System and method of using human friendly representations of mathematical function results and transaction analysis to prevent fraud

• US 20060020812A1
• Filed: 04/26/2005
• Published: 01/26/2006
• Est. Priority Date: 04/27/2004
• Status: Abandoned Application

• Current Assignee: Joseph Steinberg, Shira Steinberg
• Original Assignee: Joseph Steinberg, Shira Steinberg
• Inventors: Steinberg, Joseph, Steinberg, Shira
• Application Number:
  US11/114,945
• Publication Number:
  US 20060020812A1
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for identity authentication that comprises the use of a one-way mathematical (hash) value for log-in verification, user friendly graphical/audible verification representations of the same, and log/transaction monitoring that acts as a redundant check to avoid the subsequent execution of transactions that may have been fraudulently issued

Claims

1. A method for representing a mathematical value in a user friendly way for use within an electronic system, comprising the steps of:

receiving identity indicia from a user;

generating a one way hash value based on said identity indicia;

generating at least a portion of a user friendly representation of said one way hash value;

communicating to said user said at least one portion of said user friendly representation upon said generating of same.

2. The method of claim 1 wherein said representing of a mathematical value in a human friendly way is utilized for effectuating online identity authentication.

3. The method of claim 2, wherein the step of receiving identity indicia from a user comprises an iterative reception of said identity indicia from said user based upon a continuing recognition of each of said at least one portion of said user friendly representation upon said generating of same.

4. The method of claim 3, wherein the step of generating the user friendly representation of said one way hash value comprises the step of generating a visual representation for display on a terminal of said user upon said communicating of said at least one portion of said user friendly representation.

5. The method of claim 4, wherein the step of generating said visual representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation further comprises the step of generating said visual representation chosen from the group comprising geometric shapes, letters, numbers, freeform shapes, and pictures.

6. The method of claim 5, wherein the step of generating said step of generating said visual representation further comprises the step of generating at least one of the following comprising a color or a pattern associated with at least one of said visual representations.

30. The method of claim 4, wherein the step of generating said user friendly representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation may further include the step of generating said user friendly representation by effectuating at least one of the actions chosen from the group comprising:

changing a background color, displaying an image, modifying text color, modifying elements on a display, shading a background with different patterns, playing recognizable music, playing recognizable tones, playing a generated word, displaying a generated word, displaying a number, or displaying combinations of the same.

34. The method of claim 2 used specifically to combat phishing type fraud.

7. A method for verifying transactional veracity by receiving identity indicia from a user and associating transactional and source information associated with said identity indicia.

8. The method of claim 7, further comprising the step of monitoring said transactional, activity, and source information associated with said identity indicia for possible fraud.

9. The method of claim 8, further comprising the step of flagging any possible fraud as determined during said step of monitoring said transactional and source information associated with said identity indicia for possible fraud, for disposition in accordance with predetermined rules.

35. The method of claim 8 used specifically to combat phishing-type fraud.

10. A computer-readable storage media that contains a program that when executed by a computer represents a mathematical value in a user friendly way and verifies on line identity on a system by performing the steps of:

receiving identity indicia from a user;

generating a one way hash value based on said identity indicia;

generating at least a portion of a user friendly representation of said one way hash value;

communicating to said user said at least one portion of said user friendly representation upon said generating of same.

11. The computer-readable storage media of claim 10, wherein the step of receiving identity indicia from said user further comprises routines for providing an iterative reception of said identity indicia from said user based upon a continuing recognition of each of said at least one portion of said user friendly representation upon said generating of same.

12. The computer-readable storage media of claim 11, wherein the step of generating the user friendly representation of said one way hash value comprises a routine for effectuating the step of generating a visual representation for display on a terminal of said user upon said communicating of said at least one portion of said user friendly representation.

13. The computer-readable storage media of claim 12, wherein the routine for effectuating the step of generating said visual representation further comprises at least one of the following routines for generating a color or pattern associates with at least one of said visual depictions.

31. The computer-readable storage media of claim 11, wherein the routine for effectuating the said user friendly representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation may further include the step of generating said user friendly representation by effectuating at least one of the actions chosen from the group comprising:

changing a background color, displaying an image, modifying text color, modifying any elements on the display, shading a background with different patterns, playing recognizable music, playing recognizable tones, playing a generated word, displaying a generated word, displaying a number, or displaying combinations of the same.

