SYSTEMS AND METHODS FOR AUTHENTICATION USING AUTHENTICATION MANAGEMENT SERVER AND DEVICE APPLICATION
Methods and systems are provided for authenticating a user with a service provider by implementing an independent authentication management server along with its accompanying cross-platform device application installed on a user's device which provides, among other things, a secure and seamless exchange of sensitive data between a user and the service provider. An authentication management server system may further create, store, and manage a user's sensitive data and securely manage exchange of various requests and corresponding approvals between a user and the service provider. A method for authentication of a user to a service provider, the method being performed by an authentication management server system, include receiving a request from a service provider for a user's password, other personal information, an approval to take specific actions, or an approval to register a new device; transmitting the request to one or more registered devices of the user; and transmitting the user's corresponding approval to the service provider upon the user's approval. The systems and methods of the present disclosure supplements or eliminates the need for a typical password-based authentication process and multi-factor authentication methods.
1 . A method for authentication of a user to a service provider, the method being performed by an authentication management server system, using one or more processors and comprising the following:
receiving a request for a user's password from a service provider;
transmitting the request to one or more registered devices of the user; and
transmitting the user's corresponding password to the service provider upon the user's approval.
2 . The method of claim 1 , wherein the methods for a service provider to obtain the user's ID for transmittal to the authentication management server includes the user's manual or automatic entry of the ID on a device through an internet based service such as a website, remote network, a separate software application installed on a user's device, intranet based connection, or a specialized remote terminal.
3 . The method of claim 1 , wherein the methods for a service provider to obtain the user's ID for transmittal to the authentication management server further includes a user physically visiting its place of business, or dialing-in to an automated system or to a live customer service staff of a service provider and presenting the user ID for transmittal to the authentication management server.
4 . The method of claim 1 , wherein the user is required to enable the lock/unlock feature of the device by using the device's own biometric authentication process, password or pattern input, or any other means the user is able to set within the device.
5 . The method of claim 1 , wherein the request for an approval is pushed to the user's device display.
6 . The method of claim 1 , wherein the request for an approval expires within a certain limited time.
7 . The method of claim 1 , wherein unlocking the device is a prerequisite to reviewing and accessing the request for an approval.
8 . The method of claim 1 , wherein the same action by the user to unlock the device is required to approve a request whether the device is already unlocked or not.
9 . The method of claim 1 , wherein the request for approval contains an option module wherein the user is given multiple options including, “approve”, “reject/report”, or “more detail” to select from.
10 . The method of claim 6 , wherein one or more options in the option module allows the user to review and manage the request in detail.
11 . The method of claim 1 , wherein the authentication management server further performs the steps of:
confirming the ID provided by a service provider with its database to find the corresponding user of the ID and one or more registered devices of the user for transmittal;
verifying whether the database of the user contains a password for the requesting service provider;
retrieving a corresponding password for the requesting service provider from its database if the verification is successful; and
transmitting a request for an approval to one or more registered devices of the user.
12 . The method of claim 8 , wherein the authentication management server further performs the steps of:
notifying the user if the user's database does not contain a password specific to the requesting service provider;
providing the user with one or more methods for creating a new password for the requesting service provider on the device display; and
storing a new password on its database for the user for transmittal to the service provider upon creation of a password by the user.
13 . The method of claim 9 , wherein the methods for creating a password includes password random generation by the authentication management server or manual entry by the user.
14 . The method of claim 1 , wherein the user further preforms the steps of:
unlocking the device;
reviewing the request for a password on his device's display;
verifying whether the request is legitimate or not; and
taking any predetermined action on any of the registered devices to effectuate the approval.
15 . A method of authentication of a user for authorizing a specific action a service provider may take, the method being performed by an authentication management server system, using one or more processors and comprising:
receiving a request for an approval to take a specific action from a service provider;
transmitting the request for an approval to one or more registered devices of the user; and
transmitting the user's approval to the service provider upon the user's approval for completion of the requested action.
16 - 30 . (canceled)
31 . A method of claim for providing a service provider with the user's personal information, the method being performed by an authentication management server system, using one or more processors and comprising;
receiving a request for the information from a service provider;
transmitting a request for an approval to one or more registered devices of the user; and
transmitting the user's corresponding approval(s) to the service provider upon the user's approval.
32 - 53 . (canceled)