Method and system for authenticating internet user identity

• US 8,370,909 B2
• Filed: 05/29/2007
• Issued: 02/05/2013
• Est. Priority Date: 05/29/2007
• Status: Expired due to Fees

• Current Assignee: Spriv LLC
• Original Assignee: Guy Heffez
• Inventors: Heffez, Guy
• Primary Examiner(s): Patel, Ashok
• Assistant Examiner(s): Lagor, Alexander
• Application Number:
  US12/600,808
• Publication Number:
  US 20100153733A1
• Time in Patent Office: 2,079 Days
• Field of Search: None
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

A method and system for authenticating an Internet user identity by cross-referencing and comparing at least two independent sources of information. A first geographical location of computer signature of an internet user is identified and the geographical location of a communication voice device of said internet user is identified to determine a second location. The first and second locations are compared for geographical proximity to confirm the identity of the internet user. Based upon geographical proximity of said locations, a score is assigned to the internet user, and access to a website is allowed or limited based upon said score. Alternatively, additional authentication information can be required or access can be terminated.

Claims

1. A computer-implemented method of authenticating an Internet user'"'"'s identity, the method comprising the computer-implemented steps of:

a) identifying, while an Internet user is communicating with an Internet website of an Internet vendor, a computer signature of a computer being used by the Internet user, comprising one or more common identifiers, wherein;

i) each common identifier of the one or more common identifiers comprises a non-unique identifier identifiable on at least one other computer on the Internet;

ii) at least one of the one or more common identifiers comprises an identifier of a software installed on the Internet user'"'"'s computer; and

iii) the Internet user'"'"'s computer is not in the possession or control of the Internet vendor;

b) checking a data structure to see if the computer signature is stored in the data structure, and

i) if the computer signature is not stored in the data structure, assigning, in the data structure, the Internet user'"'"'s computer signature to a first geographical location by using at least a geographical location of a mobile voice device, wherein the mobile voice device and the Internet user'"'"'s computer are in the possession and control of the Internet user;

or

ii) if the computer signature is stored in the data structure, determining a second geographical location of the mobile voice device of the Internet user; and

comparing the first geographical location assigned to the computer signature with the second geographical location and

iii) if the result of the comparison is within a predetermined acceptable distance value, providing to the internet user the ability to conduct a transaction.

2. The method of claim 1, wherein the computer signature is identified by identifying the computer comprising at least one common computer characteristic selected from the following list:

Gateway MAC Address shared with other users, operating system version, Router MAC Address shared with other users, disk size, Internet browser version, common hardware installed on the computer, network card speed, operating system patches, CPU speed, memory size, virtual memory size, cookie, secret cookie, and common software installed on the computer, wherein each common characteristic of the at least one common characteristic comprises a non-unique identifier identifiable on at least one other computer on the Internet.

3. The method of claim 1, wherein:

a) the mobile voice device comprises at least one of;

1) Personal Digital Assistant (“

PDA”

);

2) mobile telephone;

3) wireless communication device;

4) device with wireless Internet capability;

or

5) mobile computer;

b) the computer signature comprises at least one of;

1) unique computer signature comprising at least one common software identifier;

2) common software identifier;

3) hardware network identifier shared with other users;

4) few common computer identifier;

or

5) few common network identifier;

or

c) the computer signature is in any one of the following devices;

1) the Internet user'"'"'s computer;

2) terminal;

3) smart phone;

4) PDA;

or

5) any device capable of communicating with the Internet.

4. The method of claim 1, wherein the computer signature can be identified by identifying the computer that is connected to the Internet and wherein the at least one common identifier comprises at least one of:

a) a common identifier in the Internet user'"'"'s computer hardware;

b) a common identifier in the Internet user'"'"'s computer software;

c) a cookie;

d) an identifier in the Internet user'"'"'s network device shared with other users;

e) one or more common software components in the Internet user'"'"'s computer;

f) one or more common hardware components in the Internet user'"'"'s computer;

g) Internet user gateway MAC address;

h) network card MAC address shared with other users;

i) combination of common identifiers comprising at least one of the Internet user'"'"'s network characteristics and the Internet user'"'"'s;

j) common identifier in the Internet user'"'"'s computer;

k) network device characteristic shared with other users;

l) common software identifier;

m) hardware network identifier shared with other users;

n) combination of few common identifiers together to create one unique computer identifier;

o) any one or combination of the following, associated with the computer signature;

i) Computer Network MAC address shared with other users;

ii) Gateway or Router MAC Address shared with other users;

iii) Operating system version;

iv) Disk Size;

v) Internet browser version;

vi) common hardware information installed on the computer;

viii) network card speed;

ix) Operating system patches installed on the computer;

x) CPU speed;

xi) memory size;

xii) cookie;

xiii) secret cookie; and

xiv) virtual memory size.

