ANTI-PHISHING SYSTEM AND METHOD INCLUDING LIST WITH USER DATA

• US 20110093397A1
• Filed: 10/15/2010
• Published: 04/21/2011
• Est. Priority Date: 10/16/2009
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Faith, Patrick, Carlson, Mark
• Application Number:
  US12/905,686
• Publication Number:
  US 20110093397A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction

Abstract

A server computer is disclosed. It comprises a processor and a computer readable medium coupled to the processor. The computer readable medium comprises code executable by the processor for implementing a method comprising: (i) receiving a request to conduct a transaction, (ii) providing a user interface to a user in response to the request, wherein the user interface includes a list of candidate identification tokens, wherein the list of candidate identification tokens includes an authentic identification token and one or more non-authentic identification tokens, wherein the authentic identification token is associated with a user account.

Claims

1. A method comprising:

receiving a request to conduct a transaction; and

,

providing a user interface to a user in response to the request, wherein the user interface includes a list of candidate identification tokens, wherein the list of candidate identification tokens includes an authentic identification token and one or more non-authentic identification tokens, wherein the authentic identification token is associated with a user account.

2. The method of claim 1 wherein the user'"'"'s account is a payment card account.

3. The method of claim 2 wherein the authentic identification token is a segment of an account number associated with the user'"'"'s account.

4. The method of claim 3 wherein each candidate identification token in the list of candidate identification tokens is a four digit number.

5. The method of claim 4 wherein the authentic candidate identification token is the last four digits of an account number associated with the user account.

6. The method of claim 1 further comprising receiving a candidate identification token selection and determining if the selected candidate identification token is the authentic identification token.

7. The method of claim 6 further comprising initiating a transaction process using the user account associated with the authentic identification token if the selected candidate identification token is the authentic identification token.

8. The method of claim 1 wherein the one or more non-authentic identification tokens are pseudo-randomly generated.

9. The method of claim 1 wherein the list of candidate identification tokens includes a greater number of non-authentic identification tokens than authentic identification tokens.

10. The method of claim 1 wherein receiving a request to conduct a transaction and providing a user interface to a user in response to the request, wherein the user interface includes a list of candidate identification tokens, wherein the list of candidate identification tokens includes an authentic identification token and one or more non-authentic identification tokens, wherein the authentic identification token is associated with a user account are performed by one or more software applications stored in one or more computer-readable medium housed in a server computer.

11. An anti-phishing system comprising:

a database comprising of one or more user profiles

a server computer coupled to the database, wherein the server computer comprises a processor and a computer-readable storage medium coupled to the processor, the computer readable storage medium comprising code executable by the processor for implementing a method comprising;

receiving a request to conduct a transaction;

providing a user interface to a user in response to the request, wherein the user interface includes a list of candidate identification tokens, wherein the list of candidate identification tokens includes an authentic identification token and one or more non-authentic identification tokens, wherein the authentic identification token is associated with a user account.

12. The system of claim 11 wherein the user account is a payment card account.

13. The system of claim 12 wherein the authentic candidate identification token is a segment of a payment card number associated with the payment card account.

14. The system of claim 11 wherein the position of the authentic candidate identification token in the list of candidate identification tokens changes position in the list.

15. The system of claim 11 wherein the user interface includes a password field.

16. A method comprising:

requesting to conduct a transaction;

receiving a user interface including a list of candidate identification tokens, wherein the list of candidate identification tokens includes an authentic identification token and one or more non-authentic identification tokens at a user device; and

,

selecting an identification token from the list of candidate identification tokens.

17. The method of claim 16 wherein the transaction is a money transfer.

18. The method of claim 16 wherein the transaction is a purchase transaction.

19. The method of claim 16 wherein in response to selecting an authentic identification token from the list of candidate identification tokens, a server computer automatically initiates processing of the transaction.

20. The method of claim 16 wherein the one or more non-authentic identification tokens are pseudo-randomly selected from a pool of non-authentic identification tokens.