Direct authentication system and method via trusted authenticators
Systems and methods are provided for enabling online entities to determine whether a user is truly the person who he says using a “two-factor” authentication technique and authenticating customer's identity utilizing a trusted authenticator.
1. A method of enhancing authentication of a user attempting to access an online system via a computer network, the method comprising:
receiving by the online system, via the computer network, user-authentication information including a user-authentication code provided by an authentication system to the user via the computer network after an attempt by the user to access information of the online system, wherein:
the user-authentication code is information generated by the authentication system for authenticating the user,
the user-authentication code is configured to be valid for a predetermined time,
the user-authentication code is configured to become invalid after the predetermined time, and
the user-authentication code is configured to become invalid after a first use to authenticate the user;
providing by the online system, via the computer network, a user-authentication request to the authentication system, wherein the user-authentication request includes the user-authentication code and user-identification information of the user;
receiving by the online system, via the computer network, a response to the user-authentication request indicating whether the authentication system authenticated the user, wherein:
the user is authenticated using the user-authentication code and the user-identification information included in the authentication request,
the response to the user-authentication request confirms authentication of the user if the user-authentication code is valid, and
the response to the user-authentication request denies authentication of the user if the user-authentication code is invalid; and
providing by the online system, via the computer network, the user access to the information of the online system.
2. The method of claim 1 , wherein the user-authentication code is a SecureCode.
3. The method of claim 2 , wherein the SecureCode is comprised of alphabetic characters.
4. The method of claim 2 , wherein the SecureCode is a Personal Identification Number (PIN).
5. The method of claim 2 , wherein the SecureCode is comprised of numeric characters.
6. The method of claim 2 , wherein the online system is an online site.
7. The method of claim 1 , wherein the information of the online system comprises a restricted web site.
8. The method of claim 1 , wherein the information of the online system comprises online account information.
9. The method of claim 1 , wherein, after providing the user device with the access, the user-authentication code is invalid for all subsequent attempts to access information of the online system.
10. The method of claim 1 , wherein online system is an online site.
11. The method of claim 1 , wherein the user-authentication code is comprised of alphanumeric characters.
12. The method of claim 1 , wherein the authentication system sends the user-authentication code to the user via a private network or a public network.
13. The method of claim 1 , wherein the user-authentication code is variable and has different value each time the user receives it.
14. The method of claim 1 , wherein the computer network is a private network or a public network.
15. The method of claim 1 , wherein the user-authentication code includes different, non-repeating values each time the user receives it.
16. A system for enhancing authentication of a user attempting to access an online system via a computer network, the system comprising one or more computing devices configured to perform operations comprising:
receiving by the online system, via the computer network, user-authentication information including a user-authentication code provided by an authentication system to the user via the computer network after an attempt by the user to access information of the online system, wherein:
the user-authentication code is information generated by the authentication system for authenticating the user,
the user-authentication code is configured to be valid for a predetermined time,
the user-authentication code is configured to become invalid after the predetermined time, and
the user-authentication code is configured to become invalid after a first use to authenticate the user;
providing by the online system, via the computer network, a user-authentication request to the authentication system, wherein the user-authentication request includes the user-authentication code and user-identification information of the user;
receiving by the online system, via the computer network, a response to the user-authentication request indicating whether the authentication system authenticated the user, wherein:
the user is authenticated using the user-authentication code and the user-identification information included in the authentication request,
the response to the user-authentication request confirms authentication of the user if the user-authentication code is valid, and
the response to the user-authentication request denies authentication of the user if the user-authentication code is invalid; and
providing by the online system, via the computer network, the user access to the information of the online system.
17. The system of claim 16 , wherein the user-authentication code is a SecureCode.
18. The system of claim 17 , wherein the SecureCode is comprised of alphabetic characters.
19. The system of claim 17 , wherein the SecureCode is a Personal Identification Number (PIN).
20. The system of claim 17 , wherein the SecureCode is comprised of numeric characters.
21. The system of claim 16 , wherein the information of the online system comprises a restricted web site.
22. The system of claim 16 , wherein the information of the online system comprises an online account of the user.
23. The system of claim 16 , wherein, after providing the user device with the access, the user-authentication code is invalid for all subsequent attempts to access information of the online system.
24. The system of claim 16 , wherein the user-authentication code is comprised of alphanumeric characters.
25. The system of claim 16 , wherein the computer network is a private network or a public network.
26. The system of claim 16 , wherein the authentication system sends the user-authentication code to the user via a private network or a public network.
27. The system of claim 16 , wherein the user-authentication code is variable and has different value each time the user receives it.
28. The system of claim 16 , wherein the user-authentication code is provided to the user from the authentication system via the computer network.
29. The system of claim 16 , wherein the online system is an online site.
30. The system of claim 16 , wherein the user-authentication code includes different, non-repeating values each time the user receives it.