Method and apparatus for user authentication

Claim 2

In a system for providing user services electronically using a communications network, a method comprising the steps of: (a) entering a user's personal identification string of two or more characters; (b) determining a character position of the user's personal identification string; (c) generating a code; (d) combining the code with the user's personal identification string at the determined character position to generate a user identification code; and (e) transmitting the user identification code along with a user's service request over the communications network.

Claim 3

The method in claim 1, further comprising: encoding the user's personal identification string using one of the encoding algorithms to provide an encoded identification string, wherein step (d) combines the code with the encoded identification string.

Claim 4

The method in claim 2, further comprising: selecting a key corresponding to one of plural encoding algorithms, wherein the user's personal identification string is encoded using the encoding algorithm corresponding to the selected variable key.

Claim 5

The method in claim 2, wherein the encoding step includes encrypting the user's personal identification string using one of a plurality of encrypting algorithms corresponding to a selected variable key to provide an encrypted identification string.

Claim 6

The method in claim 1, wherein the character position is determined in step (b) using the entered user's personal identification string.

Claim 7

The method in claim 5, wherein the using step includes: counting a number of characters in the entered user's personal identification string to provide a count; summing the characters or values corresponding to the characters in the entered user's personal identification string to provide a sum; selecting a prime number based on the entered user's personal identification string; dividing the sum by the selected prime number resulting in a quotient and a remainder; and assigning the remainder as the character position if the remainder is less than the count, otherwise assigning a difference between the remainder and the count as the position character.

Claim 8

The method in claim 6, wherein the selecting step includes: comparing the count to a determined prime number; if the count exceeds the determined prime number, determining a succeeding prime number and repeating the comparing step; if the count is less than the determined prime number, using the determined prime number as the selected prime number.

Claim 9

The method in claim 1, wherein the characters may include numbers or alphabetic characters and wherein the alphabetic characters are converted from an ASCII code to a corresponding decimal value before summing.

Claim 10

The method in claim 1, wherein the user selects a length of the code and step (c) includes generating a pattern of characters randomly or pseudo-randomly.

Claim 11

The method in claim 1, wherein step (c) includes generating a pattern of characters randomly or pseudo-randomly and the pattern includes a variable number of characters that may vary each time step (a) is performed.

Claim 12

The method in claim 3, further comprising: converting the code to a code number; dividing the code number by a prime number corresponding to a security level; and selecting as the key a remainder of the dividing step.

Claim 13

The method in claim 3, wherein a user subscribes to a security level to be associated with a current request for service such that the subscribed security level is used in selecting the key.

Claim 14

The method in claim 12, wherein the security level corresponds to a number of encoding algorithms, a greater number of encoding algorithms corresponding to a higher security level.

Claim 15

The method in claim 13, wherein the security level further includes a level of sophistication of the encoding algorithms.

Claim 16

The method in claim 3, further comprising: restricting the selected key such that the selected key is not the same as a preceding selected key.

Claim 17

The method in claim 1, further comprising: permitting the user to enter a length of the code for a current service transaction to be generated in step (b).

Claim 18

The method in claim 2, wherein the combining step (d) includes: shifting the encoded user identification string by a number corresponding to the determined character position, and inserting the determined code in the encoded user identification string after shifting is completed.

Claim 19

The method in claim 1, further comprising the step of establishing a transaction timer during which a user must complete a transaction including steps (a)-(e), the transaction being automatically terminated at expiration of the transaction timer.

Claim 20

The method in claim 1, further comprising: after step (e), performing a request to change the user's personal identification string to a new user's personal identification string including: entering the new user's personal identification string and performing steps (c)-(e) to generate a new user identification code; reentering the new user's personal identification string and performing steps (c)-(e) to generate a reentered user identification code, wherein if the new and reentered user identification codes match, the user's personal identification string is changed to the new user personal identification string.

Claim 21

A user service requesting device for permitting a user to request user services electronically over a communications network, comprising: a keypad for entering a request for a particular user service and a user's personal identification string; a memory for storing a user authentication program and plural encoding algorithms; data processing circuitry for performing the steps of: (a) determining a character position of the user's personal identification string; (b) generating a code; (c) encoding the user's personal identification string using one of the encoding algorithms to provide an encoded identification string; and (d) combining the code with the encoded identification string at the determined character position to generate a user identification code; and communications circuitry for providing the user identification code along with the user's service request to the communications network.

