SYSTEMS AND METHODS FOR AGGREGATION OF ACCESS TO NETWORK PRODUCTS AND SERVICES

• US 20080031447A1
• Filed: 08/04/2007
• Published: 02/07/2008
• Est. Priority Date: 08/04/2006
• Status: Abandoned Application

• Current Assignee: Edward F. Mccarthy, Eileen Mccarthy, Frank Geshwind
• Original Assignee: Edward F. Mccarthy, Eileen Mccarthy, Frank Geshwind
• Inventors: McCarthy, Eileen, McCarthy, Edward F., Geshwind, Frank
• Application Number:
  US11/833,979
• Publication Number:
  US 20080031447A1
• Time in Patent Office: Days
• US Class Current: 380/46
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention is directed to a method and computer system for access aggregation comprising the storage and retrieval of website userids and passwords, and potentially other information, which is secure and convenient and automates access to the variety of websites of interest to users, and to the other information. An embodiment comprises a web server with web pages and files including client application code and server code, databases, and other components, to store encrypted versions of the userid and password for the user to login to the various sites for which the user is a member. The encryption/decryption key(s) to encrypt/decrypt the userids and passwords are never sent to the server and are only present on the client, so that the method is secure. The invention optionally additionally provides an interface allowing a user to manage various accounts, ids, passwords and other information.

Claims

1. A computer based method for authentication of a user of products and services over a network, said authentication comprising a first userid and a first password said method comprising the steps:

Accepting a master userid and master password from said user,

Creating an encryption key from said master userid and said master password,

Receiving said first userid and said first password,

Encrypting said first userid and first password using said encryption key, to produce encrypted information,

Sending said encrypted information to a server for storage,

Retrieving said encrypted information from said server,

Decrypting said encrypted information to produce a decrypted information, and,

Authenticating said user using said decrypted information.

2. The method of claim 1 wherein the step of receiving said first userid and said first password comprises retrieving said first userid and said first password from data entered into an authentication web form, thereby providing an automated system not requiring an extra step for the user.

3. The method of claim 1 wherein the step of authentication said user using said decrypted information comprises inserting said first userid and said first password into an authentication web form, thereby providing an automated system not requiring an extra step for the user.

4. The method of claim 1 wherein the step of creating an encryption key from said master userid and said master password comprises a hash function.

5. The method of claim 1 wherein the step of creating an encryption key from said master userid and said master password comprises the generation of a pseudo-random prime number.

6. A system for authentication of a user of products and services over a network, said authentication comprising a first userid and a first password, said system comprising:

A client application, and

A server application, wherein

Said client application is disposed to accept a master userid and master password from said user, to create an encryption key from a hash function of said master userid and said master password, to receive said first userid and said first password, to encrypt said first userid and first password using said encryption key, to produce encrypted information, to send said encrypted information to said server for storage, to retrieving said encrypted information from said server, to decrypt said encrypted information to produce a decrypted information, and to authenticate said user using said decrypted information.

7. The system of claim 6 further comprising a browser plugin wherein said client application is incorporated into said browser plugin and is thereby disposed to automatically authenticate said user.

8. The system of claim 6 further comprising a web proxy wherein said client application is incorporated into said web proxy and is thereby disposed to automatically authenticate said user.

9. The system of claim 6 further comprising a modem wherein said client application is incorporated into said modem and is thereby disposed to automatically authenticate said user.

10. The system of claim 6 further comprising a browser in a browser software component wherein said client application is incorporated into said browser in a browser software component and is thereby disposed to automatically authenticate said user.

11. The system of claim 6 wherein the client application further comprises a periodically executed function that checks for authentication requests, thereby providing an automated system not requiring an extra step for the user.

12. A method of providing a set membership accounts to a first set of websites, for a user, said set first of websites selected from a second set of websites, said method comprising

Receiving information about said user,

Receiving information about each website of said second set of websites,

Comparing said information about the user to said information about each website of said second set of websites to produce a score for each website of said second set of websites,

Selecting said first set of websites to be a predetermined number of websites from said second set of websites with the highest said scores,

Creating a membership account comprising authentication information for said user to access each website from said first set of websites,

Encrypting said authentication information to produce encrypted authentication information, and

Sending said encrypted authentication information to a server for storage and later retrieval.

13. The method of claim 12 wherein the step of receiving information about each website of said second set of websites comprises receiving an amount paid for placement of said each website.

14. The method of claim 12 wherein said step of receiving information about said user comprises receiving the age, gender or residence location of the user

15. The method of claim 12 wherein said step of receiving information about said user comprises receiving information about membership of said user in an affinity group