5. The method of claim 1, wherein the step of determining the location of the mobile voice device comprises use of at least one of the following systems:

a) Global Positioning Systems (GPS);

b) Galileo

c) WiMAX™

d) WiFi;

e) BLUETOOTH™

;

f) MIMO;

g) UWB;

h) RFID;

i) Cellular triangulation;

j) Cellular base stations;

or

k) Cellular antennas.

6. The method of claim 1 wherein the mobile voice device comprises is at least one of:

a) Personal Digital Assistant (“

PDA”

);

b) mobile telephone;

c) wireless communication device;

d) device with wireless Internet capability; and

e) mobile computer.

7. The method of claim 1 wherein the computer signature is identified by identifying the computer that comprises the at least one common identifier, wherein each common identifier of the at least one common identifier comprises a non-unique identifier identifiable on at least one other computer on the Internet, the at least one common identifier comprising at least one of:

a) common software identifier;

b) hardware network identifier shared with other users;

c) common computer identifier; and

d) common network identifier.

8. The method of claim 1 wherein the computer signature can be in any one of the following devices:

a) the Internet user'"'"'s computer;

b) terminal;

c) smart phone;

d) PDA; and

e) any device capable of communicating with the Internet.

9. A computer-implemented method of comparing a geographical location associated with an Internet user'"'"'s computer signature with a geographical location of a mobile voice device of the Internet user, the method comprising the computer-implemented steps of:

a) determining a first geographical location using at least a geographical location of at least one mobile voice device of the Internet user;

b) identifying, while the Internet user is communicating with an Internet website of an Internet vendor, a computer signature of the Internet user'"'"'s computer, wherein the computer signature comprises at least one common identifier installed on the computer, wherein;

i) each common identifier of the one or more common identifiers comprises a non-unique identifier identifiable on at least one other computer on the Internet;

ii) at least one identifier of the common identifiers comprises an identifier of a software installed on the Internet user'"'"'s computer; and

iii) the Internet user'"'"'s computer is not in the possession or control of the Internet vendor;

c) assigning, in a data structure, a geographical location to the computer signature using at least the first geographical location, wherein the computer and the mobile voice device are in the possession and control of the Internet user;

d) receiving a request that originated from the Internet user, wherein the request includes the computer signature;

e) determining a second geographical location using at least one mobile voice device of the Internet user;

f) comparing the geographical location assigned to the received computer signature to the second geographical location.

10. The method of claim 9, wherein the computer signature is identified by identifying the computer comprising at least one common computer characteristic selected from the following list:

Gateway MAC Address shared with other users, operating system version, Router MAC Address shared with other users, disk size, Internet browser version, common hardware installed on the computer, network card speed, operating system patches, CPU speed, memory size, virtual memory size, cookie, secret cookie, and common software installed on the computer, wherein each common characteristic of the at least one common characteristic comprises a non-unique identifier identifiable on at least one other computer on the Internet.

11. The method of claim 9 further comprising the step of determining if a result obtained by the comparing of the geographical location of the computer signature of the Internet user with the geographical location of the mobile voice device of the Internet user is within a predetermined distance value.

12. The method of claim 9 wherein:

a) the mobile voice device comprises at least one of;

1) Personal Digital Assistant (“

FDA”

);

2) mobile telephone;

3) wireless communication device;

4) device with wireless Internet capability;

or

5) mobile computer;

b) the computer signature comprises at least one of;

1) unique computer signature comprising at least one common software identifier;

2) common software identifier;

3) hardware network identifier shared with other users;

4) few common computer identifier;

or

5) few common network identifier;

or

c) the computer signature is in any one of the following devices;

1) the Internet user'"'"'s computer;

2) terminal;

3) smart phone;

4) PDA;

or

5) any device capable of communicating with the Internet.

