IP Library Granted Patent US 11,558,369
Granted Patent B1
US 11,558,369 · App. 17/212,232 · Granted Jan 17, 2023

Multiple-factor authentication

Inventor: Zhishen Liu (Campbell, CA)
Assignee: 8x8, Inc.
H04L63/083H04L65/1046H04L65/1069H04L67/02H04L67/306H04M15/56H04M15/8207H04L2463/082H04M7/0024H04M7/0078H04M2203/6045H04M2215/78
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,558,369
App. No.
17/212,232
Granted
Jan 17, 2023
Kind
B1
Abstract

One example involves a communications server providing communications services to remotely-situated client entities, wherein each client entity is associated with users and each user is associated with a communication device. The server may verify a first authentication factor for a user among the users, and generate a communication request that includes a first portion specifying at least one target endpoint associated with the user and a second portion associated with or indicating the security code and that includes a set of instructions which: are specific to the user, which specify how to communicate the security code for the user, and which specify different security codes for different types of communications. Via the server, the security code is sent to the user according to the set of instructions, and verified via a second authentication factor associated with or for the user by comparing input from the user to the security code.

Claims (27)

1. A method comprising:

using a data communications server including at least one processor circuit to provide data communications services and to verify a first authentication factor for a user among a plurality of users of the data communications server;

generating, using the data communications server, a communication request that includes a first portion specifying at least one target endpoint associated with the user and a second portion associated with or indicating a security code and includes a set of instructions which: are specific to the user, which specify how to communicate the security code, and which specify different security codes for different types of communications;

transmitting the security code to the user, by the data communications server, according to the set of instructions; and

verifying, via the data communications server, a second authentication factor associated with or for the user by comparing input from the user to the security code.

2. The method of claim 1 , wherein the set of instructions include or represent audio prompts and menu options provided in response to verifying the first authentication factor.

3. The method of claim 1 , wherein the set of instructions include a conditional statement with a conditional operator that includes a database query to identify the security code.

4. The method of claim 3 , wherein the database query is to a database maintained by a provider of the data communications server.

5. The method of claim 1 , wherein the set of instructions include an identifier of the target endpoint.

6. The method of claim 1 , wherein the communication request is an HTTP request that includes a Uniform Resource Identifier (URI) link, and wherein the set of instructions include the security code.

7. The method of claim 1 , wherein the set of instructions include a command that requests fraud monitoring services based upon or in response to communication summary metrics by the data communications server detecting a frequency of multi-factor authentication requests for the target endpoint that is greater than a threshold frequency in a particular period of time.

8. The method of claim 1 , wherein the communication request is a Uniform Resource Identifier (URI) link.

9. The method of claim 1 , wherein the set of instructions specifying how to communicate the security code include executable code to direct the data communications server on how to communicate the security code to the user.

10. The method of claim 1 , wherein the communication request is a Uniform Resource Identifier (URI) link, and wherein the set of instructions specifying how to communicate the security code include executable code to direct the data communications server on how to communicate the security code to the user.

11. The method of claim 1 , wherein the first authentication factor includes a user name and password received through a web interface, wherein the set of instructions include code executable by the data communications server.

12. The method of claim 1 , wherein the communication request includes a Uniform Resource Identifier (URI) link and includes the first portion and the second portion, wherein the first portion and the second portion include executable code and are provided or input by an application programming interface.

13. The method of claim 1 , wherein the first authentication factor includes a user name and password received through a web interface.

14. The method of claim 1 , wherein the communication request is an HTTP request that includes a Uniform Resource Identifier (URI) link, wherein the communication request includes an identifier of the target endpoint and does not include the security code.

15. The method of claim 1 , wherein the first portion includes a telephone number, and the second portion includes an identifier directing the data communications server to a secure server that provides the security code.

16. The method of claim 1 , wherein the second portion is embedded in an HTTP request using a text-to-binary format and the method further includes requesting the security code from a secure server using data in the set of instructions.

17. The method of claim 1 , wherein set of instructions include a command that requests fraud monitoring services associated with communication summary metrics.

18. A system comprising:

a data communications server to provide data communications services to a plurality of remotely-situated client entities, wherein each respective client entity includes a plurality of users each associated with a respective data communication device and said respective data communication device including circuitry to use the data communications services, and wherein the data communications server includes at least one processor circuit to provide the data communications services and to verify a first authentication factor for a user among the plurality of users;

data processing circuitry, integrated with the data communications server, to:

generate a communication request that includes a first portion specifying at least one target endpoint associated with the user and a second portion associated with or indicating a security code and that includes a set of instructions which: are specific to the user, which specify how to communicate the security code, and which specify different security codes for different types of communications;

send the security code to the user according to the set of instructions; and

verify a second authentication factor associated with or for the user by comparing input from the user to the security code.

Assignments (5)
SECURITY INTEREST Recorded Aug 5, 2024
From: 8X8, INC.
To: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
Reel/Frame 068327/0819 →
RELEASE OF SECURITY INTEREST Recorded Aug 5, 2024
From: WILMINGTON SAVINGS FUND SOCIETY, FSB
To: 8X8, INC.; FUZE, INC.
Reel/Frame 068328/0569 →
CORRECTIVE ASSIGNMENT TO CORRECT THE PROPERTY NUMBERS SECTION TO REMOVE APPLICATION NUMBERS 11265423, 11252205, 11240370, 11252276, AND 11297182 PREVIOUSLY RECORDED ON REEL 061085 FRAME 0861. ASSIGNOR(S) HEREBY CONFIRMS THE INTELLECTUAL PROPERTY SECURITY AGREEMENT. Recorded Jan 26, 2024
From: 8X8, INC.; FUZE, INC.
To: WILMINGTON SAVINGS FUND SOCIETY, FSB
Reel/Frame 066383/0936 →
INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Aug 5, 2022
From: 8X8, INC.; FUZE, INC.
To: WILMINGTON SAVINGS FUND SOCIETY, FSB
Reel/Frame 061085/0861 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 25, 2021
From: LIU, ZHISHEN
To: 8X8, INC.
Reel/Frame 055716/0678 →