14. The computer-readable storage media that contains a program that when executed by a computer runs a routine for receiving identity indicia from a user and a routine for associating transactional and source information associated with said identity indicia.

15. The computer-readable storage media of claim 14, further comprising a routine for effectuating the step of monitoring said transactional and source information associated with said identity indicia for possible fraud.

16. The computer-readable storage media of claim 15, further comprising a routine for effectuating the step of flagging any possible fraud, as determined during said step of monitoring said transactional and source information associated with said identity indicia for possible fraud, for disposition in accordance with predetermined rules.

36. The computer-readable storage media of claim 16 used specifically to combat phishing-type fraud.

17. An apparatus for on-line identity authentication for an electronic system, comprising:

means for receiving identity indicia from a user;

means for generating a one way hash value based on said identity indicia;

means for generating at least a portion of a user friendly representation of said one way hash value; and

communicating to said user said at least one portion of said user friendly representation upon said generating of same.

18. The apparatus of claim 17, wherein the means for receiving identity indicia from a user further comprises:

means for providing an iterative reception of said identity indicia from said user based upon a continuing recognition of each of said at least one portion of said user friendly representation upon said generating of same

19. The apparatus of claim 18, wherein the means of generating the user friendly representation of said one way hash value further comprises a means for generating a visual representation for display on a terminal of said user upon said communicating of said at least one portion of said user friendly representation.

20. The apparatus of claim 19, wherein the means for generating said visual representation chosen from the group of visual depictions further comprises a means for generating a color or pattern associates with at least one of said visual depictions.

21. The apparatus of claim 20, wherein the means for receiving said identity indicia from said user further comprises a means for associating transactional and source information associated with said identity indicia.

22. The apparatus of claim 21, further comprising a means of monitoring said transactional and source information associated with said identity indicia for possible fraud.

23. The apparatus of claim 22, further comprising a means for flagging any possible fraud, as determined during by said means for monitoring said transactional and source information associated with said identity indicia for possible fraud, for disposition in accordance with predetermined rules.

32. The apparatus of claim 18, wherein the means for effectuating the said user friendly representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation may further include the step of generating said user friendly representation by effectuating at least one of the actions chosen from the group comprising:

changing a background color, displaying an image, modifying text color, modifying any elements on the display, shading a background with different patterns, playing recognizable music, playing recognizable tones, playing a generated word, displaying a generated word, displaying a number, or displaying combinations of the same.

37. The apparatus of claim 22, used specifically to combat phishing type fraud.

24. A method for representing a mathematical value in a user friendly way and for on-line identity authentication for an electronic system, comprising the steps of:

transmitting identity indicia associated with a user to an online transaction entity;

receiving a one way hash value that has been generated by online transaction entity based on said identity indicia;

receiving at least a portion of a user friendly representation of said one way hash value as generated by said online transaction entity;

determining on line identity of said online transaction entity based on said receiving of said at least one portion of said user friendly representation upon said generating of same.

25. The method of claim 24, wherein the step of transmitting identity indicia from a user to said online transaction entity comprises an iterative reception of said identity indicia from said user based upon a continuing recognition of each of said at least one portion of said user friendly representation upon said generating of same.

26. The method of claim 25, wherein the step of receiving the user friendly representation of said one way hash value comprises the step of receiving a visual representation for display on a terminal of said user, upon said communicating of said at least one portion of said user friendly representation.

27. The method of claim 26, wherein the step of receiving said visual representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation further comprises the step of receiving said visual representation chosen from the group of visual depictions comprising geometric shapes, letters, numbers, freeform shapes, and pictures.

28. The method of claim 27, wherein the step of receiving said visual representation chosen from the group of graphical depictions further comprises the step of receiving a color or pattern associates with at least one of said visual depictions.

29. The method of claim 28, wherein the step of transmitting said identity indicia from the user further comprises transmitting transactional and source information associated with said identity indicia.

33. The method of claim 26, wherein the step of generating said user friendly representation for display on said user'"'"'s terminal upon said communicating of said at least one portion of said user friendly representation may further include the step of generating said user friendly representation by effectuating at least one of the actions chosen from the group comprising:

changing a background color, displaying an image, modifying text color, modifying any elements on the display, shading a background with different patterns, playing recognizable music, playing recognizable tones, playing a generated word, displaying a generated word, displaying a number, or displaying combinations of the same.