Method and apparatus for the secure identification of the owner of a portable device

• US 7,565,297 B2
• Filed: 10/17/2005
• Issued: 07/21/2009
• Est. Priority Date: 02/25/1999
• Status: Expired due to Fees

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Cidway Technologies, Ltd.
• Inventors: Labaton, Isaac J.
• Primary Examiner(s): Lerner, Martin
• Application Number:
  US11/252,980
• Publication Number:
  US 20060106606A1
• Time in Patent Office: 1,373 Days
• Field of Search: 704/500, 704/501, 704/273, 713/175, 713/176, 713/168, 713/155, 713/156, 713/182, 713/184, 713/157, 705/52, 705/53, 705/55, 705/56, 705/75, 705/67, 726/26
• US Class Current: 704/273
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

Methods for the authentication of a web site by a visitor to the web site. The visitor uses a device, such as a portable device like a cell phone to compute a dynamic identification string and a one-time password. The dynamic identification string is sent to a service provider, such as a certification service server associated with the web site. In response, the server computes a one-time password that is transmitted to the visitor'"'"'s device. The device computed one-time password can then be compared to the server computed one-time password in order to authenticate the web site.

Claims

1. A method for authenticating a web site, comprising the steps of:

distributing, between potential web site visitors, a device to compute a dynamic code and a one-time password;

providing the web site with a certification service server to receive the computed dynamic code and to compute the one-time password;

computing, by the device, the dynamic code;

computing by the device the one-time password corresponding to the computed dynamic code;

transmitting the computed dynamic code to the certification service server;

receiving the computed dynamic code by the certification service server;

computing the one-time password by the certification service server; and

comparing, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

2. The authentication method of claim 1, further comprising the steps of:

transmitting the certification service server computed one-time password to the device; and

wherein the step of comparing comprises;

comparing, by the device, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

3. The authentication method of claim 1, wherein the step of comparing comprises:

comparing, by the visitor, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

4. The authentication method of claim 3, further comprising the step of displaying the certification service server computed one-time password to the visitor.

5. A method for authenticating a service provider, comprising the steps of:

distributing, between potential service provider visitors, a device to compute a dynamic code and a one-time password;

providing the service provider with a certification service server to receive the computed dynamic code and to compute the one-time password;

computing, by the device, the dynamic code;

computing by the device the one-time password corresponding to the computed dynamic code;

transmitting the computed dynamic code to the certification service server;

receiving the computed dynamic code by the certification service server;

computing the one-time password by the certification service server; and

comparing the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.

6. The authentication method of claim 5, further comprising the steps of:

transmitting the certification service server computed one-time password to the device; and

wherein the step of comparing comprises;

comparing, by the device, the device computed one-time password to the received certification service server computed one- time password, in order to authenticate the service provider.

7. The authentication method of claim 5, wherein the step of comparing comprises:

comparing, by the visitor, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.

8. The authentication method of claim 7, further comprising the step of uttering the certification service server computed one-time password to the visitor.

9. A method for authenticating a web site, comprising the steps of:

providing a software module to compute a dynamic code and a one-time password;

providing the web site with a certification service server to receive the computed dynamic code and to compute the one-time password;

computing, by the software module, the dynamic code;

computing, by the software module, the one-time password corresponding to the computed dynamic code;

transmitting the computed dynamic code to the certification service server;

receiving the computed dynamic code by the certification service server;

computing the one-time password by the certification service server; and

comparing the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

10. The authentication method of claim 9, further comprising the steps of:

transmitting the certification service server computed one-time password to the software module; and

wherein the step of comparing comprises;

comparing, by the software module, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

11. The authentication method of claim 9, wherein the step of comparing comprises:

comparing, by a web site visitor, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.

12. The authentication method of claim 11, further comprising the step of displaying the certification service server computed one-time password to the visitor.

13. A method for authenticating a service provider, comprising the steps of:

providing a software module to compute a dynamic code and a one-time password;

providing the service provider with a certification service server to receive the computed dynamic code and to compute the one-time password;

computing, by the software module, the dynamic code;

computing, by the software module, the one-time password corresponding to the computed dynamic code;

transmitting the computed dynamic code to the certification service server;

receiving the computed dynamic code by the certification service server;

computing the one-time password by the certification service server; and

comparing the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.

14. The authentication method of claim 13, further comprising the steps of:

transmitting the certification service server computed one-time password to the software module; and

wherein the step of comparing comprises;

comparing, by the software module, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.

15. The authentication method of claim 13, wherein the step of comparing comprises:

comparing, by a web site visitor, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.

16. The authentication method of claim 15, further comprising the step of uttering the certification service server computed one-time password to the visitor.