the user reference signature; and

the at least one verification server selectively allows the at least one user to connect to the user account server using the first access device based on the comparison of the user session signature with the user reference signature.

2. An authentication system as recited in claim 1 , in which the at least one verification server allows the at least one user to connect to the user account server using the first access device if the user session signature substantially matches the user reference signature.

3. An authentication system as recited in claim 1 , in which:

the second access device comprises:

a touch screen for allowing entry of session signatures, and

a sensor for generating scans; wherein the user interacts with the user account server using the first access device to request

verification through the at least one verification server;

the at least one verification server causes the first access device to generate the verification image;

the user uses the second access device to generate a scan of the verification image; and

based on the scan of the verification image, the at least one verification server communicates with the second access device to prompt the user to enter the user session signature on the second access device.

4. An authentication system as recited in claim 1 , in which the at least one verification server allows the user to connect to the user account server using the first access device when the user session signature matches the user reference signature within the tolerances of the user reference signature.

5. An authentication system as recited in claim 1 , in which:

the user account server stores controlled data; and

the user account server allows access by the at least one user to the controlled data based on the comparison of the user session signature with the user reference signature and the tolerances of the user reference signature.

6. An authentication system as recited in claim 1 , in which:

the user account server stores controlled data; and

the user account server allows access by a plurality of users to the controlled data based on the comparison of a plurality of user session signatures with a plurality of user reference signatures and the tolerances forming a part of the plurality of user reference signatures.

7. An authentication system as recited in claim 6 , in which:

the controlled data is associated with a loan application; and

the plurality of users comprises an applicant, a loan account officer, and a manager.

8. An authentication system as recited in claim 6 , in which:

the controlled data is associated with a prescription; and

the plurality of users comprises a prescription requestor and a medical provider.

9. An authentication system as recited in claim 1 , in which:

the user account server stores controlled data; and

the user account server allows access by first and second users to the controlled data based on the comparison of first and second user session signatures with first and second user reference signatures, respectively.

10. A method of allowing access to a user account server, comprising:

operatively connecting at least one of a plurality of access devices to the user account server, where at least one of the at least one access device comprises a touch screen for allowing entry of signatures; and

providing at least one verification server capable of comparing session signatures to reference signatures;

entering a plurality of calibration signatures using at least one access device;

establishing, based on variations among the plurality of calibration signatures, a user reference signature, where the user reference signature includes spatial characteristics, and tolerances indicative of variations associated with spatial characteristics;

storing the user reference signature on the at least one verification server;

operating a first access device of the plurality of access devices to generate a verification image on the first access device;

operating a second access device of the plurality of access devices to generate a session ID by performing image analysis of the verification image, and send the session ID to the at least one verification server;

when prompted by the at least one verification server, operating the second access device to enter a user session signature;

causing the second access device to transmit the user session signature to the at least one verification server; and

after receipt of the session ID and the user session signature, operating the at least one verification server to compare the user session signature with the user reference signature; and

operating the at least one verification server selectively to allow the at least one user to connect to the user account server using the first access device based on the comparison of the user session signature with the user reference signature.

11. A method as recited in claim 10 , in which the at least one verification server allows the at least one user to connect to the user account server using the first access device if the user session signature substantially matches the user reference signature.

12. A method as recited in claim 10 , in which:

the user account server stores controlled data; and

the user account server allows access by the at least one user to the controlled data based on the comparison of the user session signature with the user reference signature and the tolerances of the user reference signature.

13. A method as recited in claim 10 , in which:

the user account server stores controlled data; and

the user account server allows access by a plurality of users to the controlled data based on the comparison of a plurality of user session signatures with a plurality of user reference signatures and the tolerances of the plurality of user reference signatures.

14. A method as recited in claim 13 , in which:

the controlled data is associated with a loan application; and

the plurality of users comprises an applicant, a loan account officer, and a manager.

15. A method as recited in claim 13 , in which:

the controlled data is associated with a prescription; and

the plurality of users comprises a prescription requestor and a medical provider.

16. An authentication system for allowing access to a controlled data stored on a user account server, comprising:

a plurality of access devices capable of operatively connecting to the user account server, where at least one of the plurality of access devices comprises a touch screen for allowing entry of signatures; and

at least one verification server capable of comparing session signatures to reference signatures;

wherein at least one user enters a plurality of calibration signatures using the touch screen of at least one of the plurality of access devices;

a user reference signature is generated from the plurality of calibration signatures, where the user reference signature

includes spatial characteristics,

includes tolerances indicative of variations associated with spatial characteristics, and

is stored on the at least one verification server;

at least one user operates a first access device of the plurality of access devices to generate a verification image on the first access device;

the at least one user operates a second access device to generate a session ID by performing image analysis of the verification image, and send the session ID to the at least one verification server;

when prompted by the at least one verification server, the at least one user operates the second access device to enter a user session signature before the verification server allows access to the user account server;

the second access device transmits the user session signature to the at least one verification server;

after receipt of the session ID and the user session signature, the at least one verification server compares the user session signature with the user reference signature; and

the at least one verification server selectively allows the at least one user to connect to the user account server using the first access device based on the comparison of the user session signature with the user reference signature.

17. An authentication system as recited in claim 16 , in which:

the user interacts with the user account server using the first access device to request verification through the at least one verification server;

the at least one verification server causes the first access device to generate the verification image;

the user uses the second access device to generate a scan of the verification image;

based on the scan of the verification image, the at least one verification server communicates with the second access device to prompt the user to enter the user session signature on the second access device; and

the at least one verification server allows the user to access the controlled data on the user account server using the first access device based on a comparison of the user session signature with the user reference signature.

18. An authentication system as recited in claim 1 , in which the user account server allows access by a plurality of users to the controlled data based on the comparison of a plurality of user session signatures with a plurality of user reference signatures.

19. An authentication system as recited in claim 18 , in which:

the controlled data is associated with a loan application; and

the plurality of users comprises an applicant, a loan account officer, and a manager.

20. An authentication system as recited in claim 18 , in which:

the controlled data is associated with a prescription; and

the plurality of users comprises a prescription requestor and a medical provider.