METHOD AND SYSTEM OF SECURING ACCOUNTS

• US 20100146609A1
• Filed: 10/04/2007
• Published: 06/10/2010
• Est. Priority Date: 10/04/2006
• Status: Abandoned Application

• Current Assignee: Rob Bartlett
• Original Assignee: Rob Bartlett
• Inventors: Bartlett, Rob
• Application Number:
  US12/444,133
• Publication Number:
  US 20100146609A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system of securing account is provided. When a client computer requests access to an account accessible via a server, the server determinates a mac address associated with the client computer and compares it to a mac address associated with the account. If the mac address of the client computer is not the same as the mac address associated with the account, the server initially denies access to the client computer, but may allow access after verification of the client computer by the user associated with the account.

Claims

1. A system for enhancing security between a client and a server, comprising:

a database, accessible by the server, said database having a record associated with an account, said account associated with a MAC address;

wherein when said client accesses said account, said server receives said MAC address associated with said client and compares said MAC address associated with said client to said MAC address associated with said account, and if said MAC address associated with said client is the same as said MAC address associated with said account, permits access to said account.

2. The invention of claim 1 wherein if said MAC address associated with said client is not the same as said MAC address associated with said client, communicating with said client to determine if access to said account should be permitted.

3. The invention of claim 1 wherein said account is associated with a geographic area, and said server receives an IP address associated with said client.

4. The invention of claim 3 wherein if said geographic area associated with said IP address is not the same as said geographic area associated with said account or said MAC address of said client is not the same as said MAC address associated with said account, said server denying access to said account.

5. The invention of claim 4 wherein if said geographic area associated with said IP address is not the same as said geographic area associated with said account and said MAC address of said client is not the same as said MAC address associated with said account, said server notifies law enforcement of the IP address and MAC address of said client.

6. The invention of claim 4 wherein said account is associated with biometric information related to a user.

7. The invention of claim 6 wherein said server receives said biometric information from said client.

9. The method of claim 3 further comprising the step of:

(f) if said MAC address associated with said account and said MAC address associated with said computer are different, contacting a user associated with said account.

8. A method of allowing a client computer to access an account, comprising:

(a) said client computer requesting access to an account at a server;

(b) said server determining a MAC address associated with said client computer;

(c) said server accessing a database, said database having a MAC address associated with said account;

(d) comparing said MAC address associated with said account and said MAC address associated with said client computer;

(e) if said MAC address associated with said account and said MAC address associated with said client computer are the same, permitting access to said account.

10. The invention of claim 8 wherein a geographic area is associated with said account, and said server determining an IP address associated with said client computer.

11. The invention of claim 10 wherein if said geographic area associated with said IP address is not the same as said geographic area associated with said account, or said MAC address of said client is not the same as said MAC address associated with said account, said server denying access to said account.

12. The invention of claim 11 wherein if said geographic area associated with said IP address is not the same as said geographic area associated with said account and said MAC address of said client is not the same as said MAC address associated with said account, said server notifying law enforcement of the IP address and MAC address of said client computer.

13. The invention of claim 11 wherein said account is associated with biometric information related to a user.

14. The invention of claim 13 wherein said server receives said biometric information from said client.