IP Library › Granted Patent US 11,386,427
Granted Patent B2
US 11,386,427 · App. 16/634,463 · Granted Jul 12, 2022

System for secure authentication of a user's identity in an electronic system for banking transactions

Inventor: Alessandro Capuzzello (Milan, IT)
Assignee: Krupteia SRL
G06Q20/401G06Q20/108G06Q20/3829H04L9/0643H04L9/0869H04L9/3239G06Q2220/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,386,427
App. No.
16/634,463
Granted
Jul 12, 2022
Kind
B2
Abstract

System for secure authentication of a user's identity in an electronic system for banking transactions, said system comprising at least one first user apparatus subject to said secure authentication, and one or more further apparatuses bidirectionally communicating with each other and with said first apparatus, characterized in that: said first apparatus (α) and a second apparatus (β), belonging to said one or more further apparatuses, comprise an equal system generating a random number (M1) composed of any number of digits, said random number (M1) being divided into a first part and, respectively, a second part (SGN, CSGN), which are complementary and subsets of said random number (M1); said first apparatus (α) comprises means for generating, through said generating system, said first part (SGN) and sending it to said second apparatus (β); said second apparatus (β) comprises means for generating, through said generating system, said second part (CSGN) via generation of one or more of said random number (M1), each one characterized by a corresponding first part (SGN′), and means for comparing said corresponding first part (SGN′) thus generated with said first part (SGN) received from said first apparatus (α), determining said second part (CSGN) associated with the corresponding first part (SGN′) equal to the first part (SGN) received, and means for sending said second part (CSGN) to said first apparatus (α), thereby attaining said secure authentication of the identity of a user associated with said first apparatus.

Claims (48)

1. A system for secure authentication of a user's identity in an electronic system for banking transactions, said system comprising at least one first user apparatus subject to said secure authentication, and one or more further apparatuses bidirectionally communicating with each other and with said first apparatus, wherein:

said first apparatus (α) comprises a first processor configured to generate a random number, divide the random number into a first part and a second part, which are complementary and subsets of said random number, and send the first part to a second apparatus (β);

said second apparatus (β) comprises a second processor configured to generate a random number by:

(a) generating a pseudo-random number between 0 and 0.4;

(b) determining, with said pseudo-random number, a number K n between 3.6 and 4;

(c) calculating an expression X n+1 =K*X n *(1−X n ), with an initial value of X n between 0 and 1;

(d) calculating one or more cryptographic non-invertible transformation functions (hash) of (Xn+1);

(e) dividing a result of the hash of X n+1 into a first part and a second part;

(f) comparing the first part computed by the second apparatus with the first part received from the first apparatus;

(g) determining whether the first part computed by the second apparatus matches the first part received from the first apparatus;

based on the first part computed by the second apparatus not matching the first part received from the first apparatus, repeating steps (c) through (g); and

based on the first part computed by the second apparatus matching the first part received from the first apparatus, sending the second part of the hash of X n+1 to the first apparatus,

thereby attaining said secure authentication of the identity of a user associated with said first apparatus.

2. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) that generates the random number is further configured to:

receive a random code and send it to said second apparatus (β), said random code being variable at every banking transaction and being suitable for being combined with said random number.

3. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) that generates the random number is further configured to:

receive a random code;

normalize the random code to a value between 0 and 1;

send the normalized random code to said second apparatus (β), said normalized random code being variable at every banking transaction; and

calculate a logic combination between said normalized random code and said expression X n+1 =K*X n *(1−X n ).

4. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) or said second processor of said second apparatus (β) that generates the random number is further configured to:

obtain a sum of said pseudo-random number and a user-specific secret number; and

iteratively calculate one or more cryptographic non-invertible transformation functions of said sum until said random number is determined.

5. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) or said second processor of said second apparatus (β) that generates the random number is further configured to:

receive a random code

obtain a sum of said random code and a user-specific secret number;

calculate a logic combination between said sum and said pseudo-random number; and

iteratively calculate one or more cryptographic non-invertible transformation functions of said logic combination in order to determine said random number.

6. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) or said second processor of said second apparatus (β) that generates the random number or further configured to:

receive a random code;

normalize said random code to a value between 0 and 1;

calculate a logic combination between said normalized random code, a result of said expression X n+1 =K*X n *(1−X n ), and a user-specific secret number; and

iteratively calculate the one or more cryptographic non-invertible transformation functions of said logic combination in order to determine said random number.

7. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) or said second processor of said second apparatus (β) that generate the random number is further configured to:

receive a random code;

obtain a sum of said random code and a user-specific secret number;

calculate a logic combination between said sum and said pseudo-random number, thereby obtaining said random number.

8. The system for secure authentication as in claim 1 , wherein said first processor of said first apparatus (α) or said second processor of said second apparatus (β) that generates the random number is further configured to:

receive a random code;

normalize said random code to a value between 0 and 0.4

determine, with said random code, the number Kn, which is between 3.6 and 4.

9. The system for secure authentication as in claim 1 , wherein said first part and, respectively, second part of the random number comprise any number of equal digits.

10. The system for secure authentication as in claim 1 , wherein said system further includes:

at least one payer user apparatus, at least one vendor user apparatus, a system and/or apparatus of a service provider for making a payment from said payer user apparatus to said vendor user apparatus;

wherein said at least one payer user apparatus is adapted to carry out the functions of said first apparatus (α), and in that said vendor user apparatus and/or said system and/or apparatus of a service provider are adapted to carry out the functions of said second apparatus (β).

11. The system for secure authentication as in claim 10 , wherein the system further includes an encryption system adapted to communicate said random number, said first and second parts and said random code in encrypted form.

12. The system for secure authentication as in claim 10 , wherein said system and/or apparatus of the service provider is adapted to generate a new user identity at every banking transaction, as a combination of said first and/or second parts and/or said random code with clear and/or confidential data of the user's identity, and to iteratively apply said cryptographic non-invertible transformation function to said combination at every banking transaction, connected to a preceding transaction.

13. The system for secure authentication as in claim 2 , wherein said random number, or a concatenation of said random number, is used as a symmetrical encryption key between said first apparatus (α) and said second apparatus (β) exchanging the random code over a secure communication channel.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 18, 2020
From: CAPUZZELLO, ALESSANDRO
To: KRUPTEIA SRL
Reel/Frame 051846/0864 →
Priority Claims (1)
IT 102017000087233 · Jul 28, 2017 · national
Continuity (1)
Related Publication 20200250670A1 · Aug 6, 2020