Method and system for improved security utilizing location based services for authentication

摘要

An improved authentication method and system is provided where a user securely accesses a variety of target servers for online email, online banking, credit card purchases, ecommerce, brokerage services, corporate databases, and online content (movies, music and software). The method involves a bridge server performing authentication tasks that allow a user to access a server or a group of servers with multiple security levels. The method eliminates the need for the user to remember multiple usernames/passwords for each target server. The method also allows one bridge server and one set of security devices to be used to authenticate the user for multiple servers, thereby reducing security costs and increasing user convenience. A location-based password-ID generating device is also described for secure location-based access.

主权项

1. A device for location-based authentication of a user by an authenticating server, the device comprising:
a positioning module for determining a set of coordinates for the device; a memory; a unique secure seed stored in the memo the seed being synchronized with a seed stored on the authenticating server; a randomizer for generating a password based on the set of coordinates and the unique secure seed; a display for displaying the generated password, wherein the generated password is used by the user as one of a set of authentication information to send to the authentication server, wherein the user is authenticated only when the estimated set of coordinates are within a pre-determined threshold.