Network-Based Verification and Fraud-Prevention System

• US 20110162052A1
• Filed: 03/11/2011
• Published: 06/30/2011
• Est. Priority Date: 12/08/1998
• Status: Active Grant

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Blake Earl Hayward
• Inventors: Hayward, Blake Earl
• Granted Patent: US 8,769,133 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A system for authentication has an Internet-connected server providing services and software executing on the server from a non-transitory physical medium. The software provides a function for receiving a request for authentication from a person seeking service at the server, a function for requesting by the server one or more username/password pairs used for log-in for the person at one or more Internet sites remote from the server, a function for logging in by the server at the remote site or sites on behalf of the person, using the username/password pair or pairs provided by the person, and a function for authenticating the person at the server for interaction with the server.

Claims

1. A system for authentication, comprising:

an Internet-connected server providing services; and

software executing on the server from a non-transitory physical medium, the software providing;

a function for receiving a request for authentication from a person seeking service at the server;

a function for requesting by the server one or more username/password pairs used for log-in for the person at one or more Internet sites remote from the server;

a function for logging in by the server at the remote site or sites on behalf of the person, using the username/password pair or pairs provided by the person; and

a function for authenticating the person at the server for interaction with the server.

2. The system of claim 1 wherein the server requests three or more URLs and username/password pairs, attempts log-in with each, and authenticates on a basis of a pre-stored percentage of successful log-ins.

3. A method for authentication, comprising steps of:

(a) accepting by a server an authentication request from a person;

(b) requesting by the server one or more username/password pairs and URLs for one or more sites remote from the server;

(c) attempting to log-in by the server as the person at the one or more remote sites; and

(d) authenticating the person by the server based on successful log-in at the one or more remote sites.

4. The method of claim 3 wherein, in step (b) a plurality of username/password pairs with URLs are provided by the person, and authentication is based on a pre-stored percentage of successful log-in.