SEEDLESS ANTI PHISHING AUTHENTICATION USING TRANSACTION HISTORY

• US 20110035317A1
• Filed: 05/26/2010
• Published: 02/10/2011
• Est. Priority Date: 08/07/2009
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Mayor, Shalini, Hammad, Ayman, Carlson, Mark, Faith, Patrick L.
• Application Number:
  US12/787,788
• Publication Number:
  US 20110035317A1
• Time in Patent Office: Days
• US Class Current: 705/40
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

Systems and methods for providing authentication verification for a correspondence and other messages are disclosed. A link, such as a uniform resource locator (URL) link, is placed in a correspondence and sent to a user. When the user follows the link, a list of personal transaction data from the user'"'"'s credit card or other financial account is presented. Because the personal transaction data is substantially private to user and his or her financial institution and card servicing company and not known to the public, the recipient can be assured that the message truly came from the financial institution or the card servicing company and not from a phisher.

Claims

1. A method of providing authentication verification for a message, the method comprising:

providing a unique link, the link to be sent with a message to a user of an account;

selecting, using a processor operatively coupled to a memory, at least one transaction from a plurality of transactions of the account, the account being substantially private to the user; and

presenting a resource in response to a selection of the link, the resource corresponding to the selected at least one transaction, thereby enabling the user to verify the authenticity of the message.

2. The method of claim 1 further comprising:

selecting at least one different transaction from the plurality of transactions of the account in response to a refresh of the link; and

presenting a second resource in response to the refresh of the link, the second resource also corresponding to the selected at least one different transaction, thereby enabling the user to further verify the authenticity of the message.

3. The method of claim 1 further comprising:

selecting a type of resource based on the selected at least one transaction.

4. The method of claim 1 wherein:

the resource is an authentication verification web page with transaction data from the at least one transaction; and

presenting includes displaying the authentication verification web page.

5. The method of claim 1 further comprising:

correlating an image to the selected at least one transaction, wherein the resource is an image file of the image and presenting includes displaying the image.

6. The method of claim 1 further comprising:

correlating a sound to the selected at least one transaction, wherein the resource is an audio file of the sound and presenting includes playing the audio.

7. The method of claim 1 further comprising:

correlating a video to the selected at least one transaction, wherein the resource is a video file of the video and presenting includes playing the video.

8. The method of claim 1 wherein the substantially private account is a financial account of the user and the transactions are financial transactions.

9. The method of claim 8 wherein the financial transactions are selected from the group consisting of debit card, credit card, and prepaid card transactions.

10. The method of claim 1 wherein the selecting is conducted randomly from a subset of the plurality of transactions.

11. The method of claim 10 wherein the subset includes transactions conducted within a time frame selected from the group consisting of the last week, last month, and last 90 days.

12. The method of claim 10 wherein the subset includes financial transactions greater than or equal to a predetermined amount of money.

13. The method of claim 10 wherein the subset excludes automatic reoccurring bill payments.

14. The method of claim 1 wherein the link is a uniform resource locator (URL).

15. The method of claim 1 wherein the message is electronic and a format of the electronic message is selected from the group consisting of an instant message (IM), a short message service (SMS) message, an enhanced messaging service (EMS), a multimedia messaging service (MMS) message, a TWEET®

message, and an email.

16. The method of claim 1 wherein each operation is performed by a computer processor operatively coupled to a memory.

17. A machine-readable storable medium embodying information indicative of instructions for causing one or more machines to perform the operations of claim 1.

18. A computer system executing instructions in a computer program, the computer program instructions comprising program code for performing the operations of claim 1.

19. A method of providing authentication verification for a message, the method comprising:

selecting, using a computer processor operatively coupled to a memory, a subset of transactions from a payment card account of a user;

providing a uniform resource locator (URL) link to an authentication verification page; and

displaying on the authentication verification page details of the at least one transaction in response to a request to access the URL through the link, thereby enabling a user to verify the authenticity of a message with which the URL link is sent.

20. A method of authenticating a message from a sender, the method comprising:

receiving a message with a link;

selecting, using a processor operatively coupled to a memory, the link;

receiving a verification page in response to the selecting the link, the verification page having details of at least one transaction of an account of a user, the account being substantially private to the user; and

checking the details of the at least one transaction, thereby confirming that the message is from an authentic sender.