At&t Intellectual Property I, L.p.

Lucent Technologies Inc.

Alcatel Lucent

Oath Inc.

Provenance Asset Group LLC

Juan A Garay

Thomas Joseph Killian

Charles Douglas Blewett

Payman Mohassel

Andrea Giuseppe Forte

Evgene Vahlis

Simon Urbanek

Megan Blewett

Robert C Haarde

Yitzhak H Mandelbaum

Ilija Zeljkovic

David Gil

Eric Martin Zavesky

David Crawford Gibbon

Zhu Liu

Bjorn Markus Jakobsson

Gustavo De Los Reyes

Brian M Novack

Jay Gordon Wilpon

Amanda Joy Stent

Vladimir Y Kolesnikov

Hubert Rae McLellan, Jr

Jerry Birkes

Alton Drake, Ii

Robert J Andres

Gary Toretti

Trevor Jim

James Whitescarver

Carl B Pomerance

Semyon B Mizikovsky

Douglas M Nortz

Jessica Nicola Staddon

Milind Madhav Buddhikot

Scott Corey Miller

Luca Salgarelli

Lorenz Francis Huelsbergen

Avishai Wool

Mark W Altom

Jose′ Carlos Brustoloni

David Morris Kristol

Jose Carlos Brustoloni

David J Segelstein

Xiong Fan

Vladimir Kolesnikov

A server includes a key generator and an authenticator. The key generator is configured to receive a request for a first key from a worker device, to create the first key that is associated with a worker, and to transmit the first key to the worker device. The authenticator is in communication with the key generator, the authenticator is configured to receive a second key and identification details from a customer device, to transmit the identification details to the worker device, to receive acknowledgment of the identification details from the worker device, and to authenticate the second key and the identification details with the customer device.

System and method for providing a one-time key for identification

The present teaching relates to exchanging a key with a device. In one example, a secret value is generated. A message is transmitted to the device. The message includes information related to the secret value based on which the device is to create a cryptographic key. A visual code displayed on the device is captured. The visual code includes a first piece of information and a second piece of information. A key value is generated based on the first piece of information and the secret value. A test value is calculated based on the key value. It is determined whether the device is securely connected based on the test value.

Method and system for exchanging cryptographic keys with an unauthenticated device

Methods, non-transitory computer readable media and apparatuses for decrypting an image are disclosed. For example, a method captures a portion of an encrypted image and decrypts the portion of the image using a decryption key. The portion of the image contains partial information for an adjacent portion of the image. The method then displays the portion of the image that is decrypted and also displays the adjacent portion of the image using the partial information for the adjacent portion of the image. Another method includes capturing a first portion of an image that is encrypted using a first key and a second key, decrypting the first portion of the image using a first key and displaying the first portion of the image that is decrypted.

Method and apparatus for providing secure image encryption and decryption

The present teaching relates to adjustable one-time password (OTP) setup, sign-in, and verification. In one example, a first length of a signature is determined. The signature has been used previously by a first user to initially sign in a second device. A second length that is different from the first length is determined. A signing key is generated based at least partially on the second length. A new signature having the second length is generated based on the signing key. The new signature is provided to a second user so that the second user can input at least a portion of the new signature into the second device for a subsequent sign in. The verification key is generated based at least partially on the new signature. The new signature input by the second user into the second device is transmitted from the second device to the third device.

Method and system for digital signature-based adjustable one-time passwords

Methods of obtaining input on a physical input device are provided. A method includes superimposing an image of a virtual keypad over an image of a touchscreen keypad, wherein the virtual keypad device has a different layout than the touchscreen keypad, mapping a first input on the touchscreen keypad to a second input on the virtual keypad, wherein the second input is different from the first input, and displaying on the touchscreen keypad a visually encoded symbol that defines a mapping from the touchscreen keypad to the virtual keypad, wherein mapping the first input on the touchscreen keypad to the second input on the virtual keypad is performed in response to the visually encoded symbol.

Secure interactions involving superimposing image of a virtual keypad over image of a touchscreen keypad

A pre-registration procedure is utilized to create a user profile for a user of a multi-factor authentication ('MFA') service. A client application installation procedure is utilized to install a client application on a computing device that is to be utilized as an authentication factor for the MFA service. A computing device enrollment procedure is utilized to enroll the computing device on which the client application was installed for the MFA service. A voice enrollment procedure is utilized to create a voice print for the user of the computing device that is to be utilized as an authentication factor for the MFA service. An authentication procedure is utilized to provide multi-factor authenticated access to a service, such as an online service that provides access to sensitive account information.

Authentication techniques utilizing a computing device

Methods of obtaining input on a physical input device are provided. A virtual input device is superimposed over the physical input device. The virtual input device has a different layout than the physical input device, such that a first input on the physical input device is mapped to a different input on the virtual input device. In another aspect, methods of securing a transaction according include displaying a first input screen to a user, encrypting a scrambling key using a public key, the scrambling key defining a second input screen that has a different layout from the first input screen, transmitting the encrypted scrambling key to a user device, receiving an input from the user device, and mapping the input to the second input screen.

Secure interaction with input devices

The present disclosure relates to verifying transactions using user devices. A client device used to complete a transaction with a server computer. The client device communicates with a user device such as a smart phone, laptop computer, or other computing device. The user device communicates with the client device and a verification server via the out-of-band communication channel. The verification server receives two or more copies of session data associated with the transaction occurring between the client device and the server computer. One copy of the session data is received from the server computer and another copy of the session data is provided by the user device. The two copies of the session data are compared by the verification server or by the user device, and mismatches are reported as suspected malicious software attacks.

Verifying transactions using out-of-band devices

A method and apparatus are disclosed for evaluating the security of at least one client. An executable program is executed by the client being evaluated. A result is received from the executable program, and an evaluation of the result indicates whether the client has been corrupted. The executable program is one of a plurality of possible programs. The result may be evaluated based on an elapsed time between when the executable program is provided to the client and when the result is received. The executable program may include at least one function that writes to a memory of the client. A program blinding technique is also disclosed to generate executable programs.

Method and apparatus for software integrity protection using timed executable agents

Growing community of inventors

Guttenberg, NJ, United States of America

Juan A Garay