Text message authentication system

Abstract

Systems and method for authenticating users are presented. A system can send a passkey to a user interface of a known device. A user can then send a messaging service message with the passkey from a second device to the system. After receiving the message from the user, the system can extract the passkey from the message, and compare the received passkey against the passkey originally sent to the user. The known device and the second device can each have separate and unique device identifiers.

What is claimed is: 
     
         1 . A method of authenticating a user, using a service, an initiating device, and an authenticating device, wherein the initiating device is different than the authenticating device, comprising the following steps, in sequence:
 associating a device ID of the authenticating device with a user ID; and   the service authenticating the user by:
 (a) receiving the user ID via the initiating device; 
 (b) sending the user a one-time authentication code; and 
 (c) receiving the one-time authentication code and the device ID. 
   
     
     
         2 . The method of  claim 1 , further comprising using a telephone number to send one-time authentication code to the user. 
     
     
         3 . The method of  claim 1 , further comprising using an email address to send the one-time authentication code to the user. 
     
     
         4 . The method of  claim 1 , wherein the one-time authentication code comprises an alphanumeric phrase. 
     
     
         5 . The method of  claim 1 , wherein the one-time authentication code comprises an audio phrase. 
     
     
         6 . The method of  claim 1 , wherein the one-time authentication code comprises a drawing. 
     
     
         7 . The method of  claim 1 , wherein the service is distal to both the initiating device and the authenticating device. 
     
     
         8 . The method of  claim 1 , wherein the authenticating device comprises a telephony enabled device. 
     
     
         9 . The method of  claim 1 , wherein the authenticating device comprises a cellular enabled device. 
     
     
         10 . The method of  claim 1 , wherein the authenticating device comprises a mobile telephone. 
     
     
         11 . The method of  claim 1 , wherein the service sends the one-time authentication code via an SMS message. 
     
     
         12 . The method of  claim 1 , wherein the service sends the one-time authentication code via an SMIL message. 
     
     
         13 . The method of  claim 1 , wherein the service sends the one-time authentication code via an MMS message. 
     
     
         14 . The method of  claim 1 , further comprising sending an alert when the one-time authentication code received by the service does not match the one-time authentication code sent by the service. 
     
     
         15 . The method of  claim 1 , further comprising sending an alert when the device ID received by the service does not match the device ID associated with the user ID received by the service. 
     
     
         16 . The method of  claim 1 , wherein the device ID of the authenticating device comprises an internet protocol (IP) address. 
     
     
         17 . The method of  claim 1 , wherein the device ID of the authenticating device comprises a MAC address. 
     
     
         18 . The method of  claim 1 , wherein the device ID of the authenticating device comprises a serial number. 
     
     
         19 . The method of  claim 1 , wherein the device ID of the authenticating device comprises a Unique Device Identifier (UDID).