DIGITAL AUTHENTICATION AND SECURITY METHOD AND SYSTEM

• US 20130151411A1
• Filed: 12/07/2012
• Published: 06/13/2013
• Est. Priority Date: 12/09/2011
• Status: Abandoned Application

• Current Assignee: Advanced Credit Technologies, Inc., Cartentech Llc
• Original Assignee: WorldPassKey Inc.
• Inventors: Carten, Mark
• Application Number:
  US13/707,761
• Publication Number:
  US 20130151411A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3821 Electronic credentials

Abstract

A method and system for activating a user account and digitally securing electronic transactions is disclosed. The method and system includes the steps providing a code and PIN, requesting the PIN, transmitting the PIN and code together to an authentication server, authenticating the code and PIN, flagging a status of a user'"'"'s account as “on”, transmitting the status of the user'"'"'s account to a client server, allowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “on”, and disallowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “off”. Once activated, the user may toggle their account “on” and “off” via a mobile device in order to provide an additional layer of security in order to complete transactions.

Claims

1. A method of authenticating and securing a digital transaction, comprising:

providing a code;

providing a personal identification number;

requesting the personal identification number;

transmitting the personal identification number and code together to an authentication server;

authenticating the code and personal identification number;

flagging a status of a user'"'"'s account as “

on”

;

transmitting the status of the user'"'"'s account to a client server;

allowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “

on”

; and

disallowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “

off”

.

2. The method of claim 1, further comprising flagging the status of the user'"'"'s account as “

off”

when the user logs out.

3. The method of claim 2, wherein a code is transmitted to the authentication server and client server, flagging the user'"'"'s account as “

off”

.

4. A method of activating a user'"'"'s account for secured digital transactions, comprising:

providing a code;

requesting a user'"'"'s phone number;

transmitting the phone number and the code to an authentication server;

transmitting an authorization attempt back to the phone number;

responding to the authorization attempt, confirming the activation of the user'"'"'s account;

logging the activation of the user'"'"'s account; and

transmitting an activation code to a client server, confirming activation of the user'"'"'s account.

5. The method of claim 4, further comprising transmitting a serial number to the authentication server.

6. The method of claim 4, further comprising transmitting an EIN to the authentication server.

7. The method of claim 4, wherein the user responds “

ok”

to the authorization attempt.

8. The method of claim 4, wherein the authorization attempt is transmitted via text message.

9. The method of claim 4, wherein the code is embedded in a mobile device.

10. The method of claim 4, wherein the code is encoded in an application for a mobile device.

11. The method of claim 4, wherein the communication between the user, the authorization server and the client server is via the Simple Object Access Protocol.

18. The system of claim 4, wherein the communication between the application, the authentication server and the client server is via the Simple Object Access Protocol.

12. A system of authenticating and securing a digital transaction, comprising:

an authentication server having a plurality of user accounts thereon;

a module on a client server having a plurality of user accounts thereon, corresponding to the plurality of user accounts on the authentication server;

each user account having an activation field, a status field and a phone number associated therewith;

an application configured and arranged to run on a mobile device, the mobile device having a phone number and a code thereon, the application configured and arranged to communicate with the client server and the authentication server, the phone number corresponding to a particular user account on the authentication server and the client server;

the authentication server configured and arranged to flag the status field and the activation field on and off via transmissions received and sent to the mobile device, by reference the mobile device phone number and code against a particular user account;

the authentication server further configured and arranged to transmit a change in the state of the status field and activation field to module on the client server; and

The module on the client server configured and arranged to allow and deny transactions based on the state of the status field and activation field.

13. The system of claim 12, wherein the mobile device is a smartphone.

14. The system of claim 12, wherein the application is further configured and arranged to transmit a serial number to the authentication server.

15. The system of claim 12, wherein the application is further configured and arranged to transmit an EIN to the authentication server.

16. The system of claim 12, wherein the application solicits a user response to an authorization attempt to activate a user'"'"'s account and transmits the user'"'"'s response to the authentication server.

17. The system of claim 16, wherein the authorization attempt is transmitted via text message.

19. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, said computer-readable program code executed to implement a method of authenticating and securing a digital transaction, the method comprising:

providing a code;

providing a personal identification number;

requesting the personal identification number;

transmitting the personal identification number and code together to an authentication server;

authenticating the code and personal identification number;

flagging a status of a user'"'"'s account as “

on”

;

transmitting the status of the user'"'"'s account to a client server;

allowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “

on”

; and

disallowing a digital transaction to proceed on the client server if the status of the user'"'"'s account is “

off”

.

20. The method of claim 19, further comprising flagging the status of the user'"'"'s account as “

off”

when the user logs out.

21. The method of claim 20, wherein a code is transmitted to the authentication server and client server, flagging the user'"'"'s account as “

off”

.

22. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, said computer-readable program code executed to implement a method of activating a user'"'"'s account for secured digital transactions, comprising:

providing a code;

requesting a user'"'"'s phone number;

transmitting the phone number and the code to an authentication server;

transmitting an authorization attempt back to the phone number;

responding to the authorization attempt, confirming the activation of the user'"'"'s account;

logging the activation of the user'"'"'s account; and

transmitting an activation code to a client server, confirming activation of the user'"'"'s account.

23. The method of claim 22, further comprising transmitting a serial number to the authentication server.

24. The method of claim 22, further comprising transmitting an EIN to the authentication server.

25. The method of claim 22, wherein the user responds “

ok”

to the authorization attempt.

26. The method of claim 22, wherein the authorization attempt is transmitted via text message.

27. The method of claim 22, wherein the code is embedded in a mobile device.

28. The method of claim 22, wherein the code is encoded in an application for a mobile device.

29. The method of claim 22, wherein the communication between the user, the authorization server and the client server is via the Simple Object Access Protocol.