Constructive assembly and method for granting authorized acces to an internet service platform

The present invention relates to a constructive assembly and a method for granting authorized access to an Internet service platform that ensures the protection of personal data and databases remotely exploited.

From the present state of technics there were identified some solutions close to this such as: <ul id="ul0001" list-style="none"><li><patcit id="pcit0001" dnum="US6078908A"><text>US 6078908</text></patcit> Method for authorizing in data transmission systems</li><li><patcit id="pcit0002" dnum="US6078908A"><text>US patent 6078908</text></patcit> describes an assembly and a process focused on word processing, particularly transaction numbers that the user reads and types in their interaction with the computer terminal. There are no references temporal validity of the messages. There are identified the following disadvantages: <ul id="ul0002" list-style="bullet" compact="compact"><li>The procedure is initiated by the user by operating the terminal keyboard</li><li>The system cannot be operated by people with disabilities without additional human help</li><li>Messages can be relayed electronically (automatically by means of programs) in a time window uncontrollable by the system so that makes it possible to exploit the system by another person remote. The security risk is low, but the guarantee of user presence in front of the terminal cannot be ensured.</li></ul></li><li><patcit id="pcit0003" dnum="US20070107050A1"><text>US 20070107050A1</text></patcit> Simple two-factor authentication</li><li>The <patcit id="pcit0004" dnum="US20070107050A1"><text>US 20070107050A1</text></patcit> patent describes a procedure performed by processing the text alphanumeric codes, codes that the user reads from the display device WAP/WML and introduces them to the computer using the keyboard. There are no references temporal validity of the messages. There are identified the following disadvantages: <ul id="ul0003" list-style="bullet" compact="compact"><li>The procedure is initiated by the user by operating the terminal keyboard</li><li>The system cannot be operated by people with disabilities without additional human help</li><li>Messages can be relayed electronically (automatically by means of programs) in a time window uncontrollable by the system so that makes it possible to exploit the system by another person remote. The security risk is low, but the guarantee of user presence in front of the terminal cannot be ensured.</li></ul></li><li><patcit id="pcit0005" dnum="US8917826B2"><text>US 8917826B2</text></patcit> Detecting man-in-the-middle attacks in electronic transactions using prompts</li><li><patcit id="pcit0006" dnum="US8917826B2"><text>US Patent 8917826B2</text></patcit> describes a system and method for removing security risk "man in the middle". According to the patent, the system contains an interactive voice response phone subsystem (IVR). The user initiates the procedure at the terminal and then validates the access code with the IVR system via phone keys. There are identified the following disadvantages: <ul id="ul0004" list-style="bullet" compact="compact"><li>The procedure is performed by the user via the terminal keypad and phone keypad</li><li>The system cannot be operated by people with disabilities without additional human help</li><li>The resulting system it is complex using IVR telephone services.</li><li>At least one possible scenario in which the person that interacts with the phone system is not in front of the computer that displays the access code</li></ul></li></ul>

The technical problem solved by the invention is to provide an architecture constructive allowing authorized access of people with disabilities such as reduced memory capacity, physical disabilities - namely the inability to use keyboards, visually impaired, shortcomings coordination etc.

The method is based on the initiation of proceedings by the user through a terminal using automatic recognition technology of the user and does not require special skills of the user. The Internet terminal may use biometric recognition technologies (fingerprint, iris, facial fingerprint, voice recognition) or proximity card technologies (NFC, RFID proximity cards or similar devices: rings, bracelets, watches, etc.) for automatically transmitting the user identity.

The Internet terminal which initiated the procedure transmits the request to the services system that uses telephone services immediately indicating actions to be performed by the user during the call to the terminal. During the procedure the Internet terminal it is in sync with the services system. The proposed method and architecture design enables implementation in systems with low computing power, equipment compatible with the class of Internet of Things (loT). The whole proposed constructive architecture (the terminal, services system and the telecommunication equipment) can be implemented in a single device.

