Method and system for user-controlled, strong third-party-mediated authentication
First Claim
1. A user-authentication service comprising:
- stored user-authentication policies specified by users;
user information;
account-interface routines that implement an account interface by which users may specify, modify, add, and delete user-authentication policies; and
authentication-interface routines that implement an authentication interface by which authentication-service clients can submit authentication requests to authenticate users.
2 Assignments
0 Petitions
Accused Products
Abstract
Various embodiments of the present invention provide strong authentication of users on behalf of commercial entities and other parties to electronic transactions. In these embodiments of the present invention, a user interacts with an authentication service provider to establish policies for subsequent authentication of the user. Thus, in these embodiments of the present invention, a user controls the level and complexity of authentication processes carried out by the authentication service provider on behalf of both the user and commercial entities and other entities seeking to authenticate the user in the course of conducting electronic transactions, electronic dialogues, and other interactions for which user authentication is needed. The policies specified by a user may include specification of variable-factor authentication, in which the user, during the course of an authentication, provides both secret information as well as evidence of control of a tangible object.
15 Citations
1 Claim
-
1. A user-authentication service comprising:
-
stored user-authentication policies specified by users;
user information;
account-interface routines that implement an account interface by which users may specify, modify, add, and delete user-authentication policies; and
authentication-interface routines that implement an authentication interface by which authentication-service clients can submit authentication requests to authenticate users.
-
Specification
-
- Resources
-
Current AssigneeSmart Authentication IP, LLC (Dominion Harbor Enterprises, LLC)
-
Original AssigneeJarlath Lyons
-
InventorsLyons, Jarlath
-
Granted Patent
-
Time in Patent OfficeDays
-
Field of Search
-
US Class Current705/44
-
CPC Class CodesG06F 21/33 using certificatesG06Q 20/02 involving a neutral party, ...G06Q 20/3674 involving authenticationG06Q 20/382 insuring higher security of...G06Q 20/40 Authorisation, e.g. identif...G06Q 30/00 CommerceG06Q 30/02 Marketing; Price estimation...H04L 63/20 for managing network securi...H04L 63/205 involving negotiation or de...
