Method and system for secure registration, storage, management and linkage of personal authentication credentials data over a network

• US 7,155,739 B2
• Filed: 01/16/2001
• Issued: 12/26/2006
• Est. Priority Date: 01/14/2000
• Status: Active Grant

• Current Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Original Assignee: JBIP LLC
• Inventors: Hartmann, Joshua, Elkins, Scott R., Bari, Jonathan H.
• Primary Examiner(s): Revak, Christopher A.
• Application Number:
  US09/759,225
• Publication Number:
  US 20020023059A1
• Time in Patent Office: 2,170 Days
• Field of Search: 380/255, 713200-201
• US Class Current: 726/6
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for registering, storing and managing personal data for use over a network, and for allowing users to register for, link to and log onto third party Web sites. The invention queries a user for registration, authentication credentials information, such as user names, passwords, etc., for any type of application, and securely stores this data in a centralized user database. The invention prompts when registration/authentication is needed, and either manually with user intervention or automatically with user permission inputs stored data, or automatically creates the registration/authentication credential data for the user. The invention further monitors a user'"'"'s network browsing, detects when registration/authentication is needed, and either manually with user intervention or automatically with user permission inputs stored data, or automatically creates the registration/authentication credential data for the user. The invention then securely transmits authentication credentials data for automatic login at third party Web sites.

Claims

1. A method of managing and linking a user'"'"'s personal authentication credentials over a network, comprising the steps of:

registering the user with a secure network based system;

inputting the users user profile;

creating a personal homepage and personal database for the user that resides on the system;

inputting the user'"'"'s authentication credentials for a plurality of third parties into the personal database;

linking to one of the plurality of third parties by the user via the personal homepage and/or personal database;

retrieving and securely transmitting appropriate authentication credentials from the personal database on the system for the one of the plurality of third parties; and

logging the user onto the one of the plurality of third party sites.

2. The method of claim 1 wherein the step of registering comprises creating master authentication credentials and inputting same into the system by a first time user, and inputting the master authentication credentials by the user for each subsequent use of the system.

3. The method of claim 2 wherein the master authentication credentials include a unique user name and a unique password.

4. The method of claim 1 wherein the step of inputting authentication credentials for a plurality of third parties is performed by the user.

5. The method of claim 1, wherein the step of inputting authentication credentials for a plurality of third parties is performed by the system.

6. The method of claim 5, further comprising the steps of:

monitoring, by the system, the user'"'"'s activities;

determining, by the system, if a third party site requires input of user profile and/or authentication credentials;

checking, by the system, for user profile and/or authentication credentials in the system'"'"'s database related to the third party site, and if the user profile and/or authentication credentials exists;

automatically inputting, by the system, authentication credentials for the third party site.

7. The method of claim 6, wherein when, prior to when the system automatically inputs authentication credentials to third party sites, the system notifies the user and requests opt-in permission to do so.

8. The method of claim 7, wherein when the system requests opt-in permission, the notification to the user is audible, visual, and/or written.

9. The method of claim 6, wherein if the authentication credentials related to the third party site do not exist on the personal database, the system searches existing user profile and authentication credentials within the personal database and inputs relevant registration information and creates authentication credentials for the third party site until complete, and automatically registers the user at the third party site.

10. The method of claim 9, wherein if the third party site requires additional user profile and/or authentication credentials data not in the personal database, the system queries the user for the additional user profile and/or authentication credentials, automatically inputs additional user profile and creates authentication credentials for the third party site until complete, and automatically registers user at the third party site.

11. The method of claim 10, wherein the system automatically stores the complete user profile and/or authentication credentials for the third party site in the system'"'"'s database.

12. The method of claim 1 wherein the personal homepage and database contain authenticated links to the plurality of third parties.

13. The method of claim 12 wherein the step of linking comprises the step of clicking on a third party icon on the personal homepage.

14. The method of claim 1 wherein the step of linking comprises the step of clicking on a link to one of the plurality of third parties resident on the personal homepage and database.

15. The method of claim 1 wherein the step of linking comprises:

going to a third party Web site by the user;

clicking, by the user, on a representation of the system;

checking, by the system, if the user is registered with the system by requesting that the user input master authentication credentials;

checking, by the system, for existing authentication credentials for the third party Web site;

if authentication credentials for the third party Web site do not exist on the system, inputting authentication credentials for the third party Web site into the personal database by the user and/or the system and then linking to the third party site, retrieving and securely transmitting the authentication credentials for the third party Web site by the system;

if authentication credentials for the third party Web site exist on the system, retrieving and securely transmitting appropriate authentication credentials for the third party Web site by the system; and

logging the user onto the third party Web site.