Constructive assembly and method for granting authorized access to an Internet service platform overcomes the disadvantages mentioned above in that the access of the user to the internet terminal (Di) it is initiated automatically by recognizing the user ID by the terminal using advanced technologies in this respect, in order to exploit the Internet services of a platform (SERVICE). Internet service platform comprises an authorization server (Da) that receives all access requests and permits access by the terminal internet (Di) after a validation of the user with a voice call using a communication device (DC) connected to the authorization server (Da) by private network of the platform (SERVICE) and to the telephone service (GSM). The authorization server (Da) sends voice instructions for some actions through the communication device (Dc) and telephone monitor (M) to the user (U) to be performed during the phone call at the Internet terminal (Di). if user actions are in accordance with the instructions designated then access is authorized, otherwise in all other cases access is denied.

Users (U) of Internet services platform (SERVICE) and the telephone service may be normal or people with physical disabilities or reduced ability to view or reduced memory capacity, seeking secure and fast authorized access to the service platform (SERVICE). Platform saves at the subscription moment in the authorization server (Da) telephone numbers and other personal data of the users.

The internet terminal (Di) to exploit web services platform (SERVICE), he shall act as the initiator of the request for access authorization and provide recognition of user identity using subsystems for automatically reading proximity cards, QR codes, biometric recognition (voice, face, iris, fingertip).

Internet authorization server (Da), component of services platform (SERVICE), receives requests for authorization and access and has access in the protected private network to databases and communication devices (Dc).

Communication device (Dc), component of the services platform (SERVICE) is connected to the protected private network and to the telephone service (GSM) and implements the voice modem technology.

Voice telephony terminal with monitor function (M) is connected and accessible through the telephone system (GSM) and can provide additional protection systems such as those implemented in systems like Android, Windows or iOS such as NFC card reader, biometric authentication, password, pin or gestures etc... Constructive assembly and method for granting authorized access to an Internet service platform is open for increased user comfort especially for disabled by using terminals that allow access to internet services by voice commands or gestures. Constructive assembly and method for granting authorized access to an Internet service platform is more secure and immune to mistakes caused by voice commands erroneous or gestures misinterpreted because the telephone call validation may be rejected so the authorization process is cancelled.

The entire constructive ensemble can be implemented in a single device, respectively terminal (Di), authorization server (Dc) and telecommunications equipment (Dc) can be implemented in a single unit for specialized local services with same two-factor authentication.

As the duration of a call is minimized without the need of IVR interaction, the use of telephone lines decreases so reducing the costs and the number of telephone lines required for implementation of the constructive assembly and method for granting authorized access to an Internet service platform.

The technologies for recognition of users may be based on biometric technologies such as fingerprint, facial, iris, voice or based on indirect recognition of users such as proximity card reader (NFC, RFID or similar devices: rings, bracelets, watches).

Method that consists in that the user initiates the authorization request by manipulating the Internet terminal that request authorization (Di), so the internet terminal determine the unique electronic identifier of the user.

The identification of the user (U) it is possible by using an alternative method. In the next phase the internet terminal (Di) transmits over the Internet a message to the server that authorizes (Da) which contains the user ID in the local database, in another step the user ID is recognized and the server that authorizes (Da) automatically generates a random set of pointers designating sounds and images, pointers that are simultaneously sent to the Internet terminal (Di) and to the communication device (Dc).

In another phase the communication device (Dc) initiates a telephone call to the monitor (M) of the user (U). Telephone network (GSM) informs the communication device (Dc) about the status of the call. In the same phase the internet terminal (Di) prepares a set of images to be displayed based on the received pointers. In another phase, due to the fact that the user (U) answered the voice call, prepared images are displayed on the terminal and the indicated sounds are played back by the monitor (M) from the communication device (Dc). In this phase, the user (U) acts in real time on the images based on the voice instructions played back by the telephone (M).

