Secure offline authentication

US9602284B1 · kind B1 · utility

Assignee

• Bank of America Corporation · US

Inventors

• Shankar Ramasubramanian Iyer · Plainsboro, US
• Maria Auxilia Dominique · Kendall Park, US
• Ankit Khandelwal · Damoh, IN
• Dhrumit Desai · Lawrenceville, US
• Navanith R. Keerthi · Lawrenceville, US
• Lavanya Tangutur · Bound Brook, US

Key dates

• Filing date: Sep 11, 2015
• Grant date: Mar 21, 2017
• Expiry date: Sep 16, 2035

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/083
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A user workstation stores a vendor identifier and encrypted data comprising a first string of randomized data, a second string of randomized data, and encrypted text, the encrypted text further comprising a first security answer. The user workstation receives credentials information and a second security answer. The user workstation then generates an encryption key. Further, the user workstation uses the encryption key to decrypt the encrypted text and extract the first security answer. Then, the user workstation compares the second security answer with the first security answer and authenticates the second username if the second security answer is the same as the first security answer.