Multichannel device utilizing a centralized out-of-band authentication system (cobas)

Abstract

A multichannel security system is disclosed, which system is for granting and denying access to a host computer in response to a demand from an access-seeking individual and computer. The access-seeker has a peripheral device operative within an authentication channel to communicate with the security system. The access-seeker initially presents identification and password data over an access channel which is intercepted and transmitted to the security computer. The security computer then communicates with the access-seeker. A biometric analyzer—a voice or fingerprint recognition device—operates upon instructions from the authentication program to analyze the monitored parameter of the individual. In the security computer, a comparator matches the biometric sample with stored data, and, upon obtaining a match, provides authentication. The security computer instructs the host computer to grant access and communicates the same to the access-seeker, whereupon access is initiated over the access channel.

1 - 20 . (canceled) 
     
     
         21 . Apparatus for granting and denying access to a host computer in a network environment, comprising:
 a host computer for receiving a request for access using a first communication channel; and   a security computer for receiving the request for access from the host computer and outputting a prompt using a second communication channel requesting a transmission of data once said request for access is verified,   wherein said security computer comprises a component for receiving the transmitted data and comparing said transmitted data to predetermined data, such that, depending on the comparison of the transmitted data and the predetermined data, said security computer outputs an instruction to the host computer to grant access to the host computer or deny access thereto.   
     
     
         22 . The apparatus of  claim 21 , wherein the first communication channel is the Internet and the second communication channel is a telephone network or a wireless network. 
     
     
         23 . The apparatus of  claim 21 , wherein the request for access received by the host computer is output by a user computer. 
     
     
         24 . The apparatus of  claim 21 , wherein the request for access includes user identification and validation of a corresponding password. 
     
     
         25 . The apparatus of  claim 21 , wherein the prompt requesting the transmission of data is output to a telephone or peripheral device. 
     
     
         26 . The apparatus of  claim 21 , wherein the security computer outputs the prompt requesting the transmission of data by dialing a telephone number corresponding to an originator of the request for access. 
     
     
         27 . The apparatus of  claim 21 , wherein the transmitted data is used by the security computer to verify the identity of an originator of the request for access. 
     
     
         28 . The apparatus of  claim 21 , wherein the prompt requesting the transmission of data is a request for biometric data and the transmitted data is the biometric data. 
     
     
         29 . The apparatus of  claim 21 , wherein the biometric data comprises fingerprint data. 
     
     
         30 . A software method, comprising the steps of:
 receiving a request at a first computer for access using a first communication channel; and   receiving the request for access from the first computer at a security computer, said security computer outputting a prompt using a second communication channel requesting a transmission of data once said request for access is verified,   wherein said security computer comprises a component for receiving the transmitted data and comparing said transmitted data to predetermined data, such that, depending on the comparison of the transmitted data and the predetermined data, said security computer outputs an instruction to the first computer to grant access to the software application or deny access thereto.   
     
     
         31 . The method of  claim 30 , wherein the first communication channel is the Internet and the second communication channel is a telephone network or a wireless network. 
     
     
         32 . The method of  claim 30 , wherein the request for access received by the first computer is output by a user computer. 
     
     
         33 . The method of  claim 30 , wherein the request for access includes user identification and validation of a corresponding password. 
     
     
         34 . The method of  claim 30 , wherein the prompt requesting the transmission of data is output to a telephone or peripheral device. 
     
     
         35 . The method of  claim 30 , wherein the security computer outputs the prompt requesting the transmission of data by dialing a telephone number corresponding to an originator of the request for access. 
     
     
         36 . The method of  claim 30 , wherein the transmitted data is used by the security computer to verify the identity of an originator of the request for access. 
     
     
         37 . Apparatus for granting and denying access to a software application running on a computer in a network environment, comprising:
 a first computer for receiving a request for access using a first communication channel; and   a security computer for receiving the request for access from the first computer and outputting a prompt using a second communication channel requesting a transmission of data once said request for access is verified,   wherein said security computer comprises a component for receiving the transmitted data and comparing said transmitted data to predetermined data, such that, depending on the comparison of the transmitted data and the predetermined data, said security computer outputs an instruction to the first computer to grant access to the software application or deny access thereto.   
     
     
         38 . The apparatus of  claim 37 , wherein the first communication channel is the Internet and the second communication channel is a telephone network or a wireless network. 
     
     
         39 . The apparatus of  claim 37 , wherein the request for access received by the first computer is output by a user computer. 
     
     
         40 . The apparatus of  claim 37 , wherein the request for access includes user identification and validation of a corresponding password. 
     
     
         41 . The apparatus of  claim 37 , wherein the prompt requesting the transmission of data is output to a telephone or peripheral device. 
     
     
         42 . The apparatus of  claim 37 , wherein the security computer outputs the prompt requesting the transmission of data by dialing a telephone number corresponding to an originator of the request for access. 
     
     
         43 . The apparatus of  claim 37 , wherein the transmitted data is used by the security computer to verify the identity of an originator of the request for access. 
     
     
         44 . The apparatus of  claim 37 , wherein the prompt requesting the transmission of data is a request for biometric data and the transmitted data is the biometric data.