The server that authorize (Da) it is informed by the telephone network (GSM) through the communication device (Dc) about status of the call. If the call fails, the server that authorizes (Da) closes the procedure by refusing authorization and then informs the device that initiated the request (Di) about the rejected request. If the user (U) answers the call, the event is taken from the telephone network (GSM) through the communications device (Dc) by the server that authorize (Da). Server that authorize (Da) informs the device that initiated the authentication request namely the Internet terminal (Di) to display the prepared set of images and the communication device (Dc) to start playback of the prepared set of sounds.

In case the user does not have the telephone phone number registered in the database, of the services platform (SERVICE), the call will meet someone who will not be in front of the displayed images or voice instructions are useless. In this case the call will be closed and will result in the rejection of approval.

The user actions determined by the telephone voice call in progress are valued by generating a new set of pointers. If this set of pointers generated by user actions is identical to the set on which were generated images, authorization request is relayed and server allows the access, in all other circumstances the requested authorization is rejected.

Proposed method for granting authorized access to the services platform by persons with disabilities it is beneficial, because the interaction with the telephone system is limited to answering the call and the indicated actions to be executed may be simple and ordered touches of the images. Even answering the call can be subject of automatization and by using wearable devices becomes friendlier for people with disabilities.

The method is directly exploitable and in extreme situations such as loss of the ID card or impossible to read the user's unique identifier for different reasons. In these situations it is necessary to use the username and password for specific Internet service. The password can be communicated only in special situations and can be single use or temporary password for verifying the identity of the applicant in fact at every release.

The invention offers the following advantages: <ol id="ol0001" compact="compact" ol-style=""><li>1. Method for granting access by two-factor authentication that requests low interactions with the user and minimum skills for the user, usable by people with disabilities or in environments where skills are reduced.</li><li>2. A method for granting access to Internet services validating the presence of the user in front of the Internet terminal by a telephone call. User must follow instructions dictated by the phone system and should be performed by the user at the Internet terminal during phone call.</li><li>3. Efficient use of computing power so it can be implemented in systems with computing power reduced such as the category Internet of Things (loT). In these implementations the terminal with recognition capabilities (e.g. identification card), system services and telephone communication module (GSM) can be integrated into a single device.</li><li>4. The method by which alphanumeric messages are removed in favor of images and sounds whose meaning can be known by small groups of people so that safe operation can be increased without technological contribution.</li><li>5. The method by which in the authentication process can be used sounds whose meaning is known by the group of authentic users. For example language or meaning of actions. Safe operation of the system can be increased without technological contribution.</li><li>6. The method by which to the unauthorized users are not disclosed further clues on possible ways to bypass the authentication system. For example images are not displayed before the phone call answer. Authorized users know this detail and by rejecting unsolicited phone call automatically determines the closure procedure, rejecting unauthorized access request.</li><li>7. The method by which the risk of unauthorized access to Internet services is low in the event of theft of the authentication technical elements (ID card and GSM phone simultaneously) through that emphasis is placed on the significance of images and sounds that can be known only by the genuine users group.</li></ol>

In the following is described an embodiment of the invention in connection with <figref idref="f0001 f0002 f0003">figures 1-5</figref>, which are: <ul id="ul0005" list-style="bullet" compact="compact"><li><figref idref="f0001">Fig. 1</figref>-Constructive assembly</li><li><figref idref="f0002">Fig. 2</figref>- Diagram of the method</li><li><figref idref="f0003">Fig. 3</figref> - Phase I of the method: Internet terminal display - snapshot - 1</li><li><figref idref="f0003">Fig. 4</figref> - Phase II of the method: Internet terminal display - snapshot - 2</li><li><figref idref="f0003">Fig. 5</figref> - Phase III of the method: Internet terminal display - snapshot - 3</li></ul>

The invention as proposed includes Internet services, databases and mobile voice telecommunications services in order to simplify the effort of validation of users in real-time including users with certain disabilities.

