USING SUCCESSIVE LEVELS OF AUTHENTICATION IN ONLINE COMMERCE

• US 20150257010A1
• Filed: 05/26/2015
• Published: 09/10/2015
• Est. Priority Date: 08/21/2001
• Status: Active Grant

• Current Assignee: Smartcom Labs OY
• Original Assignee: Bookit Oy Ajanvarauspalvelu
• Inventors: SALONEN, Jukka
• Granted Patent: US 9,807,614 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 2203/6081 Service authorization mechanisms
• CPC Class Codes: H04M 3/42382 Text-based messaging services in telephone networks such as PSTN/ISDN, e.g. User-to-User Signalling or Short Message Service for fixed networks
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A method comprising performing following acts on a network server: receiving a communication from a client terminal operated by a client; performing a first authentication of the client terminal or client; in response to the first authentication, delivering a first service to the client; after delivering the first service, sending an offer for a second service to the client terminal; receiving an acceptance message for the second service from the client terminal; performing a second authentication of the client terminal and/or the client; in response to receiving the acceptance message for the second service from the client terminal and to the second authentication being successful, delivering a second service to the client; wherein the first authentication and the second authentication use different authentication techniques. Other aspects include a programmed data processing apparatus for carrying out the method and a tangible program carrier instructing the apparatus to perform the acts.

Claims

1. A method comprising:

receiving, at a network server, a communication from a mobile device operated by a first user, the communication relating to a use of software;

performing, by the network server, a verification of the first user'"'"'s mobile device and/or the first user;

in response to a determination that the verification for the first user has been successful, the network server transmitting a first code to the first user'"'"'s mobile device enabling use of the software for a time period by the first user;

receiving a request at the network server to send a recommendation regarding the software to a second user having a mobile device, the received request being received from the first user'"'"'s mobile device and including an address of the second user'"'"'s mobile device;

performing, by the network server, a verification of the second user'"'"'s mobile device and/or the second user; and

the network server transmitting a second access or activation code to the first user enabling further use of the software by the first user in response to a determination that the verification for the second user has been successful.

2. The method of claim 1, further comprising:

during or after expiration of the time period, the network server sending to the first user'"'"'s mobile device an offer communication to purchase the software;

receiving, at the network server, an acceptance communication from the first user'"'"'s mobile device in response to the offer communication; and

the network server transmitting a code to the first user enabling further use of the software by the first user in response to receipt of the acceptance communication by the network server from the first user'"'"'s mobile device.

3. The method of claim 1, wherein the performing of the verification for the first user includes sending a verification communication to an address of the first user'"'"'s mobile device.

4. The method of claim 3, wherein the verification communication for the first user is a text message, Short Message Service message, Multimedia Message Service message, electronic-mail message or Web browser input.

5. The method of claim 3, wherein the verification communication included in the verification for the first user is sent from an address currently available for the network server to select for use in sending communications.

6. The method of claim 1, wherein the performing of the verification for the second user includes sending an authorization request communication to an address of the second user'"'"'s mobile device.

7. The method of claim 6, wherein the authorization request communication included of the verification for the second user is a text message, Short Message Service message, Multimedia Message Service message, electronic-mail message or Web browser input.

8. The method of claim 6, wherein the authorization request communication included in the verification for the second user is sent from an address currently available for the network server to select for use in sending communications.

9. The method of claim 1, wherein the performing the verification for the first user comprises, in response to receiving the software-related communication from the first user'"'"'s mobile device, the network server retrieving an address of the first user'"'"'s mobile device from a database and generating a message to be sent to the first user'"'"'s mobile device address based on the received software-related communication.

10. The method of claim 9, wherein the performing the verification for the first user further comprises causing the generated message to be sent from a first reply address to the retrieved mobile device address, wherein the first reply address is selected from a plurality of available reply addresses prior to sending the generated message.

11. The method of claim 10, wherein the performing the verification for the first user further comprises determining whether a reply message received at the first reply address from the first mobile device address authorizes registration of the software.

12. The method of claim 11, wherein determining whether the reply message authorizes the registration determines if the reply message is sent to the first reply address from the first user'"'"'s mobile device address.

13. A mediator for facilitating authentication of software use rights, the mediator comprising:

a network server that is coupled to at least one communication network to receive a user communication from a first user'"'"'s mobile device, the communication relating to use of software,

wherein the network server performs a verification of the first user'"'"'s mobile device and/or the first user,

wherein the network server transmits, in response to a determination that the verification for the first user has been successful, a first code to the first user'"'"'s mobile device enabling use of the software for a time period by the first user,

wherein, in response to the network server receiving a request to send a recommendation regarding the software to a second user having a mobile device, the received request being received from the first user'"'"'s mobile device and including an address of the second user'"'"'s mobile device, the network server performs a verification of the second user'"'"'s mobile device and/or the second user, and

wherein the network server transmits a second access or activation code to the first user enabling further use of the software by the user in response to a determination that the verification for the second user has been successful.

14. The mediator of claim 13, wherein, during or after expiration of the time period, the network server sends, to the first user'"'"'s mobile device, an offer communication to purchase the software;

the network server receives an acceptance communication from the first user'"'"'s mobile device in response to the offer communication, and

the network server transmits a code to the first user enabling further use of the software by the first user in response to receipt of the acceptance communication by the network server from the first user'"'"'s mobile device.

15. The mediator of claim 13, wherein the performing of the verification for the first user includes sending a verification communication to an address of the first user'"'"'s mobile device.

16. The mediator of claim 15, wherein the verification communication for the first user is a text message, Short Message Service message, Multimedia Message Service message, electronic-mail message or Web browser input.

17. The mediator of claim 15, wherein the verification communication included in the verification for the first user is sent from an address currently available for the network server to select for use in sending communications.

18. The mediator of claim 13, wherein the performing of the verification for the second user includes sending an authorization request communication to an address of the second user'"'"'s mobile device.

19. The mediator of claim 18, wherein the authorization request communication included of the verification for the second user is a text message, Short Message Service message, Multimedia Message Service message, electronic-mail message or Web browser input.

20. The mediator of claim 18, wherein the authorization request communication included in the verification for the second user is sent from an address currently available for the network server to select for use in sending communications.

21. The mediator of claim 13, wherein the performing the verification for the first user comprises, in response to receiving the software-related communication from the first user'"'"'s mobile device, the network server retrieving an address of the first user'"'"'s mobile device from a database and generating a message to be sent to the first user'"'"'s mobile device address based on the received software-related communication.

22. The mediator of claim 13, wherein the performing the verification for the first user further comprises causing the generated message to be sent from a first reply address to the retrieved mobile device address, wherein the first reply address is selected from a plurality of available reply addresses prior to sending the generated message.

23. The mediator of claim 22, wherein the performing the verification for the first user further comprises determining whether a reply message received at the first reply address from the first mobile device address authorizes registration of the software.

24. The mediator of claim 22, wherein determining whether the reply message authorizes the registration determines if the reply message is sent to the first reply address from the first user'"'"'s mobile device address.