Claim 22

A user service requesting device for permitting a user to request user services electronically over a communications network, comprising: a keypad for entering a request for a particular user service and a user's personal identification string; a memory for storing a user authentication program and plural encoding algorithms; data processing circuitry for performing the steps of: (a) determining a character position of the user's personal identification string; (b) generating a code; (c) encoding the user's personal identification string using one of the encoding algorithms to provide an encoded identification string; and (d) combining the code with the encoded identification string at the determined character position to generate a user identification code; and communications circuitry for providing the user identification code along with the user's service request to the communications network.

Claim 23

The device in claim 20, wherein the data processing circuitry further selects a variable key corresponding to one of plural encoding algorithms, wherein the user's personal identification string is encoded using the encoding algorithm corresponding to the selected variable key.

Claim 24

The device in claim 20, wherein the character position is determined using the entered user's personal identification string.

Claim 25

The device in claim 20, wherein the data processing circuitry further performs the steps of: counting a number of characters in the entered user's personal identification string to provide a count; summing the characters or values corresponding to the characters in the entered user's personal identification string to provide a sum; selecting a prime number based on the entered user's personal identification string; dividing the sum by the selected prime number resulting in a quotient and a remainder; and assigning the remainder as the character position if the remainder is less than the count, otherwise assigning a difference between the remainder and the count as the position character.

Claim 26

The device in claim 20, further comprising a number generator for generating a pattern of characters randomly or pseudo-randomly.

Claim 27

The device in claim 20, wherein the data processing circuitry further performs the steps of: converting the code to a number; dividing the code by a prime number corresponding to a security level; and selecting as the key a division remainder.

Claim 28

The device in claim 21, further comprising: restricting the selected key such that the selected key is not the same as a preceding selected key.

Claim 29

The device in claim 20, wherein the data processing circuitry further performs the steps of: shifting the encoded user identification string by a number corresponding to the determined character position, and inserting the determined code in the encoded user identification string after shifting is completed.

Claim 30

The device in claim 20, wherein when the user desires to change the user's personal identification string, the user enters a new user's personal identification string and the data processing circuitry performs steps (b)-(d) to generate a new user identification code; and the user reenters the new user's personal identification string and the data processing circuitry performs steps (b)-(d) to generate a reentered user identification code, wherein if the new and reentered user identification codes match, the user's personal identification string is changed to the new user personal identification string.

Claim 31

A user authentication service for authenticating an identity of a user requesting a service over a communications network, comprising the steps of: (a) storing for each of a plurality of subscribers a subscriber identification number along with a corresponding personal identification character string; (b) receiving a request to authenticate an identity of a user requesting a service over a communications network and determining a subscriber identification number corresponding to the user; (c) prompting the user over the communications network to enter a personal identification character string and receiving an encoded character string; (d) determining a code length based on a difference between the retrieved string and the encoded string to provide a number of code characters; (e) determining a character position; (f) removing the number of code characters beginning at the determined character position leaving a reduced character string; (g) decoding the reduced character string using one of plural decoding algorithms to provide a user entered personal identification character string; and (h) comparing the user entered character string with the stored character string corresponding to the determined subscriber identification number.

Claim 32

A user authentication service for authenticating an identity of a user requesting a service over a communications network, comprising the steps of: (a) storing for each of a plurality of subscribers a subscriber identification number along with a corresponding personal identification character string; (b) receiving a request to authenticate an identity of a user requesting a service over a communications network and determining a subscriber identification number corresponding to the user; (c) prompting the user over the communications network to enter a personal identification character string and receiving an encoded character string; (d) determining a code length based on a difference between the retrieved string and the encoded string to provide a number of code characters; (e) determining a character position; (f) removing the number of code characters beginning at the determined character position leaving a reduced character string; (g) decoding the reduced character string using one of plural decoding algorithms to provide a user entered personal identification character string; and (h) comparing the user entered character string with the stored character string corresponding to the determined subscriber identification number.

Claim 33

The user authentication service according to claim 29, further comprising: determining a number of occurrences where the user entered character string is not the same as the stored character string, and reporting the number of occurrences each time the user authentication service is requested.

Claim 34

The user authentication service according to claim 30, wherein the number of occurrences is reported to the user before the prompting step as a number of potentially fraudulent and unsuccessful attempts to enter an authenticate personal identification character string.

Claim 35

The user authentication service according to claim 29, further comprising: determining a number of occurrences where the user entered character string is not the same as the retrieved character string; terminating the service request transaction when the number of occurrences exceeds a predetermined value.

Claim 36

The user authentication service according to claim 32, wherein the terminating step includes resetting the code length and the character position to zero.