Description of <figref idref="f0001">figure 1</figref>: Constructive assembly and of <figref idref="f0002">figure 2</figref>: Diagram of the method.

U - User of the Internet service platform (Service) and telephone service subscriber (GSM or landline). The user may be a person with disabilities (e.g. reduced ability to view, elder people, etc...) or a normal one in a stressful environment. The user may equally be a normal person who wants quick and secure access without memorizing long and complex passwords, which are changed relatively often as recommended by current IT security practices. The user has pre-registered in the system (Service) personal data and telephone number since the subscription date. On the occasion of subscribing to the service, the user may receive and access card, for example a NFC Id card.

M - Voice telephony terminal (phone) with monitor function. The phone is connected and accessible through a telephone system (landline or GSM or other systems: e.g. Internet phone). The phone (M) may provide additional protection systems such as those implemented in Android, Windows or iOS (biometric authentication, password, pin, gestures, etc...) and an automatic response function for comfort of the user.

Di - Internet terminal (computer, tablet, smart phone, e-reader, etc.) that can exploit Internet services platform (Service). The Internet terminal it is also the originator of the request for authorization access. The Internet terminal (Di) may provide additional protection systems for user access (U) such as those implemented in Android, Windows or iOS (biometric authentication, password, pin, and gestures). The Internet terminal (Di) may have card reader, image recognition system for QR codes, voice recognition, etc...

Da - Authorization server for the Internet services platform (Service) to which all requests for authorization of access are transmitted. Authorization server it is connected in the private network of the services platform (Service) to have protected access at database services, communication devices etc. The private network of the services platform it is protected by security servers called firewalls.

Dc - Telephone communication device connected to the private network of the service platform (Service) and to a telephone service (GSM phone or landline network). The telephone communication (Dc) device implements voice modem technology.

<figref idref="f0001">Figure 1</figref>: Numbered arrows represent the interactions between system components such as events in order of appearance: The user (U) initiates (1) the procedure to request authorization by manipulating Internet terminal device (Di) which requesting authorization. The internet terminal device (Di) have to determine the user's unique identifier electronically. Identification may be achieved through alternative methods such as recognition of fingerprint, face, iris or voice, etc. or by automatically reading a device (NFC ID card, RFID, and QR) capable of communicating electronic user identifier (U). In exceptional circumstances, the user can initiate the process by typing a user name and password.

Internet terminal device (Di) requests authorization (2) by sending a message that contains the user ID to the server that authorizes (Da). The transmission is achieved by communication channel (Internet) on which will take place later operation of services requested by the user (U).

The server that authorizes (Da) verifies the user ID in the database (local). For an unknown identifier, server that authorizes transmits to the Internet terminal device (Di) refusal of authorization and the procedure ends. If the user ID is known, authorizing server (Da) automatically and randomly generates a set of pointers designating sounds and images. The set of pointers is transmitted (3, 3a) simultaneously to the internet terminal device (Di) which initiated the request for authorization and to the communication device (Dc) which liaises with the user through the monitor device (M) (mobile).

The communication device (Dc) receives (3) the set of pointers and initiates (4) a voice call (GSM) to the phone number of the user (U). Monitor device (M) and the telecommunications system (GSM) informs (5) through the communication device (Dc) the authorization server (Da) about voice call status. The communication device (Dc) detects call events such as busy, call rejected, answer, no answer, etc....

The Internet terminal device (Di) who initiated the request for authorization receives (3a) the set of pointers and prepares a corresponding set of images to be displayed. This set of images containing the images designated by the pointers and some chosen randomly. The portfolio of images which form the basis of choosing of the internet terminal device (Di) can be stored locally or dynamically received from the services platform (Service).

