System and method for authenticating entities to users

• US 20050268100A1
• Filed: 03/23/2005
• Published: 12/01/2005
• Est. Priority Date: 05/10/2002
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Gasparini, Louis A., Harris, William H.
• Granted Patent: US 7,562,222 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A system and method communicates information from an entity that a registry can use to authenticate the entity to a user. If the registry authenticates the entity, it displays information that represents a shared secret between the registry and the user.

Claims

1. A method of authenticating that a communication originated from an entity, comprising:

providing a token from the entity to a user;

receiving the token from the user by a third party;

attempting to authenticate by the third party at least a portion of the token as originating from the entity; and

responsive to the token being authenticated, displaying information known to the user and the third party, but not generally associated with the user by sources other than the user and the third party.

2. The method of claim 1 wherein the token comprises a cookie.

3. The method of claim 2 wherein the cookie is provided via a domain accessible to the entity and the third party.

4. The method of claim 2, wherein:

the token additionally comprises information in a link;

the receiving step is responsive to a user pressing the link; and

the attempting step is responsive to the information in the link.