Barclays Execution Services Limited

Barclays Bank Plc

Dermot Dwyer

Jeremy Goldstone

User Authentication A mobile user authentication application is operable to perform one or more of the following operations: &#x22c5;authenticate a user in a voice call to a telephony service, by passing an authentication code to the telephony service within the voice call [FIGS.]; &#x22c5;validate a user instruction during a secure messaging session [FIG.]; and &#x22c5;authenticate a user at a physical local service by obtaining a challenge code at that local service, validating the challenge code with a remote authentication service, obtain a confirmation code from the authentication service and presenting the confirmation code for validation at the local service [FIGS.and].

User authentication

A method of user authentication by an application () on a mobile telephony device () comprises authenticating the user by interaction with the application (), communicating with a remote authentication service () to receive a call identifier; and sending the call identifier within a telephone call to the remote telephony service (), by means of which the user is authenticated to the remote telephony service (). The mobile telephony device may receive a service code linked to the remote telephony service, and the call identifier may be based on this code. The service code may be captured or entered manually into the mobile device, or obtained from an application on the mobile device (), such as a mobile banking application. The call identifier may be hidden within the call using audio steganography. The authentication service () may link the user to a remote service account ID, which is sent to the remote server.

Growing community of inventors

High Peak, United Kingdom

Dermot Dwyer