System, Method And Computer Program Product For Authenticating A Client

Abstract

A system, method and computer program product are provided for authenticating a user. The method includes receiving, such as from an authenticator, a set of at least one label identifying at least one element of an authentication matrix. The authentication matrix includes a plurality of elements, each element capable of being identified by a label. Then, a passcode is formulated, such as by the client, based upon the element(s) identified by the received set of label(s). Thereafter, the client is authenticated based upon the formulated passcode, such as by the authenticator. The set of label(s) can be received, the passcode can be formulated, and the client can be authenticated a plurality of times. In such instances, to permit the passcode to dynamically change, each set of label(s) received can differ from each previously received set of label(s).

1 . A system for authenticating a client comprising:
 an authenticator capable of sending, to the client, a set of at least one label identifying at least one element of an authentication matrix, the authentication matrix including a plurality of elements, each element capable of being identified by a label, wherein the authenticator is capable of receiving a passcode from the client formulated based upon the at least one element identified by the received set of at least one label, and wherein the authenticator is capable of authenticating the client based upon the formulated passcode.   
     
     
         2 . A system according to  claim 1 , wherein the authenticator is capable of sending a set of at least one label, receiving a formulated passcode and authenticating the client a plurality of times, and wherein the authenticator is capable of sending each set of at least one label such that the sent set of at least one label differs from each previously sent set of at least one label. 
     
     
         3 . A system according to  claim 1 , wherein the authenticator is capable of communicating with a passcode generator, wherein the passcode generator is capable of generating a passcode based upon at least one element selected from the authentication matrix, wherein the authenticator is capable of sending a set of at least one label identifying the selected at least one element, and wherein the authenticator is capable of authenticating the client further based upon the generated passcode. 
     
     
         4 . A system according to  claim 3 , wherein the authenticator includes a database capable of storing an authentication matrix, wherein the authenticator is capable of providing an authentication matrix to the client, wherein the passcode generator is capable of generating a passcode based upon at least one element selected from the authentication matrix stored in the database, and wherein the authenticator is capable of receiving a passcode formulated based upon at least one element of the authentication matrix provided to the client corresponding to the at least one element selected from the authentication matrix stored in the database. 
     
     
         5 . A system according to  claim 4 , wherein the database of the authenticator is capable of storing a plurality of authentication matrices, each authentication matrix associated with a different client, wherein the authenticator is capable of providing, to the client being authenticated, an authentication matrix associated with the respective client, and wherein the passcode generator is capable of generating a passcode based upon at least one element selected from the authentication matrix stored in the database and associated with the respective client. 
     
     
         6 . A system according to  claim 5 , wherein the authenticator is capable of receiving at least one piece of identifying information associated with the client being authenticated, and thereafter identifying, from the plurality of authentication matrices stored in the database, the authentication matrix associated with the client being authenticated based upon the at least one piece of identifying information, and wherein the passcode generator is capable of generating a passcode based upon at least one element selected from the identified authentication matrix. 
     
     
         7 . A system according to  claim 3 , wherein the passcode generator is capable of generating a passcode further based upon a personal identification number (PIN) associated with the client, and wherein the authenticator is capable of receiving a passcode formulated further based upon the PIN. 
     
     
         8 . A system according to  claim 7 , wherein the passcode generator is capable of generating a passcode including at least one element selected from the authentication matrix and the PIN in a predefined position with respect to the selected at least one element, wherein the authenticator is capable of receiving a passcode formulated to include the identified at least one element and the PIN in the predefined position with respect to the identified at least one element, and wherein the authenticator is capable of authenticating the client by identifying a match between the generated passcode and the formulated passcode. 
     
     
         9 . A system comprising:
 a client capable of receiving a set of at least one label identifying at least one element of an authentication matrix, the authentication matrix including a plurality of elements, each element capable of being identified by a label, wherein the client is capable of formulating a passcode based upon the at least one element identified by the received set of at least one label such that the client is capable of being authenticated based upon the formulated passcode.   
     
     
         10 . A system according to  claim 9 , wherein the client is capable of receiving the set of at least one label and formulating a passcode a plurality of times such that the client is capable of being authenticated a plurality of times, and wherein each set of at least one label received by the client differs from each set of at least one label previously received by the client. 
     
     
         11 . A system according to  claim 9 , wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the authentication matrix during generation of a passcode, and wherein the client is capable of formulating the passcode such that the client is capable of being authenticated further based upon the generated passcode. 
     
     
         12 . A system according to  claim 11 , wherein the client is capable of being provided with an authentication matrix from an authenticator capable of storing an authentication matrix, wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the authentication matrix stored by the authenticator, and wherein the client is capable of formulating a passcode based upon at least one element of the authentication matrix provided to the client corresponding to the at least one element selected from the authentication matrix stored by the authenticator. 
     
     
         13 . A system according to  claim 12 , wherein the client is capable of being provided with an authentication matrix associated with the respective client from an authenticator capable of storing a plurality of authentication matrices, each authentication matrix associated with a different client, and wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the authentication matrix stored by the authenticator and associated with the respective client. 
     
     
         14 . A system according to  claim 13 , wherein the client is capable of sending the authenticator at least one piece of identifying information associated with the respective client such that the authenticator is capable of identifying, from the plurality of authentication matrices, the authentication matrix associated with the respective client based upon the at least one piece of identifying information, and wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the identified authentication matrix. 
     
     
         15 . A system according to  claim 11 , wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the authentication matrix during generation of a passcode based upon a personal identification number (PIN) associated with the client, and wherein the client is capable of formulating a passcode further based upon the PIN. 
     
     
         16 . A system according to  claim 15 , wherein the client is capable of receiving a set of at least one label identifying at least one element selected from the authentication matrix during generation of a passcode including at least one element selected from the authentication matrix and the PIN in a predefined position with respect to the selected at least one element, wherein the client is capable of formulating a passcode including the identified at least one element and the PIN in the predefined position with respect to the identified at least one element such that the client is capable of being authenticated by identifying a match between the generated passcode and the formulated passcode. 
     
     
         17 . A method of authenticating a client comprising:
 receiving a set of at least one label identifying at least one element of an authentication matrix, the authentication matrix including a plurality of elements, each element capable of being identified by a label;   formulating a passcode based upon the at least one element identified by the received set of at least one label; and   authenticating the client based upon the formulated passcode.   
     
     
         18 . A method according to  claim 17 , wherein receiving a set of at least one label, formulating a passcode and authenticating the client occur a plurality of times, and wherein each received set of at least one label differs from each previously received set of at least one label. 
     
     
         19 . A method according to  claim 17  further comprising:
 generating a passcode based upon at least one element selected from the authentication matrix, 
 wherein receiving a set of at least one label comprises receiving a set of at least one label identifying the selected at least one element, and 
 wherein authenticating the client comprises authenticating the client further based upon the generated passcode. 
 
     
     
         20 . A method according to  claim 19  further comprising:
 providing an authentication matrix to an authenticator, and providing an authentication matrix to the client, 
 wherein generating a passcode comprises generating a passcode based upon at least one element selected from the authentication matrix provided to the authenticator, and 
 wherein formulating a passcode comprises formulating a passcode based upon at least one element of the authentication matrix provided to the client corresponding to the at least one element selected from the authentication matrix provided to the authenticator.