METHOD AND SYSTEM FOR ELECTRONIC AUTHENTICATION

• US 20070220007A1
• Filed: 03/13/2007
• Published: 09/20/2007
• Est. Priority Date: 03/17/2006
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Takayama, Masayuki, Narita, Izura
• Application Number:
  US11/685,301
• Publication Number:
  US 20070220007A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A method and system for authenticating, in a host managing an electronic site and a site information table, user information inputted by a communication terminal communicably connected to the electronic site. The user information may comprise a dynamic password that corresponds to a static password and is contained in a local information table. Upon receiving user information transmitted by the communication terminal, the host authenticates the user information based on its site information table in order to allow for performing a transaction from the communication terminal. The host changes the user information to update the site information table during a transactable period after authenticating the user information and transmits the changed user information to the communication terminal in order to update the user information at the communication terminal. Upon receiving the changed user information from the host, the communication terminal updates the user information in its local information table accordingly.

Claims

1. A method for authenticating, in a host managing an electronic site and a site information table, user information inputted by a communication terminal communicably connected to the electronic site, comprising the steps of:

receiving user information from the communication terminal;

authenticating the received user information based on the site information table in order to allow for performing a transaction from the communication terminal;

changing the user information to update the site information table during a transactable period after authenticating the user information; and

transmitting the changed user information to the communication terminal in order to update the user information at the communication terminal.

2. The method of claim 1, wherein the step of changing the user information is performed in response to at least one of a start of the transactable period and a notice of a transaction end from a user.

3. The method of claim 1, wherein the user information comprises second information corresponding to first information, the method further comprising the initial steps of:

acquiring the first information from the communication terminal;

authenticating the acquired first information based on the site information table; and

requiring transmission of the second information from the communication terminal.

4. The method of claim 1, wherein the user information comprises second information corresponding to first information, wherein the first information is assigned to a specific user, wherein the second information is assigned to the specific user corresponding to the first information.

5. The method of claim 1, wherein the user information comprises second information corresponding to first information, wherein the first information comprises an account number and a static password of an account, and wherein the second information serves as a dynamic password which is not recognized by the user.

6. A computer-readable medium having computer-executable instructions stored thereon which, when executed by a computer, cause the computer to perform the method of claim 1.

7. A method for authenticating user information inputted by a communication terminal communicably connected to an electronic site managed by a host, comprising the steps of:

transmitting user information from the communication terminal to the electronic site for authentication at the electronic site; and

receiving changed user information from the electronic site at the communication terminal;

updating user information at the communication terminal in accordance with the changed user information.

8. The method of claim 7, wherein the user information is transmitted in response to a request from the electronic site.

9. The method of claim 7, wherein the user information comprises second information corresponding to first information, the method further comprising the initial steps of:

transmitting the first information from the communication terminal to the electronic site; and

receiving a request for the second information from the electronic site at the communication terminal.

10. A computer-readable medium having computer-executable instructions stored thereon which, when executed by a computer, cause the computer to perform the method of claim 7.

11. A system for authenticating, in a host managing an electronic site and a site information table, user information inputted by a communication terminal communicably connected to the electronic site, comprising:

means for receiving user information from the communication terminal;

means for authenticating the received user information based on the site information table in order to allow for performing a transaction from the communication terminal;

means for changing the user information to update the site information table during a transactable period after authenticating the user information; and

means for transmitting the changed user information to the communication terminal in order to update the user information at the communication terminal.

12. The system of claim 11, wherein the user information comprises second information corresponding to first information, the system further comprising:

means for initially acquiring the first information from the communication terminal;

means for authenticating the acquired first information based on the site information table; and

means for requiring transmission of the second information from the communication terminal.

13. A system for authenticating user information inputted by a communication terminal communicably connected to an electronic site managed by a host, comprising:

means for transmitting user information from the communication terminal to the electronic site for authentication at the electronic site;

means for receiving changed user information from the electronic site at the communication terminal; and

means for updating user information at the communication terminal in accordance with the changed user information.

14. The system of claim 13, wherein the user information comprises second information corresponding to first information, the system further comprising:

means for initially transmitting the first information from the communication terminal to the electronic site; and

means for receiving a request for the second information from the electronic site at the communication terminal.

15. The system of claim 13, wherein the user information comprises second information corresponding to first information, and wherein the communication terminal authenticates the first information based on a local information table.

16. The system of claim 13, wherein the user information is contained in a local information table managed by the communication terminal.

17. The system of claim 16, wherein the communication terminal includes means for managing the local information table.

18. The system of claim 17, wherein the managing means includes a storage unit for storing the local information table.

19. The system of claim 18, wherein the managing means includes an arithmetic circuit unit for generating the user information.

20. The system of claim 19, wherein the managing means comprises an external storage device detachably connected to the communication terminal.