Token for use in online electronic transactions

• US 7,437,757 B2
• Filed: 01/16/2003
• Issued: 10/14/2008
• Est. Priority Date: 09/09/2002
• Status: Expired due to Fees

• Current Assignee: U.S. Encode Corporation
• Original Assignee: U.S. Encode Corporation
• Inventors: Holdsworth, John
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Fields; Courtney D
• Application Number:
  US10/346,708
• Publication Number:
  US 20050044393A1
• Time in Patent Office: 2,098 Days
• Field of Search: 726/9, 726/20, 380/229, 713/172, 713/173, 713/174
• US Class Current: 726/9
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An online transaction system configured to implement authentication methods that allow for strong multi-factor authentication in online environments. The authentication methods can be combined with strong security methods to further ensure that the authentication process is secure. Further, the strong multi-factor authentication can be implemented with zero adoption dependencies through the implementation of automated enrollment methods.

Claims

1. A token configured to be interfaced with a terminal through a standard input device, the token comprising client software, which further comprises an autoplay module configured to initiate installation of the client software onto the terminal, configured to:

automatically enroll the token with an enrollment authority upon being interfaced with the terminal, wherein automatically enrolling the token comprises;

interfacing the token comprising a token identifier with the terminal through the standard input device,

automatically establishing a connection with an enrollment authority,

automatically checking the enrollment status of the token with the enrollment authority,

when the status check shows that the token is not enrolled, then generating a personal identifier and transmitting an enrollment message comprising the personal identifier to the enrollment authority, and

linking the personal identifier with account information stored on an enrollment authority server without requiring user intervention to begin the enrollment process; and

handle authentication requests received from an authentication authority by the terminal once the token is enrolled in the authentication program.

2. The token of claim 1, further configured to be interfaced with the terminal through a CD drive.

3. The token of claim 1, wherein the client software comprises a trigger module configured to act as a mediator between the client software and the authentication authority.

4. The token of claim 1, further comprising an installation module configured to handle installation of the client software onto the terminal.

5. The token of claim 1, further comprising an enrollment module configured to enroll the token with the enrollment authority.

6. The token of claim 1, further comprising a communications module configured to interface the terminal with the enrollment authority and handle communications between the client software and the enrollment authority.

7. The token of claim 1, wherein the client software further comprises a message format module configured to execute cryptogram extraction on messages received by the terminal and to format messages transmitted by the terminal.

8. The token of claim 1, wherein the client software further comprises a cryptographic module configured generate cryptogram responses to cryptogram requests received by the terminal.

9. The token of claim 1, further comprising a hole that allows the token to be interfaced with the terminal through the standard input device, wherein the hole is off center.

10. The token of claim 9, further comprising a chip configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the chip.

11. The token of claim 1, further comprising a network address that can be used by the client software to automatically connect with the enrollment authority.

12. The token of claim 1, further comprising a unique serial number that can be used by the client software to install the client software onto the terminal.

13. The token of claim 1, further comprising unique information that can be used by the client software to enroll token.

14. The token of claim 1, further comprising dynamic link libraries that can be installed on the terminal.

15. The token of claim 1, further comprising advertising information that can be displayed on the terminal.

16. The method in claim 1, wherein generating the personal identifier comprises receiving identifying information and including the identifying information in the enrollment message transmitted to the enrollment authority.

17. The method of claim 1, wherein automatically enrolling the token further comprises automatically generating the personal identifier.

18. The method of claim 1, wherein automatically enrolling the token further comprises acquiring unique information from the token and including the unique information in the enrollment message transmitted to the enrollment authority.

19. The method of claim 1, wherein automatically enrolling the token further comprises prompting a user associated with the token to determine if the user wants to enroll the token, before generating the personal identifier.

20. The method of claim 1, wherein automatically enrolling the token further comprises encrypting the enrollment message transmitted to the enrollment authority.

21. The method of claim 1, wherein automatically enrolling the token further comprises automatically establishing a connection with the enrollment authority comprises accessing a network address stored on the token and using the network address to establish the connection with the enrollment authority.

22. The token of claim 1, wherein the enrollment message is encrypted.

23. The token of claim 1, further configured to be interfaced with the terminal through a DVD drive.

24. The token of claim 9, further comprising an integrated circuit configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the integrated circuit.

25. The token of claim 9, further comprising a biometric configured to enable the token to be read by a Biometric Reader.

