SYSTEM AND METHOD FOR AUTHENTICATING A WEB PAGE

• US 20060218391A1
• Filed: 06/09/2006
• Published: 09/28/2006
• Est. Priority Date: 09/09/1999
• Status: Active Grant

• Current Assignee: Authentixx LLC (Jeffrey M. Gross)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Glazer, Elliott, White, Dirk, Barrett, Michael, Armes, David, Bishop, Fred Alan
• Granted Patent: US 7,631,191 B2
• Time in Patent Office: Days
• US Class Current: 713/152
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2463/121 Timestamp
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

The present invention provides for an icon with an additional level of functionality that allows a user to validate that current information (e.g., a web page) originates from the true owner of the icon and is not merely a copy. The method includes a user requesting a web page from a web site using a web browser. The web server receives the request, retrieves the web page and forwards it to an authentication server. The authentication server inserts an authenticity key into the web page, then the page (including the authenticity key) is returned to the user. If the page includes an authenticity key, the authenticity is verified at the user'"'"'s computer because the user computer includes logic (e.g., software) to verify the authenticity. During the user configuration process, the user defines an authenticity stamp which determines the format of an authenticated page.

Claims

1. A method for authenticating data and indicating an authentication of the data, the method comprising:

receiving a data request from a client;

retrieving data based on the data request to obtain retrieved data;

formatting the retrieved data to create formatted data, wherein the formatted data includes an authenticity key; and

returning the formatted data to the client.

2. The method of claim 1, wherein the formatted data is a web page.

3. The method of claim 1, further comprising:

reading the formatted data at the client;

determining if the formatted data includes the authenticity key;

if the formatted data includes the authenticity key;

verifying authenticity based on the authenticity key.

4. The method of claim 3, further comprising displaying the data based on the verification of the authenticity key.

5. The method of claim 4, wherein one authenticity stamp will be displayed for data that has been successfully verified.

6. The method of claim 4, wherein one authenticity stamp will be displayed for each graphical image.

7. The method of claim 4, wherein a non-authenticity stamp will be displayed for data that has not successfully been verified.

24. The method of claim 1, wherein the formatted data is at least one of a screen display and a Uniform Resource Locator (URL).

8. A system for authenticating data and indicating an authentication of the data, the system comprising:

a client;

a server;

a network, wherein the client and the server communicate via the network; and

an authentication server, wherein said authentication server is in communication with said server, the authentication server being configured to insert an authenticity key in real time into the data requested from the client, thereby facilitating the client to authenticate the authenticity key to verify the source of the data.

9. The system of claim 8, wherein said client includes a browser, wherein pages are displayed to a user on a display device on said client.

10. The system of claim 8, wherein said server sends a page including an authenticity key to said client.

11. The system of claim 10, wherein said client verifies authenticity of the page based on the authenticity key.

12. The system of claim 11, wherein the page is displayed on said client, wherein the display includes an indication of the authenticity of the page.

13. A system configured for authenticating data and indicating an authentication of the data, the system comprising:

a client;

a server, wherein said server sends a page, wherein the page includes a graphic image and wherein each of said graphic images includes an authenticity key; and

,

a network, wherein the client and the server communicate via the network.

22. The system of claim 13, wherein the graphic image is at least one of graphics, text, and audio.

23. The system of claim 13, wherein at least one of color and positioning of the graphic image is configurable.

14. In a computer system for authenticating data and indicating an authentication of the data, a computer-readable medium holding computer executable instructions for performing a method comprising the steps of:

receiving a data request from a client;

retrieving data based on the data request to obtain retrieved data;

formatting the retrieved data to create formatted data, wherein the formatted data includes an authenticity key; and

returning the formatted data to the client.

15. The computer system of claim 14, wherein the formatted data is a web page.

16. The computer system of claim 14, wherein computer executable instructions further comprise the steps of:

reading the formatted data at the client;

determining if the formatted data includes the authenticity key;

if the formatted data includes the authenticity key;

verifying authenticity based on the authenticity key.

17. The computer system of claim 16, wherein the computer executable instructions further comprise the step of:

displaying the data based on the verification of the authenticity.

18. The computer system of claim 17, wherein an authenticity stamp will be displayed for data that has been successfully verified.

19. The computer system of claim 17, wherein a non-authenticity stamp will be displayed for data that has not successfully been verified.

20. The method of claim 17, wherein an authenticity stamp is displayed in a popup window when data has been at least one of successfully verified and not successfully verified.

21. The method of claim 17, wherein an authenticity stamp is not displayed on a authenticated web page.