13. The method of claim 9, wherein the computer signature can be identified by identifying the computer that is connected to the Internet, and wherein the at least one common identifier comprising at least one of:

a) a common identifier in the Internet user'"'"'s computer hardware;

b) a common identifier in the Internet user'"'"'s computer software;

c) a cookie;

d) an identifier in the Internet user'"'"'s network device shared with other users;

e) one or more common software components in the Internet user'"'"'s computer;

f) one or more common hardware components in the Internet user'"'"'s computer;

g) Internet user gateway MAC address;

h) network card MAC address shared with other users;

i) combination of common identifiers comprising at least one of the Internet user'"'"'s network characteristics and the Internet user'"'"'s;

j) common identifier in the Internet user'"'"'s computer;

k) network device characteristic shared with other users;

l) common software identifier;

m) hardware network identifier shared with other users;

n) combination of few common identifiers together to create one unique computer identifier;

o) any one or combination of the following, associated with the computer signature;

i) Computer Network MAC address shared with other users;

ii) Gateway or Router MAC Address shared with other users;

iii) Operating system version;

iv) Disk Size;

v) Internet browser version;

vi) common hardware information installed on the computer;

viii) network card speed;

ix) Operating system patches installed on the computer;

x) CPU speed;

xi) memory size;

xii) cookie;

xiii) secret cookie; and

xiv) virtual memory size.

14. The method of claim 9, wherein the step of determining the location of the mobile voice device comprises use of at least one of the following systems:

a) Global Positioning Systems (GPS);

b) Galileo

c) WiMAX™

d) WiFi;

e) BLUETOOTH™

;

f) MIMO;

g) UWB;

h) RFID;

i) Cellular triangulation;

j) Cellular base stations;

or

k) Cellular antennas.

15. The method of claim 9, wherein the mobile voice device comprises is at least one of:

a) Personal Digital Assistant (“

PDA”

);

b) mobile telephone;

c) wireless communication device;

d) device with wireless Internet capability; and

e) mobile computer.

16. The method of claim 9, wherein the computer signature is identified by identifying the computer that comprises at least the one common identifier, wherein each common identifier of the at least one common identifier comprises a non-unique identifier identifiable on at least one other computer on the Internet, the at least one common identifier comprising at least one of:

a) common software identifier;

b) hardware network identifier shared with other users;

c) common computer identifier; and

d) common network identifier.

17. The method of claim 9, wherein the computer signature can be in any one of the following devices:

a) the Internet user'"'"'s computer;

b) terminal;

c) smart phone;

d) PDA; and

e) any device capable of communicating with the Internet.

18. A computer-implemented method of making a geographical comparison between a location associated with a computer signature identified by identifying at least one common computer identifier and a geographical location associated with an Internet Protocol Address, the method comprising the computer-implemented steps of:

a) determining a first geographical location using at least a geographical location of at least one mobile voice device of the Internet user;

b) identifying, while the Internet user is communicating with an Internet website of an Internet vendor, a computer signature of the Internet user'"'"'s computer by identifying a computer comprising at least one common identifier installed on the computer, wherein;

i) each common identifier of the one or more common identifiers comprises a non-unique identifier identifiable on at least one other computer on the Internet;

ii) at least one identifier of the common identifiers comprises an identifier of a software installed on the Internet user'"'"'s computer; and

iii) the Internet user'"'"'s mobile voice device is not in the possession or control of the Internet vendor;

c) assigning, in a data structure, a geographical location to the computer signature using at least the first geographical location, wherein the computer and the mobile voice device are in use by the Internet user;

d) receiving a request that originated from the Internet user, wherein the request includes the computer signature and the Internet user'"'"'s IP address;

e) identifying the IP address geographical location;

f) comparing the geographical location assigned to the received computer signature to the IP address geographical location.

19. The method of claim 18, wherein the computer signature is identified by identifying the computer comprising at least one common computer characteristic selected from the following list:

Gateway MAC Address shared with other users, operating system version, Router MAC Address shared with other users, disk size, Internet browser version, common hardware installed on the computer, network card speed, operating system patches, CPU speed, memory size, virtual memory size, cookie, secret cookie, and common software installed on the computer, wherein each common characteristic of the at least one common characteristic comprises a non-unique identifier identifiable on at least one other computer on the Internet.