26. A token, comprising:

a hole that allows the token to be interfaced with a terminal through a standard input device, wherein the hole is off center; and

client software configured to;

automatically enroll the token with an enrollment authority upon being interfaced with the terminal; and

handle authentication requests received from an authentication authority by the terminal once the terminal is enrolled in the authentication program.

27. The token of claim 26, further configured to be interfaced with the terminal through a CD drive.

28. The token of claim 26, wherein the client software comprises a trigger module configured to act as a mediator between the client software and the authentication authority.

29. The token of claim 26, wherein the client software comprises an autoplay module configured to initiate installation of the client software onto the terminal.

30. The token of claim 26, further comprising an installation module configured to handle installation of the client software onto the terminal.

31. The token of claim 26, further comprising an enrollment module configured to enroll the token with the enrollment authority.

32. The token of claim 26, further comprising a communications module configured to interface the terminal with the enrollment authority and handle communications between the client software and the enrollment authority.

33. The token of claim 26, wherein the client software further comprises a message format module configured to execute cryptogram extraction on messages received by the terminal and to format messages transmitted by the terminal.

34. The token of claim 26, wherein the client software further comprises a cryptographic module configured generate cryptogram responses to cryptogram requests received by the terminal.

35. The token of claim 26, further comprising a chip configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the chip.

36. The token of claim 26, further comprising a network address that can be used by the client software to automatically connect with the enrollment authority.

37. The token of claim 26, further comprising a unique serial number than can be used by the client software to install the client software onto the terminal.

38. The token of claim 26, further comprising unique information that can be used by the client software to enroll token.

39. The token of claim 26, further comprising dynamic link libraries that can be installed on the terminal.

40. The token of claim 26, further comprising advertising information that can be displayed on the terminal.

41. The token of claim 26, wherein the enrollment message is encrypted.

42. The token of claim 26, further configured to be interfaced with the terminal through a DVD drive.

43. The token of claim 26, further comprising an integrated circuit configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the integrated circuit.

44. The token of claim 26, further comprising a biometric configured to enable the token to be read by a Biometric Reader.

45. A token, comprising;

dimensions that are compliant with the ISO 7811 standard for plastic cards and comprising a hole that allows the token to be interfaced with a terminal through a standard input device; and

client software comprising an autoplay module configured to initiate installation of the client software onto the terminal, configured to;

automatically enroll the token with an enrollment authority upon being interfaced with the terminal; and

handle authentication requests received from an authentication authority by the terminal once the terminal is enrolled in the authentication program.

46. The token of claim 45, further configured to be interfaced with the terminal through a CD drive.

47. The token of claim 45, wherein the client software comprises a trigger module configured to act as a mediator between the client software and the authentication authority.

48. The token of claim 45, further comprising an installation module configured to handle installation of the client software onto the terminal.

49. The token of claim 45, further comprising an enrollment module configured to enroll the token with the enrollment authority.

50. The token of claim 45, further comprising a communications module configured to interface the terminal with the enrollment authority and handle communications between the client software and the enrollment authority.

51. The token of claim 45, wherein the client software further comprises a message format module configured to execute cryptogram extraction on messages received by the terminal and to format messages transmitted by the terminal.

52. The token of claim 45, wherein the client software further comprises a cryptographic module configured generate cryptogram responses to cryptogram requests received by the terminal.

53. The token of claim 45, further comprising a chip configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the chip.

54. The token of claim 45, further comprising a network address that can be used by the client software to automatically connect with the enrollment authority.

55. The token of claim 45, further comprising a unique serial number than can be used by the client software to install the client software onto the terminal.

56. The token of claim 45, further comprising unique information that can be used by the client software to enroll token.

57. The token of claim 45, further comprising dynamic link libraries that can be installed on the terminal.

58. The token of claim 45, further comprising advertising information that can be displayed on the terminal.

59. The token of claim 45, wherein the token comprises a thickness of approximately 0.78 millimeters.

60. The token of claim 45, wherein the token comprises an overall thickness of approximately 1.2 millimeters.

61. The token of claim 45, wherein the enrollment message is encrypted.

62. The token of claim 45, further configured to be interfaced with the terminal through a DVD drive.

63. The token of claim 45, further comprising an integrated circuit configured to enable the token to be read by a smart card reader, wherein the hole is positioned to accommodate the integrated circuit.

64. The token of claim 45, further comprising a biometric configured to enable the token to be read by a Biometric Reader.