METHOD FOR SECURE USER AND TRANSACTION AUTHENTICATION AND RISK MANAGEMENT
First Claim
1. A method of providing a user signature on a network transaction, comprising:
- receiving, by a security server, transaction information representing a transaction between a network user and a network site;
calculating, by the security server, a one-time-password based on (i) the received transaction information and (ii) a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret and the transaction information; and
transmitting, by the security server, the calculated one-time-password for application as the user'"'"'s signature on the transaction.
11 Assignments
0 Petitions
Accused Products
Abstract
To provide a user signature on a network transaction, a security server receives transaction information representing a transaction between a network user and a network site, such as a website. The security server calculates a one-time-password based on the received transaction information and a secret shared by the security server and the network site, but not by the user. The security server transmits the calculated one-time-password for application as the user'"'"'s signature on the transaction. The one-time-password is independently calculable by the network site based on the shared secret.
-
Citations
20 Claims
-
1. A method of providing a user signature on a network transaction, comprising:
-
receiving, by a security server, transaction information representing a transaction between a network user and a network site; calculating, by the security server, a one-time-password based on (i) the received transaction information and (ii) a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret and the transaction information; and transmitting, by the security server, the calculated one-time-password for application as the user'"'"'s signature on the transaction. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A method of providing a user signature on a network transaction, comprising:
-
receiving, by one user agent on a user network device from the security server, a one-time-password corresponding to (i) transaction information representing a transaction between a user and a network site and (ii) a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret and the transaction related information; transferring the one time password from the one user agent to another user agent; and transmitting, by the other user agent to the network site, the calculated one-time-password as the user'"'"'s signature on the transaction. - View Dependent Claims (12)
-
-
13. A method of validating a user signature on a network transaction, comprising:
-
receiving, by a network site from a user network device, (i) transaction information representing a transaction between a user and the network site, and (ii) a one-time-password as the user'"'"'s signature on the transaction; calculating, by the network site, a one-time-password based on (i) the received transaction information and (ii) a secret shared by a security server and the network site, but not by the user; and verifying, by the network site, the signature based on a comparison of the received one-time-password and the calculated one-time-password.
-
-
14. A method of authenticating a user on a network, comprising:
-
receiving, by a security server, a request of a network site to have a user authenticated; calculating, by the security server, a one-time-password based on a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret; and transmitting, by the security server to a window displayed on a network device of the user, the calculated one-time-password for entry by the user onto a network page associated with the network site and displayed on another network device of the user, to authenticate the user. - View Dependent Claims (15, 16, 17)
-
-
18. A method of authenticating a user on a network, comprising:
-
receiving, by a user agent on a network device of a user, a one-time-password corresponding to a secret shared by a security server and a network site, but not by the user; transferring, by the user, the received one-time-password from the user agent on the network device to another user agent on another network device; and transmitting, by the other user agent to the network site, the transferred one-time-password to authenticate the user; wherein the one-time-password is independently calculable by the network site based on the shared secret. - View Dependent Claims (19)
-
-
20. A method of authenticating a user on a network, comprising:
-
transmitting, by a network site, a request to have a user authenticated; receiving, by the network site from a network device of the user, a one-time-password; calculating, by the network site, a one-time-password based on a secret shared by the security server and the network site, but not by the user; and comparing, by the network site, the received one-time-password and the calculated one-time-password to authenticate the user.
-
Specification