IP Library › Granted Patent US 8,984,276
Granted Patent B2
US 8,984,276 · App. 13/492,126 · Granted Mar 17, 2015

System and method for device registration and authentication

Inventors: Glenn Benson (Newton, MA); Salvatore Richard Re (Westfield, NJ)
Assignee: JPMorgan Chase Bank, N.A.
H04L9/3231H04L9/3234H04L9/3247H04L63/08H04L2209/80H04L2463/062H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,984,276
App. No.
13/492,126
Granted
Mar 17, 2015
Kind
B2
Abstract

Systems and methods for device registration and authentication are disclosed. In one embodiment, a method for authentication of a device may include (1) receiving, at a mobile device, a first credential; (2) transmitting, over a network, the first credential to a server; (3) receiving, from the server, a first key and a first value, the first value comprising a receipt for the first credential; (4) receiving, at the mobile device, a data entry for a second credential; (5) generating, by a processor, a second key from the data entry; (6) retrieving, by the mobile device, a third credential using the first key and the second key; (7) signing, by the mobile device, the first value with the third credential; and (8) transmitting, over the network, the signed third value to the server.

Claims (67)

1. A method for authentication of a device, comprising:

receiving, at a mobile device, a first credential;

transmitting, over a network, the first credential to a server;

receiving, from the server, a first key and a first value;

receiving, at the mobile device, a data entry for a second credential;

generating, by a processor, a second key from the data entry;

retrieving, by the mobile device, a third credential using the first key and the second key;

signing, by the mobile device, the first value with the third credential; and

transmitting, over the network, the signed first value to the server.

2. The method of claim 1 , wherein the first credential comprises a biometric.

3. The method of claim 2 , wherein the biometric is a voice biometric.

4. The method of claim 1 , wherein the first credential comprises at least one of a value, a device footprint, and a geographic location for the device.

5. The method of claim 1 , wherein the first key is a symmetric key.

6. The method of claim 1 , wherein the second key is generated by applying a cryptographic hash function to the data entry.

7. The method of claim 1 , wherein the second key is an asymmetric key.

8. The method of claim 1 , wherein the third credential is encrypted with the second key, and further encrypted with the first key.

9. The method of claim 1 , wherein the third credential is an asymmetric key.

10. The method of claim 1 , wherein the second key is stored on one of removable memory, a fob, a token, and a USB device.

11. The method of claim 1 , further comprising:

encrypting the first credential before transmitting the first credential to the server.

12. The method of claim 1 , further comprising

generating, at the mobile device, a second value;

signing the second value with a device key; and

transmitting, to the server, the signed second value.

13. The method of claim 1 , wherein the first value comprises a receipt for the first credential.

14. The method of claim 1 , wherein the first value comprises a receipt for the first credential and at least one of a message digest for a transaction and a random number.

15. The method of claim 1 , wherein the first value comprises a string to invalidate a transaction signature.

16. The method of claim 1 , further comprising:

signing, by the mobile device, a second value with the third credential; and

transmitting, over the network, the signed second value to the server.

17. The method of claim 1 , wherein the first credential is used with a second server.

18. The method of claim 1 , wherein the third credential is used with a second server.

19. The method of claim 1 , wherein the first credential and the third credential are used with a second server.

20. The method of claim 1 , further comprising:

transmitting, over a second network, the first credential to a second server;

receiving, from the second server, a second server first key and a second server first value, the second server first value comprising a second server receipt for the first credential;

receiving, at the mobile device, a second data entry for a second server second credential;

generating, by the processor, a second server second key from the second data entry;

retrieving, by the mobile device, a second server third credential using the second server first key and the second server second key;

signing, by the mobile device, the second server first value with the second server third credential; and

transmitting, over the second network, the signed second server first value to the second server.

21. The method of claim 20 , wherein the first credential comprises a biometric.

22. The method of claim 20 , wherein the second server first key is a symmetric key, the second server second key is an asymmetric key, and the second server third credential is an asymmetric key.

23. The method of claim 1 , further comprising:

receiving, at the mobile device, a second server first credential;

transmitting, over a second network, the second server first credential to a second server;

receiving, from the second server, a second server first key and a second server first value, the second server first value comprising a receipt for the second server first credential;

receiving, at the mobile device, a second data entry for a second server second credential;

generating, by the processor, a second server second key from the second data entry;

retrieving, by the mobile device, a second server third credential using the second server first key and the second server second key;

signing, by the mobile device, the second server first value with the second server third credential; and

transmitting, over the second network, the signed second server first value to the second server.

24. The method of claim 23 , wherein the first credential and the second server first credential each comprise a biometric.

25. The method of claim 23 , wherein the first credential and the second server first credential are the same type of biometric.

26. The method of claim 25 , wherein the first credential and the second server first credential are both voice biometrics.

27. The method of claim 23 , wherein the second server first key is a symmetric key, the second server second key is an asymmetric key, and the second server third credential is an asymmetric key.

28. A method for authentication of a device, comprising:

receiving, at a mobile device, a first credential;

transmitting, over a network, the first credential to a server;

receiving, from the server, a first key and a first value comprising a receipt for the first credential;

receiving, at the mobile device, a data entry for a second credential;

generating, by a processor, a second key from the data entry;

retrieving, by the mobile device, a third credential using the first key and the second key;

signing, by the mobile device, the first value with the third credential; and

transmitting, over the network, the signed first value to the server.

29. The method of claim 28 , wherein the third credential is retrieved from a device that is separate from the mobile device.

30. The method of claim 28 , wherein the third credential is retrieved from one of a token, a fob, a memory card, and a USB device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 8, 2012
From: BENSON, GLENN; RE, SALVATORE RICHARD
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 028345/0262 →
Continuity (2)
Provisional Application 61585057 · Jan 10, 2012
Related Publication 20130179681A1 · Jul 11, 2013