Method and system for verifying state of a transaction between a client and a service over a data-packet-network

• US 20050198377A1
• Filed: 12/29/2004
• Published: 09/08/2005
• Est. Priority Date: 06/01/1999
• Status: Active Grant

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Yodlee.com, Inc. (Envestnet Incorporated)
• Inventors: Ferguson, Hill, Hayward, Blake, Satyavolu, Ramakrishna
• Granted Patent: US 8,423,648 B2
• Time in Patent Office: Days
• US Class Current: 709/238
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/957 Browsing optimisation, e.g. caching or content distillation
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/289 Intermediate processing functionally located close to the data consumer application, e.g. in same machine, in same home or in same sub-network
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/567 Integrating service provisioning from a plurality of service providers

Abstract

A system for verifying communication established between a first and a second node over a data-packet-network includes a third network node accessible from the first node over the data-packet-network, the third node containing network location information of the second node and the network location information of at least one resource accessible there from; and a navigation agent directed by the third network node for navigating over the network to the second node and to the at least one resource to gather information. In a preferred embodiment, the information gathered includes indication of receipt of data sent from the first node at the second node and indication of confirmation or authorization to access services.

Claims

1. A system for verifying communication established between a first and a second node over a data-packet-network comprising:

a third network node accessible from the first node over the data-packet-network, the third node containing network location information of the second node and the network location information of at least one resource accessible there from; and

a navigation agent directed by the third network node for navigating over the network to the second node and the at least one resource to gather information.

2. The system of claim 1 wherein the data-packet-network is the Internet network.

3. The system of claim 1 wherein the first node is a computing device enabled for network navigation and the second node is a server node.

4. The system of claim 1 wherein the third node is a server node and the navigation agent is automated and executable according to schedule.

5. The system of claim 1 wherein the communication is a request and response interaction sequence initiated by the first node, the request to authorize access to the at least one resource accessible through the second node, the response relevant to authorization for service access and interaction with the resource.

6. The system of claim 5 wherein the request is sent to the second node.

7. The system of claim 5 wherein the request is sent to the third node.

8. The system of claim 1 wherein the navigation information is provided to the third node by the first node before communication and service authorization is verified.

9. The system of claim 1 wherein verification includes an acknowledgement that data sent to the second node from the first node was received.

10. The system of claim 1 wherein verification includes an acknowledgement that data sent from the first node to the second node has been authenticated and that service access and interaction has been approved for an agent of the first node.

11. A method for verifying communication between a first node and a second node over a data-packet-network comprising steps of:

(a) sending a request from the first node, the request to enable access and interaction with at least one resource available through the second node;

(b) navigating to the second node from a third node to verify receipt of the request; and

(c) determining the state of the communication related to the existence of a response to the request including any authorization confirmation to access and interact with the at least one resource.

12. The method of claim 11 wherein the data-packet-network is the Internet network.

13. The method of claim 11 wherein in step (a) the request is sent to the second node and the at least one resource is a URL of a Web service page.

14. The method of claim 11 wherein in step (a) the request is sent to a third node, the third node then emulating an agent of the first node and sending the request to the second node.

15. The method of claim 11 wherein in step (a) the first node is a computing device enabled for network navigation and the second node is a server node.

16. The method of claim 13 wherein in step (b) the third node is a server node and navigation is performed by an automated navigation agent.

17. The method of claim 11 wherein in step (b) receipt includes all of the data required for enabling service access and interaction.

18. The method of claim 11 wherein in step (b) the navigation is executed periodically implying more than one session established until receipt of data is verified.

19. The method of claim 11 wherein in step (c) the response is negative and access is denied.

20. The method of claim 11 wherein in step (c) the response is positive and service access is approved.

21. The method of claim 11 wherein in step (c) the response does not exist at the time of navigation.

22. The method of claim 21 further including a step (d) for re-sending the request of step (a).

23. The method of claim 11 wherein in step (c) the state of communication spans a time from sending of the original request to determination of a response either confirming and approving the request or confirming and denying the request.

24. A computing device for independently verifying state of a transaction between a first and second node over a data-packet-network comprising:

a navigation agent for navigating to the second node and accessing a resource available there through; and

a machine readable instruction for enabling the navigation agent.

25. The computing device of claim 24 wherein the data-packet-network is the Internet network and the computing device is a server connected to the network.

26. The computing device of claim 24 wherein the transaction comprises a sequence of communications not necessarily conducted during a same network session.

27. The computing device of claim 24 wherein verification includes verifying receipt of data and verifying independent authentication of data.

28. The computing device of claim 24 wherein the navigation agent is automated and executed periodically over time in the verification attempt.

29. The computing device of claim 24 wherein the machine readable instruction contains at least a navigation instruction and login information to enter a Web site.

30. The computing device of claim 24 wherein the transaction is initiated by the first node and ultimately concluded by the second node.

31. The computing device of claim 24 wherein the transaction is initiated by the first node and carried out according to request between the computing device and the second node on behalf of the first node, the computing device emulating the first node.