16. The method of claim 15, wherein the step of going to a third party Web site by the user further comprises the steps of:

going, by the user, from the third party Web site to at least one second third party Web site;

initiating an authentication process;

retrieving from the system and/or the third party Web site and securely transmitting by the system and/or the third party Web site appropriate user authentication credentials for the at least one second third party Web site; and

logging the user into the at least one second third party Web site.

17. The method of claim 16 wherein the system and/or third party Web site encrypts the user profile and authentication credentials.

18. The method of claim 16 wherein the authentication process includes additional user profile data that is not authentication credentials.

19. The method of claim 15 wherein the user accesses the system and/or the third party sites using a device capable of accessing the network.

20. The method of claim 1 wherein the step of linking comprises the steps of:

inputting, by the user and/or the system, information about a third party Web site into system;

requesting, by the user, the system to search for the third party Web site; and

finding, by the system, the third party Web site and presenting a link to the third party Web site to the user.

21. The method of claim 1 wherein the step of retrieving and securely transmitting comprises the steps of:

opening a new browser window by the system;

linking to the third party Web site;

transporting user authentication credentials to the third party Web site by the system; and

inputting the authentication credentials to the third party Web site.

22. The method of claim 1 wherein the system encrypts the user profile and authentication credentials.

23. The method of claim 1 wherein the personal database contains additional user profile data that is not authentication credentials.

24. The method of claim 1, wherein the step of going to a third party site by the user further comprises the steps of:

going, by the user, from the third party site to at least one second third party site;

initiating an authentication process;

retrieving from the system and/or the third party site and securely transmitting by the system and/or the third party site appropriate user authentication credentials for the at least one second third party Web site; and

logging the user into the at least one second third party site.

25. The method of claim 24 wherein the system and/or third party site encrypts the user profile and authentication credentials.

26. The method of claim 24 wherein the authentication process includes additional user profile data that is not authentication credentials.

27. The method of claim 1 wherein the user accesses the system and/or the third party sites using a device capable of accessing the network.

28. The method of claim 1, further comprising the step of using a client-side application that contains customized information for the user.

29. The method of claim 28, wherein the personal database is securely synchronized from the system to the client-side application.

30. The method of claim 1, further comprising the step of, at the user'"'"'s and/or system'"'"'s request, of automatically revising the user'"'"'s user profile and/or authentication credentials for a plurality of third party sites in the personal database when the user alerts the system of a revision.

31. The method of claim 1, further comprising the step of creating a secure history of third party sites to which the user links.

32. The method of claim 1, further comprising the steps of:

checking, by the system, the plurality of third party sites'"'"' requirements for user profile and/or authentication credentials to ensure that the system'"'"'s database and/or the inputted user'"'"'s user profile and/or authentication credentials for each of the plurality of third parties is accurate;

and if any of the plurality of third parties'"'"' required user profile and/or authentication credentials change, updating the system'"'"'s database and/or user'"'"'s user profile and/or authentication credentials for the changed third parties.

33. The method of claim 1, further comprising the steps of:

checking, by the system, for additional third parties that require user profile and/or authentication credentials;

inputting into the system'"'"'s database, by the system, third party sites'"'"' requirements for user profile and/or authentication credentials for all additional third parties that so require.

62. The method of claim 14, further comprising the step of using a client-side application that contains customized information for the user.

63. The method of claim 62, wherein the personal database is securely synchronized from the system to the client-side application.

34. A method of creating business incentives during e-commerce comprising the steps of:

registering a user with a secure network based system;

inputting the user'"'"'s user profile;

registering a third party as a participating merchant with the system;

creating a personal homepage and personal database for the user that resides on the system;

inputting the user'"'"'s authentication credentials for a plurality of third parties, including at least one participating merchant, into the personal database;

linking to the at least one participating merchant by the user via the personal homepage and/or personal database;

retrieving and securely transmitting appropriate user profile and/or authentication credentials from the personal database on the system for the at least one participating merchant by the system;

logging the user onto the at least participating merchant;

purchasing a product by the user from the at least one participating merchant; and

receiving, by the system, compensation from the participating merchant.

35. The method of claim 34 wherein the step of registering comprises creating master authentication credentials and inputting same into the system by a first time user, and inputting the master credentials by the user for each subsequent use of the system.

36. The method of claim 35 wherein the master authentication credentials includes a unique user name and a unique password.

37. The method of claim 34 wherein the step of inputting authentication credentials for a plurality of third parties is performed by the user.

38. The method of claim 34, wherein the step of inputting authentication credentials for a plurality of third parties is performed by the system.

39. The method of claim 38, further comprising the steps of:

monitoring, by the system, the user'"'"'s activities;

determining, by the system, if a third party site requires input of user profile and/or authentication credentials;

checking, by the system, for user profile and/or authentication credentials in the database related to the third party site, and if the user profile and/or authentication credentials exists;

automatically inputting, by the system, user profile and/or authentication credentials for the third party site.

