专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20230091318A1 SYSTEM AND METHOD FOR PRE-REGISTRATION OF FIDO AUTHENTICATORS 有权
公开(公告)号：US20230091318A1
公开(公告)日：2023-03-23
申请号：US17478512
申请日：2021-09-17
申请人： Nok Nok Labs, Inc.
发明人： Rolf Lindemann
IPC分类号： H04L29/06
摘要： A system, apparatus, method, and machine-readable medium are described for personalizing and pre-registering an authenticator. For example, one embodiment of a method comprising: confirming an identity of a user by a first relying party using a first identity verification technique responsive to the user performing a first transaction with the first relying party; generating or collecting initial user verification reference data (IUVRD) upon verifying the identity of the user through the first identity verification technique; requesting personalization of an authenticator; storing the IUVRD into the authenticator; generating, by the authenticator, Fast Identity Online (FIDO) credentials including a private and public key pair; storing the FIDO credentials in a secure storage of the authenticator; providing the public key to the first relying party; securely providing the authenticator to the user; and implementing a second identity verification technique by comparing the stored IUVRD to data collected from the user.

2. 发明授权

US10798087B2 Apparatus and method for implementing composite authenticators 有权
公开(公告)号：US10798087B2
公开(公告)日：2020-10-06
申请号：US15881522
申请日：2018-01-26
申请人： Nok Nok Labs, Inc.
发明人： Rolf Lindemann , Davit Baghdasaryan
IPC分类号： H04L29/06 , H04L9/00 , H04L9/32
摘要： A system, apparatus, method, and machine readable medium are described for implementing a composite authenticator. For example, an apparatus in accordance with one embodiment comprises: an authenticator for authenticating a user of the apparatus with a relying party, the authenticator comprising a plurality of authentication components; and component authentication logic to attest to the model and/or integrity of at least one authentication component to one or more of the other authentication components prior to allowing the authentication components to form the authenticator.

3. 发明授权

US10176310B2 System and method for privacy-enhanced data synchronization 有权
公开(公告)号：US10176310B2
公开(公告)日：2019-01-08
申请号：US14218743
申请日：2014-03-18
申请人： NOK NOK LABS, INC.
发明人： Davit Baghdasaryan
IPC分类号： G06F21/32 , G06Q20/40 , G06Q20/42 , H04L9/32 , H04L29/06 , H04L9/08 , G06F21/57 , G07F19/00 , G06Q20/20 , G06Q20/32 , H04W12/06
摘要： A system, apparatus, method, and machine readable medium are described for establishing a trust circle between multiple devices. For example, one embodiment of a method comprises: transmitting first data from a first device to a second device over a secure communication channel, the first data including at least one key and an identification code identifying a trust circle which includes the first device; the second device generating second data using at least a portion of the first data including the identification code and transmitting the second data over a network to a service; the first device connecting to the service using the identification code to identify the second data, validating the integrity of the second data, and responsively generating third data; and the service storing at least a portion of the second data and the third data to establish a trust relationship between the first device and the second device.

4. 发明申请

US20180241779A1 QUERY SYSTEM AND METHOD TO DETERMINE AUTHENTICATION CAPABILITIES 审中-公开
公开(公告)号：US20180241779A1
公开(公告)日：2018-08-23
申请号：US15954188
申请日：2018-04-16
申请人： NOK NOK LABS, INC.
发明人： Davit BAGHDASARYAN , Matthew LOURIE , Rolf LINDEMANN , Brendon J. WILSON , Marc BRICENO
IPC分类号： H04L29/06 , G06F17/30 , G06F21/45 , G06F21/34 , G06F21/32
CPC分类号： H04L63/20 , G06F16/9038 , G06F21/32 , G06F21/34 , G06F21/45 , G06F2221/2115 , G06F2221/2117 , H04L63/08 , H04L63/0853 , H04L63/0861 , H04L63/205
摘要： A system, apparatus, method, and machine-readable medium are described for determining the authentication capabilities. For example, one embodiment of a method comprises: receiving a policy identifying a set of acceptable authentication capabilities; determining a set of client authentication capabilities; and filtering the set of acceptable authentication capabilities based on the determined set of client authentication capabilities to arrive at a filtered set of one or more authentication capabilities for authenticating a user of the client.