Claim 37

The user authentication service according to claim 29, further comprising: (1) when the character strings compared in step (h) are the same, detecting a user request to change the user's current personal identification character string; (2) prompting the user to enter a second personal identification character string and receiving a second encoded character string; (3) removing the code length of characters beginning at the determined character position leaving a second reduced character string; (4) decoding the second reduced character string using a second one of plural decoding algorithms to provide a second user entered personal identification character string; (5) prompting the user to reenter the second personal identification character string and receiving a third encoded character string, (6) removing the code length of characters beginning at the determined character position leaving a third reduced character string; (7) decoding the third reduced character string using a third one of plural decoding algorithms to provide a third user entered personal identification character string; (8) registering the second personal identification character string as the user's new personal identification character string if the second and third user entered personal identification character strings decoded in steps (4) and (7) are the same.

Claim 38

The user authentication service in claim 34, further comprising: starting a timer after step (1), terminating a current user transaction to change the user's personal identification character string if the timer reaches a predetermined value.

Claim 39

The user authentication service in claim 29, further comprising: maintaining a database for plural subscribers including for each subscriber a subscriber identifier, a personal identification character string, and a security level, wherein the subscriber upon being authenticated may change the personal identification character string.

Claim 40

The user authentication service in claim 36, wherein the user authentication service includes a plurality of security levels, each security level corresponding to a level of sophistication of the encoding/decoding algorithms used to decode the user entered personal identification character string with higher levels corresponding to increasing sophistication, the subscriber being permitted to selectively subscribe to any of the security levels.

Claim 41

The user authentication service in claim 37, wherein each security level further includes a plurality of encoding/decoding algorithms divided into tiers, each tier includes a number of encoding/decoding algorithms with higher tiers having a larger number of encoding/decoding algorithms, the user being permitted to selectively subscribe to any of the tiers.

Claim 42

The user authentication service in claim 38, wherein upon initiation of a user request, the user authentication service retrieves the corresponding user's current security level and personal identification character string.

Claim 43

The user authentication service in claim 29, further comprising: selecting a key corresponding to one of plural encoding/decoding algorithms, wherein the user's personal identification string is decoded using one of the encoding/decoding algorithm corresponding to the selected variable key.

Claim 44

The user authentication service in claim 29, wherein the character position is determined using the user's personal identification string.

Claim 45

The user authentication service in claim 41, wherein the using step includes: counting a number of characters in the user's personal identification string to provide a count; summing the characters or values corresponding to the characters in the user's personal identification string to provide a sum; selecting a prime number based on the user's personal identification string; dividing the sum by the selected prime number resulting in a quotient and a remainder; and assigning the remainder as the character position if the remainder is less than the count, otherwise assigning a difference between the remainder and the count as the position character.

Claim 46

The user authentication service in claim 42, wherein the selecting step includes: comparing the count to a determined prime number; if the count exceeds the determined prime number, determining a succeeding prime number and repeating the comparing step; if the count is less than the determined prime number, using the determined prime number as the selected prime number.

Claim 47

The user authentication service in claim 29, wherein the number of code characters may vary each time step (c) is performed.

Claim 48

The user authentication service in claim 29, wherein the decoding step (g) further includes: converting the removed code characters into a code number; dividing the code number by a prime number corresponding to a security level; and selecting the one decoding algorithm using a remainder of the dividing step.

Claim 49

A user authentication service providing a user with a plurality of different security levels in conducting electronic service requests including for each security level one or more memories storing a plurality of encryption algorithms wherein the user selects a security level and a number of encryption algorithms from the plurality of encryption algorithms corresponding to the selected level.

Claim 50

A user authentication service providing a user with a plurality of different security levels in conducting electronic service requests including for each security level one or more memories storing a plurality of encryption algorithms wherein the user selects a security level and a number of encryption algorithms from the plurality of encryption algorithms corresponding to the selected level.

Claim 51

The user authentication service according to claim 46, wherein the greater the number of encryption algorithms selected, the greater the security.

Claim 52

The user authentication service according to claim 46, wherein different ones of the plurality of security levels include encryption algorithms of different sophistication such that selection of a security level having a greater degree of sophistication provides greater security.

Claim 55

The method in claim 49, further comprising: encrypting the personal identification string and inserting the random code between characters in the personal identification string in accordance with one of a plurality of encryption techniques.

Claim 58

The method in claim 49, wherein the position if generated using the entered identification string.

Claim 59

The method in claim 49, wherein the user selects for each entry of the personal identification string a length of the code.

Claim 60

The method in claim 49, wherein the code and character position where the code is inserted vary each time the personal identification string is entered.