System and method for passwordless logins
A login system allows users to access computer systems without using a password. The passwordless system and method can use other information to securely and reliably identify true authorized system users. The identity of a user can be associated with their mobile device. The login can be based upon a minimal amount of information such as a name and a phone number which can be stored as an identification record for each of the users in a database.
1. A method for a passwordless login to an internet based system that includes a server, a database and a smart phone in communication with the server through a network, the method comprising:
receiving, at the server, a transmission from the smart phone including only a phone number for the smart phone associated with a user without any password;
recognizing, by the server, the phone number for the smart phone during a login of the user by determining whether the phone number has a matching phone number stored in a registered user database;
transmitting, by the server, a verification message that includes a unique randomly generated verification code to the phone number of the smart phone;
receiving, by the server, a confirmation message transmitted from the smart phone including the verification code to authenticate the user during the passwordless login of the user;
binding, by the server, identification information for the smart phone to the user during the passwordless login of the user responsive to receipt of the verification code; and
authorizing, by the server, the user and the smart phone to interact with the server.
2. The method of claim 1 , wherein the verification message includes a push notification sent to the smartphone, and wherein the push notification interacts with an app installed on the smart phone.
3. The method of claim 1 , wherein the verification message includes one of:
a CAPTCHA for a user to enter into a web form on the device being verified, or
a phone call made to the phone that plays an audio signal of a verification code.
4. The method of claim 1 , wherein the verification message is a short message service (SMS) or text message.
5. The method of claim 1 , wherein the verification code is part of a hyperlink transmitted to the smart phone and wherein the hyperlink includes the verification code that is a randomly generated sequence of characters that is at least five characters long.
6. The method of claim 5 , wherein the verification code includes at least one upper case letter and at least one lower case letter.
7. The method of claim 1 , wherein the receiving the confirmation occurs within a predetermined time from the transmitting the verification message.
8. The method of claim 1 , wherein responsive to the phone number not having the matching phone number stored in the registered user database, the user is prompted to register the phone number via a selected registration process.
9. The method of claim 8 , wherein the selected registration process is a manual registration process or an automatic registration process.
10. The method of claim 1 , wherein responsive to authorizing the user to interact with the server, the user is enabled to purchase one or more products via selected payment option associated with an account of the user.
11. A system for conducting a passwordless login comprising:
a server, a database and a smart phone in communication with the server through a network, the server being configured for:
receiving, at the server, a transmission from the smart phone including only a phone number for the smart phone associated with a user without any password;
recognizing, by the server, the phone number for the smart phone during a login of the user by determining whether the phone number has a matching phone number stored in a registered user database;
transmitting, by the server, a verification message that includes a unique randomly generated verification code to the phone number of the smart phone;
receiving, by the server, a confirmation message transmitted from the smart phone including the verification code to authenticate the user during the passwordless login of the user;
binding, by the server, identification information for the smart phone to the user during the passwordless login of the user responsive to receipt of the verification code; and
authorizing, by the server, the user and the smart phone to interact with the server.
12. The system of claim 11 , wherein the verification message includes a push notification sent to the smartphone, and wherein the push notification interacts with an app installed on the smart phone.
13. The system of claim 11 , wherein the verification message includes one of:
a CAPTCHA for a user to enter into a web form on the device being verified, or
a phone call made to the phone that plays an audio signal of a verification code.
14. The system of claim 11 , wherein the verification message is a short message service (SMS) or text message.
15. The system of claim 11 , wherein the verification code is part of a hyperlink transmitted to the smart phone and wherein the hyperlink includes the verification code that is a randomly generated sequence of characters that is at least five characters long.
16. The system of claim 15 , wherein the verification code includes at least one upper case letter and at least one lower case letter.
17. The system of claim 11 , wherein the receiving the confirmation occurs within a predetermined time from the transmitting the verification message.
18. The system of claim 11 , wherein responsive to the phone number not having the matching phone number stored in the registered user database, the user is prompted to register the phone number via a selected registration process.
19. The system of claim 18 , wherein the selected registration process is a manual registration process or an automatic registration process.
20. The system of claim 11 , wherein responsive to authorizing the user to interact with the server, the user is enabled to purchase one or more products via selected payment option associated with an account of the user.