20. The method of claim 18 further comprising the step of determining if a result obtained by the comparing of the geographical location of the computer signature of the Internet user with the geographical location of the mobile voice device of the Internet user is within a predetermined distance value.

21. The method of claim 18 wherein:

a) the mobile voice device comprises at least one of;

1) Personal Digital Assistant (“

FDA”

);

2) mobile telephone;

3) wireless communication device;

4) device with wireless Internet capability;

or

5) mobile computer;

b) the computer signature comprises at least one of;

1) unique computer signature comprising at least one common software identifier;

2) common software identifier;

3) hardware network identifier shared with other users;

4) few common computer identifier;

or

5) few common network identifier;

or

c) the computer signature is in any one of the following devices;

1) the Internet user'"'"'s computer;

2) terminal;

3) smart phone;

4) PDA;

or

5) any device capable of communicating with the Internet.

22. The method of claim 18, wherein the computer signature can be identified by identifying the computer that is connected to the Internet, and wherein the at least one common identifier comprising at least one of:

a) a common identifier in the Internet user'"'"'s computer hardware;

b) a common identifier in the Internet user'"'"'s computer software;

c) a cookie;

d) an identifier in the Internet user'"'"'s network device shared with other users;

e) one or more common software components in the Internet user'"'"'s computer;

f) one or more common hardware components in the Internet user'"'"'s computer;

g) Internet user gateway MAC address;

h) network card MAC address shared with other users;

i) combination of common identifiers comprising at least one of the Internet user'"'"'s network characteristics and the Internet user'"'"'s;

j) common identifier in the Internet user'"'"'s computer;

k) network device characteristic shared with other users;

l) common software identifier;

m) hardware network identifier shared with other users;

n) combination of few common identifiers together to create one unique computer identifier;

o) any one or combination of the following, associated with the computer signature;

i) Computer Network MAC address shared with other users;

ii) Gateway or Router MAC Address shared with other users;

iii) Operating system version;

iv) Disk Size;

v) Internet browser version;

vi) common hardware information installed on the computer;

viii) network card speed;

ix) Operating system patches installed on the computer;

x) CPU speed;

xi) memory size;

xii) cookie;

xiii) secret cookie; and

xiv) virtual memory size.

23. The method of claim 18, wherein the step of determining the location of the mobile voice device comprises use of at least one of the following systems:

a) Global Positioning Systems (GPS);

b) Galileo

c) WiMAX™

d) WiFi;

e) BLUETOOTH™

;

f) MIMO;

g) UWB;

h) RFID;

i) Cellular triangulation;

j) Cellular base stations;

or

k) Cellular antennas.

24. The method of claim 18, wherein the mobile voice device comprises is at least one of:

a) Personal Digital Assistant (“

PDA”

);

b) mobile telephone;

c) wireless communication device;

d) device with wireless Internet capability; and

e) mobile computer.

25. The method of claim 18, wherein the computer signature is identified by identifying a computer that comprises the at least one common identifier, the at least one common identifier comprising at least one of:

a) common software identifier;

b) hardware network identifier shared with other users;

c) common computer identifier; and

d) common network identifier.

26. The method of claim 18, wherein the computer signature can be in any one of the following devices:

a) the Internet user'"'"'s computer;

b) terminal;

c) smart phone;

d) PDA; and

e) any device capable of communicating with the Internet.

27. A computer-implemented method of making a geographical comparison between a location associated with a computer signature and a geographical location of a router in path to an Internet user'"'"'s IP address, the method) comprising the computer-implemented steps of:

a) identifying, while the Internet user is communicating with an Internet website of an Internet vendor, the computer signature, wherein;

i) the computer signature is identified by identifying a computer comprising at least one common identifier;

ii) each common identifier of the at least one common identifier comprises a non-unique identifier identifiable on at least one other computer on the Internet; and

iii) at least one identifier of the at least one common identifier comprises an identifier of at least one software installed on the computer; and

iv) the Internet user'"'"'s computer is not in the possession or control of the Internet vendor;

b) assigning, in a data structure, the location of at least a mobile voice device to the computer signature;

c) receiving a request that originated from the Internet user, wherein the request includes the computer signature and an IP Address in use by the Internet user;

d) determining an IP address of a router in a path to the IP address in use by the Internet user;

e) determining the geographical location of the router in the path to the IP address in use by the Internet user; and

f) comparing the geographical location of the router in the path to the IP address in use by the Internet user with the location associated with the computer signature.

