Authentication Techniques Utilizing a Computing Device

摘要

A pre-registration procedure is utilized to create a user profile for a user of a multi-factor authentication (“MFA”) service. A client application installation procedure is utilized to install a client application on a computing device that is to be utilized as an authentication factor for the MFA service. A computing device enrollment procedure is utilized to enroll the computing device on which the client application was installed for the MFA service. A voice enrollment procedure is utilized to create a voice print for the user of the computing device that is to be utilized as an authentication factor for the MFA service. An authentication procedure is utilized to provide multi-factor authenticated access to a service, such as an online service that provides access to sensitive account information.

主权项

1. A method comprising:
creating, by an authentication server computer comprising a processor, a user profile for a user for a multi-factor authentication service, the user profile comprising personal data of the user and an authentication credential selected by the user; generating, by the authentication server computer, a notification message comprising a link containing a one-time use encrypted token that is used to initiate, upon selection, download and subsequent installation of a multi-factor authentication client application on a computing device; sending, by the authentication server computer, the notification message to the computing device; receiving, at the authentication server computer, a token from the computing device in response to the computing device receiving a selection of the link included in the notification message; determining, by the authentication server computer, if the token is valid by comparing the token to the one-time use encrypted token contained in the link included in the notification message; and in response to determining that the token is valid,
validating, by the authentication server computer, the multi-factor authentication client application that has been downloaded to and installed on the computing device,validating, by the authentication server computer, the computing device and saving a device identifier of the computing device to the user profile if the device identifier was not previously added to the user profile during creation of the user profile, andcreating, by the authentication server computer, a voice print for the user and saving the voice print in association with the user profile, the voice print being created by collecting data from the user.