System and method of using the public switched telephone network in providing authentication or authorization for online transaction

• US 7,574,733 B2
• Filed: 06/15/2005
• Issued: 08/11/2009
• Est. Priority Date: 12/15/1999
• Status: Expired due to Term

• Current Assignee: Payfone Incorporated
• Original Assignee: Authentify, Inc. (Bank of America Corp.)
• Inventors: Woodhill, James R.
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US11/153,764
• Publication Number:
  US 20050245257A1
• Time in Patent Office: 1,518 Days
• Field of Search: 726/5
• US Class Current: 726/5
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention
• CPC Class Codes: H04M 7/128 Details of addressing, directories or routing tables

Abstract

An authentication or authorization system to facilitate electronic transactions uses simultaneous or substantially simultaneous communications on two different networks to verify a user'"'"'s identity. When a user logs onto a site, via the internet, a telephone number, either pre-stored or obtained in real time from the visitor, where the visitor can be called essentially immediately is used to set up, via the switched telephone network another communication link. Where the user has multiple communication links available, the telephone call is automatically placed via the authentication or authorization software simultaneously while the user is on-line. In the event that the user has only a single communication link, that individual will have to log off temporarily for purposes of receiving the telephone call. Confirmatory information is provided via the internet to the user. The automatically placed telephone call requests that the user feed back this confirmatory information for verification purposes. The telephone number which is being called is adjacent to the user'"'"'s internet terminal. The user'"'"'s response, via the telephone network, can be compared to the originally transmitted confirmatory information to determine whether the authentication or authorization process should go forward.

Claims

1. An authorization system comprising:

first and second electronic networks which are, at least in part, different;

first and second terminals, with each terminal associated with a respective network;

instructions for receiving an inquiry from the first terminal, via the first network;

instructions for establishing a communications link, on the second network, with the second terminal;

instructions for transmitting confirmatory information, via one of the networks, to the respective terminal with a request that the information be returned via the other network;

instructions for receiving the information, via the other network from a respective terminal; and

instructions, responsive to the received information for conducting an authorization process and for generating an authorization related indicium.

2. A system as in claim 1 wherein the one network comprises a switched telephone system with a wireless portion.

3. A system as in claim 2 wherein the terminal associated with the one network comprises one of a land line telephone or a wireless phone.

4. A system as in claim 2 wherein the communications link of the one network is established simultaneously with another communications link using the other network.

5. A system as in claim 2 which includes instructions for displaying the confirmatory information on the first terminal.

6. A system as in claim 1 including instructions for authorizing a charge to a financial account wherein the inquiry from the first terminal includes a financial account designator.

7. A system as in claim 6 wherein the instructions for conducting an authorization process comprise instructions for evaluating if a proposed charge to the designated account will be accepted.

8. A system as in claim 7 for authorizing a charge to a credit-type account wherein the instructions for evaluating comprise instructions for determining if a proposed charge to a designated credit-type account will be accepted as an increase to an amount due on the respective account.

9. A system as in claim 1 which includes additional instructions to transmit different information via the other network.

10. A system as in claim 9 where the response is at least in part verbal.