The server that authorizes (Da) it is informed (5) by the GSM communications device (Dc) about call status. If the call fails (congested network, no signal, rejected call etc.), the server that authorizes (Da) closes the procedure by refusing authorization and then informs the internet terminal device (Di) about refusal. In case that the user (U) answers the call through the monitor (M) event is detected (5) by the communications device (Dc) respectively by the server that authorizes (Da). The server that authorizes (Da) informs (6) the device that initiated the request (Di) to display the prepared image set. In this phase the communication device (Dc) starts voice playback.

The user (U) due to the fact that he answered the voice call (5) now he can sees images displayed by the Internet terminal (Di) and he must act (7) based on instructions played back by the monitor (M) over the images displayed on the Internet terminal (Di) to be logged on. In case the user (U) does not have the phone number registered in the database of the service platform, the call will reach someone who will not be in front of images so voice instructions are useless, the call will be closed and will result in the rejection of the authorization approval. Without voice instructions the user does not know how to progress in the authorization procedure. Trying to select some images has a huge probability to produce mistakes that will result in the rejection of the authorization approval. The opportunity to try it is limited only in the short timeframe of the answered phone call.

The user actions (U) in the ongoing voice call are evaluated and are generating a new set of pointers that corresponds to user actions. If the new set of pointers generated by user actions is identical to the set on which displayed images were generated, authorization request is relayed to the server that authorize (Da) and the access it is potentially granted. In all other cases the authorization request is rejected.

The server that authorize (Da) verifies if the user's actions (U) held during the phone call. If the phone call was carried out normally by the communication device (Dc) and monitor (M), the authorization is given and transmitted to the internet terminal device that requested authorization (Di) to continue the session requested by the user (U). Any communication event (e.g. early call hang-up) detected during phone call by the communication device (Dc) that indicates an abnormal phone call will result in rejection of the authorization approval.

Example of application of the invention: <ol id="ol0002" ol-style=""><li>1. Initiation of approval is made by the user (U) that normally approaching to the internet terminal (Di) an identity card Near Field Communication (NFC) (ring, watch, and bracelet) which is programmed with a link to the service platform (Service) and the user ID. Alternatively the user may be recognized by a biometric subsystem (voice, face, iris, etc.). The bowser at the internet terminal (Di) automatically opens a new session with the services platform (Service) which starts authentication procedure. The same functionality may be achieved using username and password.</li><li>2. The services platform (Service) through the server that authorizes (Da) verifies the user ID (U) in the local database and finds the phone number of the user (U). If the user Id it is present in the local database and has a phone number associated then the server that authorize (Da) randomly generates a set of pointers which are simultaneously transmitted (3) to the communication device (Dc) and to (3a) the Internet terminal (Di): <ol id="ol0003" ol-style=""><li>a) Communications device (Dc) initiates a voice call (4) the phone number of the user (U)</li><li>b) Internet terminal (Di) generates the images based on the received set of pointers and prepares their display</li></ol> Meanwhile terminal (Di) will display: according to <figref idref="f0003">Figure 4</figref>.</li><li>3. When the user (U) answers the phone (5), he will hear a greeting and then instructions that must follow to be authenticated. Immediately after the phone call answer, the Internet terminal (Di) displays a set of images. If the call has failed (rejected call, congested network, no signal, etc.) the Internet terminal (Di) will show the reject of the authentication request.</li><li>4. The user (U) should select (7) images displayed in the browser on the internet terminal (Di) according with voice instructions played back by the phone (M). For example, according to <figref idref="f0003">Figure 5</figref>, the screen of the internet terminal (Di) is displaying ten (10) images such as computer, bicycle, chair, clock, phone, flower, etc. In the same time the phone reproduces a voice that indicates airplane, bicycle, computer and clock. The user must click (7) in order on airplane, bicycle, computer, clock as soon as he is able to click but before the automatic end of call.</li><li>5. If the user (U) selects (7) images following the instructions from the phone (M) and during the phone call, the user (U) may receive access to the services platform (Service). Any deviation in this process cancels the authentication request at the initiative of the authentication server (Da).</li></ol>