Instant log-in method for authentificating a user and settling bills by using two different communication channels and a system thereof

• US 8,024,567 B2
• Filed: 03/31/2003
• Issued: 09/20/2011
• Est. Priority Date: 03/30/2002
• Status: Expired due to Fees

• Current Assignee: Momocash Incorporated
• Original Assignee: Momocash Incorporated
• Inventors: Han, Min-Gyu
• Primary Examiner(s): Zia; Syed A.
• Application Number:
  US10/508,705
• Publication Number:
  US 20060179304A1
• Time in Patent Office: 3,095 Days
• Field of Search: None
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for authenticating a user of certain service provided by a system through a first communication channel, in one aspect including receiving an access request from a first terminal of the user through the first communication channel; receiving an address or number of a second terminal of the user through the first communication channel; transferring data including an identification code, to the second terminal of the user through a second communication channel; receiving a user confirmation response, including the user identification code, from the second terminal of the user through the second communication channel; determining whether the identification code transferred to the second terminal is identical to the user identification code received from the second terminal; generating an authentication code if it is determined that both the user identification codes are identical to each other; transferring the user authentication code to the first terminal of the user through the first communication channel.

Claims

1. A method for authenticating a user who wants to use a certain service provided by a system of a service provider through a first communication channel, the system of the service provider performing the steps of:

receiving an access request from a first terminal of the user through the first communication channel;

receiving an address or number of a second terminal of the user through the first communication channel, wherein the second terminal is a mobile communication terminal;

transferring data for user identification to said second terminal through a second communication channel, said data for user identification including a user identification code generated by the system of the service provider and address data for enabling the second terminal to send the user identification code back to the system of the service provider, wherein the second communication channel is a wireless network and the user identification code is transferred back to the system of the service provider upon the user pressing a send button on the second terminal;

receiving the user identification code from the second terminal through the second communication channel, said user identification code having been transferred from the second terminal to the system of the service provider by using the address data;

determining whether the user identification code transferred to the second terminal is identical to the user identification code received from the second terminal;

generating a user authentication code if it is determined that both the user identification codes are identical to each other; and

transferring the user authentication code from the system of the service provider to the first terminal through the first communication channel, wherein;

the address data include a callback number or callback uniform resource locator (URL) of a system for user identification, and

the data for user identification further include a prescribed identification symbol comprising a numeral, graphic image, or a special character such as an icon character, and

the method further comprises the steps of;

transferring the identification symbol to the first terminal through the first communication channel and controlling the identification symbol to be displayed on the first terminal;

controlling the identification symbol to be displayed on the second terminal; and

allowing the user to determine whether the identification symbol displayed on the first terminal is identical to the identification symbol displayed on the second terminal and receiving a user confirmation response from the user accordingly.

2. The method as claimed in claim 1, further comprising the step of storing the user identification code in a database means according to each user.

3. A method for performing a settlement for a certain service provided by a system of a service provider through a first communication channel, the system of the service provider performing the steps of:

receiving an address or number of a second terminal of the user from a first terminal of the user through the first communication channel, wherein the second terminal is a mobile communication terminal;

transferring data for user identification to the system of the service provider through a second communication channel, said data for user identification including a user identification code generated by the system of the service provider and address data for enabling the second terminal to send the user identification code back to the system of the service provider, wherein the second communication channel is a wireless network and the user identification code is included in a user confirmation response and transferred back to the system of the service provider upon the user pressing a send button on the second terminal;

receiving user confirmation response, including the user identification code, from the second terminal through the second communication channel, the second terminal transferring the user confirmation response to the system of the service provider by using the address data;

determining whether the user identification code transferred to the second terminal is identical to the user identification code included in the user confirmation code received from the second terminal; and

if it is determined that both the user identification codes are identical to each other, generating settlement information on the user and transferring the generated settlement information from the system of the service provider to a predetermined billing system, wherein;

the address data include a callback number or callback uniform resource locator (URL) of a system for settlement,

the data for user identification further include a prescribed identification symbol comprising a numeral, graphic image, or a special character such as an icon character, and

the method further comprises the steps of;

transferring the identification symbol to the first terminal through the first communication channel and controlling the identification symbol to be displayed on the first terminal;

controlling the identification symbol to be displayed on the second terminal; and

allowing the user to determine whether the identification symbol displayed on the first terminal is identical to the identification symbol displayed on the second terminal and receiving a user confirmation response from the user accordingly.

4. The method as claimed in claim 3, further comprising the step of causing the user to input a predetermined password into the second terminal.