Verification system for information transfers over a computer network

• US 6,405,319 B1
• Filed: 01/27/2000
• Issued: 06/11/2002
• Est. Priority Date: 01/27/2000
• Status: Expired due to Fees

• Current Assignee: iSqFt, Inc. (Roper Technologies, Inc.)
• Original Assignee: BuildPoint Corp. (Roper Technologies, Inc.)
• Inventors: Hsu, William, Lai, Michael C., Daley, Peter A., Arnold, Nicolas Georg, Ghosh, Narendra K.
• Primary Examiner(s): Wright, Norman M.
• Application Number:
  US09/492,886
• Time in Patent Office: 866 Days
• Field of Search: 713/201, 713/200, 713/202, 380/283, 380/278
• US Class Current: 726/3
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A system for validating network communication, such as e-mail. A person sending information to a previously unverified recipient first enters “Address Book” information about the unverified recipient into the sender'"'"'s e-mail system. Part of this initial information includes the recipient'"'"'s e-mail address and a way of communicating with the intended recipient other than by using the e-mail address. For example, regular mail, fax, or other means can be specified. When the sender sends the information to the intended recipient, the recipient is not able to receive the information until an identification code is entered by the intended recipient. The identification code is transferred via the different way of communicating that does not use the intended recipient'"'"'s e-mail address. For example, the code can be sent via fax. The intended recipient then logs on to the e-mail system and enters their user name and the code. When the recipient logs on for the first time and enters the QAN, the recipient'"'"'s e-mail account is associated with the sender'"'"'s entry for that intended user in the sender'"'"'s private address book. Provision is also made for a representative of the recipient, as opposed to the actual recipient, to perform the logon and receive the information. As part of the logon process, the person logging in is asked to attest that they are the intended recipient or a representative of the intended recipient. The initial logging on of the intended recipient, or the intended recipient'"'"'s representative, generates an automatic fax to the intended recipient'"'"'s fax number. This is the same fax number as used to convey the QAN to the intended recipient. This fax upon login acts to defeat any attempt by an outside party to intercept and use the QAN to log on and impersonate the intended recipient. The fax verification upon login is repeated for the first 5 to 10 documents sent by e-mail to recipients who are new users of the system.

Claims

1. A method for validating communications between a sending system and a human recipient over a computer network, the method comprising:

associating a network contact address with the human recipient;

causing an initial send of information from the sending system to the human recipient over the computer network;

in response to the step of initiating a send, generating an information access code for accessing the information;

providing the information access code to the human recipient by a method that does not use the network contact address;

the information access code being received without using the contact address; and

detecting the submission of the information access code in association with the network contact address before completing the send of information from the sending system to the human recipient over the computer network.

2. The method of claim 1, wherein the network contact address is an e-mail address.

3. The method of claim 1, wherein the method that does not use the network contact address is one of the following:

mail, fax, telephone, telegram, videoconference, word-of-mouth.

4. The method of claim 1, further comprising the step of accepting an attestment that the human recipient is the intended receiver before completing the send of information from the sending system to the human recipient.

5. The method of claim 1, further comprising the step of sending backup notification for a send of information to the human recipient, wherein the backup notification is accomplished by a method that does not use the network contact address.

6. The method of claim 5, wherein the step of sending backup notification is repeated for a predetermined number of sends after the step of detecting the submission of the information access code.

7. The method of claim 1, further comprising associating initial information about the human recipient with the network contact address prior to the step of causing an initial send of information;

allowing the human recipient to provide information about the human recipient; and

subsequent to the step of detecting the submission of the information access code, performing the step of updating the initial information with the provided information about the human recipient.