5. 发明申请

US20180041503A1 AUTHENTICATION TECHNIQUES INCLUDING SPEECH AND/OR LIP MOVEMENT ANALYSIS 审中-公开
公开(公告)号：US20180041503A1
公开(公告)日：2018-02-08
申请号：US15229254
申请日：2016-08-05
申请人： NOK NOK LABS, INC.
发明人： Rolf Lindemann
IPC分类号： H04L29/06
CPC分类号： H04L63/0861 , H04L63/0435 , H04L63/0442 , H04L63/061 , H04L63/126 , H04L2463/082
摘要： A system, apparatus, method, and machine readable medium are described for attesting an authenticator. For example, one embodiment of an apparatus comprises: a processor to execute an app; and an authenticator to generate a first authentication key and to securely store the first authentication key, the authenticator to generate an attestation object usable by a relying party to confirm authenticity of the authenticator, the attestation object including a first component provided by the authenticator, a second component provided by the app, and a signature generated by the first authentication key over a combination of the first and second components.

6. 发明申请

US20180039990A1 AUTHENTICATION TECHNIQUES INCLUDING SPEECH AND/OR LIP MOVEMENT ANALYSIS 审中-公开
公开(公告)号：US20180039990A1
公开(公告)日：2018-02-08
申请号：US15229233
申请日：2016-08-05
申请人： NOK NOK LABS, INC.
发明人： Rolf Lindemann
IPC分类号： G06Q20/40 , G06F21/32 , G06K9/00 , G10L17/06 , G10L17/04 , G10L15/25 , H04L29/06 , G10L17/24
摘要： A system, apparatus, method, and machine readable medium are described for performing eye tracking during authentication. For example, one embodiment of a method comprises: receiving a request to authenticate a user; presenting one or more screen layouts to the user; capturing a sequence of images which include the user's eyes as the one or more screen layouts are displayed; and (a) performing eye movement detection across the sequence of images to identify a correlation between motion of the user's eyes as the one or more screen layouts are presented and an expected motion of the user's eyes as the one or more screen layouts are presented and/or (b) measuring the eye's pupil size to identify a correlation between the effective light intensity of the screen and its effect on the user's eye pupil size; capturing audio of the user's voice; and performing voice recognition techniques to determine a correlation between the captured audio of the user's voice and one or more voice prints.

7. 发明申请

US20170109751A1 SYSTEM AND METHOD FOR CARRYING STRONG AUTHENTICATION EVENTS OVER DIFFERENT CHANNELS 审中-公开
公开(公告)号：US20170109751A1
公开(公告)日：2017-04-20
申请号：US14268563
申请日：2014-05-02
申请人： NOK NOK LABS, INC.
发明人： Phillip Dunkelberger , Rolf Lindemann
IPC分类号： G06Q20/40
CPC分类号： G06Q20/4014 , G06F21/335 , H04L9/3226 , H04L9/3228 , H04L9/3231 , H04L9/3247 , H04L63/0807 , H04L63/205
摘要： A system, apparatus, method, and machine readable medium are described for performing authentication over multiple channels. For example, one embodiment of a method comprises: performing authentication over a network with an authentication service to authenticate a client; responsively generating a token at the authentication service, the token including identification information for the client, a service, and a type of authenticator used for the authentication, the token further including verification data; transmitting the token to the client; transmitting the token from the client to the service, the service using the verification data to verify the token and allowing one or more transactions with the client in accordance with a policy based, at least in part, on the type of authenticator used for the authentication.