40. The method of claim 39, wherein prior to when the system automatically inputs user profile and/or authentication credentials, the system notifies the user and requests opt-in permission to do so.

41. The method of claim 40, wherein the notification to the user is audible, visual, or written.

42. The method of claim 39, wherein if the user profile and/or authentication credentials related to the third party site do not exist on the personal database, the system searches existing user profile and/or authentication credentials within the personal database and inputs relevant registration information including user profile and/or authentication credentials for the third party site until complete, and automatically registers the user at the third party site.

43. The method of claim 42, wherein if the third party site requires additional user profile and/or authentication credentials not in the personal database, the system queries the user for the additional user profile and/or authentication credentials, once received from the user the system automatically inputs the additional user profile and/or authentication credentials for the third party site until complete, and automatically registers user at the third party site.

44. The method of claim 43, wherein the system automatically stores the complete user profile and/or authentication credentials for the third party site in the personal database.

45. The method of claim 34 wherein the personal homepage and database contain authenticated links to the plurality of third parties.

46. The method of claim 34 wherein the step of linking comprises the step of clicking on a link to one of the plurality of third parties resident on the personal homepage and database.

47. The method of claim 34 wherein the step of linking comprises:

going to a third party Web site by the user;

clicking, by the user, on a representation of the system;

checking, by the system, if the user is registered with the system by requesting that the user input master authentication credentials;

checking, by the system, for existing authentication credentials for the third party Web site;

if authentication credentials for the third party Web site do not exist on the system, inputting authentication credentials for the third party Web site into the personal database by the user and/or the system, and then linking to the third party Web site, retrieving and securely transmitting the authentication credentials for the third party Web site by the system;

if authentication credentials for the third party Web site exist on the system, linking to the third party Web site, retrieving and securely transmitting appropriate authentication credentials for the third party Web site by the system; and

logging the user onto the third party Web site.

48. The method of claim 47 wherein the step of linking comprises the step of clicking on a third party icon on the personal homepage.

49. The method of claim 47, wherein the step of going to a third party Web site by the user further comprises the steps of:

going, by the user, from the third party Web site to at least one second third party Web site;

checking, by the system, for existing authentication credentials for the second third party Web site;

if authentication credentials for the second third party Web site do not exist on the system, inputting authentication credentials for the second third party Web site into the personal database by the user and/or the system, and then linking to the second third party Web site, retrieving and securely transmitting the authentication credentials for the second third party Web site by the system;

if authentication credentials for the second third party Web site exist on the system, linking to the second third party Web site, retrieving from the system and securely transmitting by the system appropriate user authentication credentials for the at least one second third party Web site; and

logging the user into the at least one second third party Web site.

50. The method of claim 49 wherein the system and/or third party Web site encrypts the user authentication credentials.

51. The method of claim 49 wherein the authentication process includes additional user profile data that is not authentication credentials.

52. The method of claim 47 wherein the user accesses the system and/or the third party Web sites using a device capable of accessing the network.

53. The method of claim 34 wherein the step of linking comprises the steps of:

inputting, by the user and/or by the system, information about a third party Web site into the system;

requesting, by the user, the system to search for the third party Web site; and

finding, by the system, the third party Web site and presenting a link to the third party Web site to the user.

54. The method of claim 34 wherein the step of retrieving and securely transmitting comprises the steps of:

opening a new browser window by the system;

linking to the third party Web site;

transporting user authentication credentials to the third party Web site by the system; and

inputting the authentication credentials to the third party Web site.

55. The method of claim 34 wherein the step of purchasing a product includes obtaining proprietary information from the third party Web site.

56. The method of claim 34 wherein compensation is a percentage of a price of the product purchased.

57. The method of claim 34 wherein compensation is based upon the online visit, and/or products purchased, and/or services purchased.

58. The method of claim 34, wherein the step of linking to the at least one participating merchant further comprises the steps of:

going, by the user, from the at least one participating merchant to at least one second third party Web site;

initiating an authentication process;

retrieving from the system and/or the at least one participating merchant and securely transmitting by the system and/or the at least one participating merchant site appropriate user authentication credentials for the at least one second third party Web site; and

logging the user into the at least one second third party Web site.

59. The method of claim 58 wherein the system and/or the at least one participating merchant encrypts the user profile and authentication credentials.

60. The method of claim 58 wherein the authentication process includes additional user profile data that is not authentication credentials.

61. The method of claim 34 wherein the user accesses the system and/or the at least one participating merchant using a device capable of accessing the network.

64. The method of claim 34, further comprising the step of automatically revising the user'"'"'s user profile and/or authentication credentials for a plurality of third party sites in the personal database when the user alerts the system of a revision.

65. The method of claim 34, further comprising the step of creating a secure history of third party sites to which the user links.

66. The method of claim 34, further comprising the step of receiving, by the user, compensation from the participating merchant.