Method for secure site and user authentication
First Claim
1. A method of authenticating a site on a network, comprising:
- receiving, by a security server from a web page that is (i) associated with a network site and (ii) displayed by a user'"'"'s network device, an identifier of the user'"'"'s network device and an identifier, including a referral or origin tag, of the network site;
determining, by the security server, the legitimacy of the network site based on the received network site identifier being on a particular black list or white list;
transmitting, by the security server in response to the receipt of the identifiers, an indication of legitimacy of the network site, or that the security server does not know if the network site is legitimate or not, that will cause display of a corresponding legitimacy indicator on both the web page and a pop-up window displayed by the user'"'"'s network device such that the user can compare the image in the web page with that in the pop-up to assure authenticity of the network site, wherein (i) the pop-up window is opened by the security server and operates independently of the web page, (ii) if the transmitted indication indicates that the network site is legitimate, the corresponding legitimacy indicator includes a first type visual cue in a first state and a random image chosen by the security server from a plurality of random images for display on both the web page and the pop-up window, wherein said image may be compared to ensure the authenticity of the pop-up and (iii) if the transmitted indication indicates that the network site is illegitimate, the corresponding legitimacy indicator includes the first type visual cue in a second state.
11 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides a new method of site and user authentication. This is achieved by creating a pop-up window on the user'"'"'s PC that is in communication with a security server, and where this communication channel is separate from the communication between the user'"'"'s browser and whichever web site they are at. A legitimate web site embeds code in the web page which communicates to the security server from the user'"'"'s desktop. The security server checks the legitimacy of the'"'"'web site and then signals both the web page on the user'"'"'s browser, as well as the pop-up window to which it has a separate channel. The security server also sends a random image to both the pop-up window and the browser. If user authentication is requested by the web site the user is first authenticated by the security server for instance by out of band authentication. Then the security server computes a one time password based on a secret it shares with the web site and sends it to the pop up window. The user copies this one time password into their browser which sends it to the web site, which can re-compute the one time password to authenticate the user.
-
Citations
13 Claims
-
1. A method of authenticating a site on a network, comprising:
-
receiving, by a security server from a web page that is (i) associated with a network site and (ii) displayed by a user'"'"'s network device, an identifier of the user'"'"'s network device and an identifier, including a referral or origin tag, of the network site; determining, by the security server, the legitimacy of the network site based on the received network site identifier being on a particular black list or white list; transmitting, by the security server in response to the receipt of the identifiers, an indication of legitimacy of the network site, or that the security server does not know if the network site is legitimate or not, that will cause display of a corresponding legitimacy indicator on both the web page and a pop-up window displayed by the user'"'"'s network device such that the user can compare the image in the web page with that in the pop-up to assure authenticity of the network site, wherein (i) the pop-up window is opened by the security server and operates independently of the web page, (ii) if the transmitted indication indicates that the network site is legitimate, the corresponding legitimacy indicator includes a first type visual cue in a first state and a random image chosen by the security server from a plurality of random images for display on both the web page and the pop-up window, wherein said image may be compared to ensure the authenticity of the pop-up and (iii) if the transmitted indication indicates that the network site is illegitimate, the corresponding legitimacy indicator includes the first type visual cue in a second state. - View Dependent Claims (2, 3, 4)
-
-
5. An article of manufacture for authenticating a site on a network, comprising:
-
a non-transitory storage medium; and
logic stored on the storage medium, wherein the stored logic is configured to be readable by a processor and thereby cause the processor to operate so as to;receive, from a web page that is (i) associated with a network site and (ii) displayed by a user'"'"'s network device, an identifier of the user'"'"'s network device and an identifier, including a referral or origin tag, of the network site; determine the legitimacy of the network site based on the received network site identifier being on a particular black list or white list; open a pop-up window for display on the user'"'"'s network device; transmit, in response to the receipt of the identifiers, an indication of legitimacy of the network site, or that it is indeterminable whether the network site is legitimate or not, that will cause display of a corresponding legitimacy indicator on both the web page and the pop-up window displayed by the user'"'"'s network device, such that the user can compare the image in the web page with that in the pop-up to assure authenticity of the network site, wherein (i) the pop-up window operates independently of the web page, (ii) if the transmitted indication indicates that the network site is legitimate, the corresponding legitimacy indicator includes a first type visual cue in a first state and a random image for display on both the web page and the pop-up window, wherein said image may be compared to ensure the authenticity of the pop-up, and (iii) if the transmitted indication indicates that the network site is illegitimate, the corresponding legitimacy indicator includes the first type visual cue in a second state. - View Dependent Claims (6, 7)
-
-
8. A system for authenticating a site on a network, comprising:
-
a device that comprises a processor and memory that stores instructions; and a communications port configured to receive, from a web page that is (i) associated with a network site and (ii) displayed by a user'"'"'s network device, an identifier of the user'"'"'s network device and an identifier, including a referral or origin tag, of the network site; and the processor configured with logic to determine the legitimacy of the network site based on the received network site identifier being on a particular black list or white list, open a pop-up window for display on the user'"'"'s network device, and to direct transmission of an indication of legitimacy of the network site, or that it is indeterminable whether the network site is legitimate or not, that will cause display of a corresponding legitimacy indicator on both the web page and the pop-up window displayed by the user'"'"'s network device such that the user can compare the image in the web page with that in the pop-up to assure authenticity of the network site; wherein (i) the pop-up window operates independently of the web page, (ii) if the network site is determined to be legitimate, the corresponding legitimacy indicator includes a first type visual cue in a first state and a random image for display on both the web page and the pop-up window, wherein said image may be compared to ensure the authenticity of the pop-up, and (iii) if the network site is determined to be illegitimate, the corresponding legitimacy indicator includes the first type visual cue in a second state. - View Dependent Claims (9, 10)
-
-
11. A method of authenticating a site on a network, comprising:
-
displaying, at a user'"'"'s network device, a web page associated with a network site and a pop up window associated with and opened by a security server; transmitting, from the web page to the security server, an identifier of the user'"'"'s network device and an identifier, including a referral or origin tag, of the network site; receiving, by the user'"'"'s network device from the security server in response to the transmission of the identifiers, an indication of legitimacy of the network site, or that the security server does not know if the network site is legitimate or not; and displaying, at a user'"'"'s network device, a legitimacy indicator corresponding to the received indication of legitimacy on both the web page and the pop-up such that the user can compare the image in the web page with that in the pop-up to assure authenticity of the network site; wherein (i) the pop-up window operates independently of the web page, (ii) if the received indication of legitimacy indicates that the network site is legitimate, the corresponding legitimacy indicator includes a first type visual cue in a first state, a second type visual cue and a random image chosen by the security server from a plurality of random images for display on both the web page and the pop-up window, wherein said image may be compared to ensure the authenticity of the pop-up and (iii) if the received indication of legitimacy indicates that the network site is illegitimate, the corresponding legitimacy indicator includes the first type visual cue in a second state. - View Dependent Claims (12, 13)
-
Specification