8. 发明申请

US20170109509A1 SYSTEM AND METHOD FOR PERFORMING AUTHENTICATION USING DATA ANALYTICS 有权
公开(公告)号：US20170109509A1
公开(公告)日：2017-04-20
申请号：US14448868
申请日：2014-07-31
申请人： Nok Nok Labs, Inc.
发明人： Davit Baghdasaryan
IPC分类号： G06F21/31 , H04L29/06 , G06F21/32
CPC分类号： G06F21/316 , G06F21/32 , G06Q20/22 , G06Q20/40 , H04L63/08
摘要： A system, apparatus, method, and machine readable medium are described for performing authentication using data analytics such as machine learning. For example, one embodiment of a method comprises: selecting a set of parameters related to user activity on a client device; receiving a request to authenticate the user for a current transaction; responsively calculating a distance between parameters associated with the current transaction and historical parameters from an existing dataset; determining a risk level associated with the current transaction based on the calculated distances between the parameters associated with the current transaction and the historical parameters; selecting one or more authentication techniques required to authenticate the user based on the risk level; performing the one or more authentication techniques to attempt to authenticate the user and generating an authentication result; and updating the historical parameters using the parameters associated with the current transaction and the authentication result.

9. 发明授权

US09450760B2 System and method for authenticating a client to a device 有权
标题翻译：用于将客户端认证到设备的系统和方法
公开(公告)号：US09450760B2
公开(公告)日：2016-09-20
申请号：US14448641
申请日：2014-07-31
申请人： NOK NOK LABS, INC.
发明人： Rolf Lindemann
IPC分类号： H04L9/32 , H04L29/06
CPC分类号： H04L9/3247 , G06F21/32 , G06F21/34 , G06F21/40 , H04L63/06 , H04L63/0823 , H04L63/0861
摘要： A system, apparatus, method, and machine readable medium are described for authenticating a client to a device. For example, one embodiment of a method comprises: registering an authenticator of a client with a relying party, the registration allowing a user of the client to remotely authenticate the user to the relying party over a network; generating a first authentication structure using at least a first authentication key associated with the authenticator and a signature generated with a first verification key; caching the first authentication structure on the client; providing a second verification key corresponding to the first verification key to a transaction device; performing an authentication transaction between the client and the transaction device in which the client generates a second authentication structure using a second authentication key associated with the first authentication key, the transaction device uses the second verification key to validate the signature on the first authentication structure and uses the first authentication key to validate the second authentication structure.
摘要翻译：描述了用于将客户端验证到设备的系统，装置，方法和机器可读介质。例如，一种方法的一个实施例包括：向依赖方注册客户端的认证者，所述注册允许客户端的用户通过网络将远端用户认证给依赖方; 使用至少与所述认证器相关联的第一认证密钥和使用第一验证密钥生成的签名来生成第一认证结构; 缓存客户端上的第一个认证结构; 向交易设备提供与所述第一验证密钥对应的第二验证密钥; 在客户机和交易设备之间执行认证交易，其中客户端使用与第一认证密钥相关联的第二认证密钥生成第二认证结构，交易设备使用第二验证密钥来验证第一认证结构上的签名，使用第一认证密钥来验证第二认证结构。

10. 发明授权

US09219732B2 System and method for processing random challenges within an authentication framework 有权
标题翻译：在认证框架内处理随机挑战的系统和方法
公开(公告)号：US09219732B2
公开(公告)日：2015-12-22
申请号：US13730780
申请日：2012-12-28
申请人： NOK NOK LABS, INC.
发明人： Davit Baghdasaryan , Matthew Lourie , Brendon J. Wilson , Naga Nagarajan
IPC分类号： H04L29/06
CPC分类号： H04L63/0861
摘要： A system, apparatus, method, and machine readable medium are described for transparently requesting a new random challenge from a server within an authentication framework. For example, one embodiment of a method comprises: transmitting a random challenge and an indication of a timeout period associated with the random challenge from a server to a client within the context of a network registration or authentication process using authentication devices communicatively coupled to the client; automatically detecting that the random challenge is no longer valid based on the timeout period; and responsively transmitting a request for a new random challenge from the client to a server, wherein transmitting is performed transparently to a user of the client.
摘要翻译：描述了系统，装置，方法和机器可读介质，用于从认证框架内的服务器透明地请求新的随机挑战。例如，一种方法的一个实施例包括：使用通信地耦合到客户端的认证装置，在网络注册或认证过程的上下文中，从服务器向客户端发送随机询问和与随机挑战相关联的超时时段的指示 ; 根据超时时间自动检测出随机挑战不再有效; 并响应于从客户端向服务器发送新的随机挑战的请求，其中向客户端的用户透明地执行发送。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式