28. The method of claim 27, wherein the computer signature is identified by identifying the computer comprising at least one common computer characteristic selected from the following list:

Gateway MAC Address shared with other users, operating system version, Router MAC Address shared with other users, disk size, Internet browser version, common hardware installed on the computer, network card speed, operating system patches, CPU speed, memory size, virtual memory size, cookie, secret cookie, and common software installed on the computer, wherein each common characteristic of the at least one common characteristic comprises a non-unique identifier identifiable on at least one other computer on the Internet.

29. The method of claim 27 further comprising the step of determining if a result obtained by the comparing of the geographical location of the computer signature of the Internet user with the geographical location of the mobile voice device of the Internet user is within a predetermined distance value.

30. The method of claim 27 wherein:

a) the mobile voice device comprises at least one of;

1) Personal Digital Assistant (“

FDA”

);

2) mobile telephone;

3) wireless communication device;

4) device with wireless Internet capability;

or

5) mobile computer;

b) the computer signature comprises at least one of;

1) unique computer signature comprising at least one common software identifier;

2) common software identifier;

3) hardware network identifier shared with other users;

4) few common computer identifier;

or

5) few common network identifier;

or

c) the computer signature is in any one of the following devices;

1) the Internet user'"'"'s computer;

2) terminal;

3) smart phone;

4) PDA;

or

5) any device capable of communicating with the Internet.

31. The method of claim 27, wherein the computer signature can be identified by identifying the computer that is connected to the Internet, and wherein the at least one common identifier comprising at least one of:

a) a common identifier in the Internet user'"'"'s computer hardware;

b) a common identifier in the Internet user'"'"'s computer software;

c) a cookie;

d) an identifier in the Internet user'"'"'s network device shared with other users;

e) one or more common software components in the Internet user'"'"'s computer;

f) one or more common hardware components in the Internet user'"'"'s computer;

g) Internet user gateway MAC address;

h) network card MAC address shared with other users;

i) combination of common identifiers comprising at least one of the Internet user'"'"'s network characteristics and the Internet user'"'"'s;

j) common identifier in the Internet user'"'"'s computer;

k) network device characteristic shared with other users;

l) common software identifier;

m) hardware network identifier shared with other users;

n) combination of few common identifiers together to create one unique computer identifier;

o) any one or combination of the following, associated with the computer signature;

i) Computer Network MAC address shared with other users;

ii) Gateway or Router MAC Address shared with other users;

iii) Operating system version;

iv) Disk Size;

v) Internet browser version;

vi) common hardware information installed on the computer;

viii) network card speed;

ix) Operating system patches installed on the computer;

x) CPU speed;

xi) memory size;

xii) cookie;

xiii) secret cookie; and

xiv) virtual memory size.

32. The method of claim 27, wherein the step of determining the location of the mobile voice device comprises use of at least one of the following systems:

a) Global Positioning Systems (GPS);

b) Galileo

c) WiMAX™

d) WiFi;

e) BLUETOOTH™

;

f) MIMO;

g) UWB;

h) RFID;

i) Cellular triangulation;

j) Cellular base stations;

or

k) Cellular antennas.

33. The method of claim 27, wherein the mobile voice device comprises is at least one of:

a) Personal Digital Assistant (“

PDA”

);

b) mobile telephone;

c) wireless communication device;

d) device with wireless Internet capability; and

e) mobile computer.

34. The method of claim 27, wherein the computer signature is identified by identifying a computer that comprises at least one common identifier, wherein each common identifier of the at least one common identifier comprises a non-unique identifier identifiable on at least one other computer on the Internet, the at least one common identifier comprising at least one of:

a) common software identifier;

b) hardware network identifier shared with other users;

c) common computer identifier; and

d) common network identifier.

35. The method of claim 27, wherein the computer signature can be in any one of the following devices:

a) the Internet user'"'"'s computer;

b) terminal;

c) smart phone;

d) PDA; and

e) any device capable of communicating with the Internet.