Authentication using a transaction history

• US 8,732,089 B1
• Filed: 05/03/2007
• Issued: 05/20/2014
• Est. Priority Date: 05/03/2007
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Fang, Peter C., Lehmann, Sebastian
• Primary Examiner(s): Nigh, James D
• Application Number:
  US11/797,455
• Time in Patent Office: 2,574 Days
• Field of Search: 705/44, 705/67, 705/76
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Systems and methods are provided for authenticating a user. In one implementation, a computer-implemented method is provided. According to the method, transaction history information for each one of a set of users is maintained in a storage device. The method provides identifiers associated with items for display and receives, from one of the users, a selection of one or more of the identifiers. The method further authenticates the user as a function of the selection and a transaction history of the user.

Claims

1. A computer-implemented method for authenticating a user, the method comprising:

maintaining, in a storage device, an electronic catalog comprising a plurality of items available for purchase;

maintaining, in a storage device, a transaction history of a user, the transaction history comprising information identifying items, in the electronic catalog, previously purchased by the user;

selecting, using a computer, a plurality of items for presentation to the user, the plurality of items comprising at least one item, in the electronic catalog, previously purchased by the user and a plurality of items, in the electronic catalog, not previously purchased be the user;

detecting, using the computer, a trigger associated with an operation performed be the user, the operation comprising a user selection of at least a portion of a web page;

presenting, using the computer, a plurality of identifiers associated with the plurality of items to the user in response to the detected trigger;

receiving, using the computer, from the user, a selection of one or more of the identifiers;

determining, using the computer, whether the selected one or more identifiers correspond with items previously purchased by the user; and

authenticating, using the computer, the user when the selected one or more identifiers correspond with items previously purchased by the user.

2. The method of claim 1, wherein authenticating comprises:

failing to authenticate the user when one or more of the selected identifiers is not included in the transaction history as an item previously purchased by the user.

3. The method of claim 1, wherein the identifiers comprise images of products.

4. The method of claim 1, wherein the identifiers comprise images of products and text.

5. The method of claim 1, wherein the trigger comprises a validation of a username and a password submitted by the user.

6. The method of claim 1, further comprising detecting, using the computer, wherein the trigger comprises a user selection of a link to user profile information and presenting, using the computer, the plurality of identifiers associated with the plurality of items to the user in response to the detected user selection.

7. The method of claim 1, wherein the trigger comprises a user selection of a new item for purchase.

8. The method of claim 1, further comprising:

identifying, using the computer, in the transaction history, the at least one item in the electronic catalog previously purchased by the user;

identifying, using the computer, in the transaction history, the items in the electronic catalog not previously purchased by the user; and

selecting, using the computer, as the plurality of items for presentation to the user, the identified at least one item in the electronic catalog previously purchased by the user and the identified items in the electronic catalog not previously purchased by the user.

9. A computer-implemented method for authenticating a user, the method comprising:

maintaining, in a storage device, a transaction history of a user, the transaction history comprising information identifying items, in an electronic catalog, purchased by the user;

selecting, using a computer, a plurality of items for presentation to the user, the plurality of items comprising at least one item, in the electronic catalog, purchased by the user and at least one item, in the electronic catalog, not purchased by the user;

detecting using the computer, a trigger associated with an operation performed by the user, the operation comprising a user selection of at least a portion of a web page;

presenting, using the computer, identifiers associated with the plurality of items to the user in response to the detected trigger;

receiving, using the computer, from the user, a selection of one or more of the identifiers; and

authenticating, using the computer, the user as a function of the selection and the transaction history of the user.

10. The method of claim 9, wherein authenticating comprises:

authenticating, using the computer, the user when the selected identifiers are included in the transaction history.

11. The method of claim 9, wherein authenticating comprises:

authenticating, using the computer, the user when one or more of the selected identifiers are not included in the transaction history.

12. The method of claim 9, wherein the transaction history is a purchase history.

13. The method of claim 9, wherein the plurality of items are products offered for sale.

14. The method of claim 9, wherein the identifiers comprise images of products.

15. The method of claim 9, wherein the identifiers comprise images of products and text.

16. The method of claim 9, wherein the trigger comprises a validation of a username and a password submitted by the user.

17. The method of claim 9, further comprising detecting, using the computer, a user selection of wherein the trigger comprises a user selection of a link to user profile information and presenting, using the computer, the plurality of identifiers associated with the plurality of items to the user in response to the detected user selection.

18. The method of claim 17, wherein the user profile information includes payment information.

19. The method of claim 9, wherein the trigger comprises an unrecognized Internet protocol address associated with the user.

20. The method of claim 9, further comprising:

updating, using the computer, the transaction history of the user.

21. A computer-implemented method for authenticating a user, the method comprising:

selecting, using a computer, a group of items for presentation to a user, the group comprising a plurality of items, in an electronic catalog, that are not included in a transaction history of the user and one or more items, in the electronic catalog, that are included in the transaction history of the user;

detecting, using the computer, a trigger associated with an operation performed by the user, the operation comprising a user selection of at least a portion of a web page;

presenting, using the computer, the group of items to the user in response to the detected trigger;

receiving, using the computer, from the user, a selection of one or more items in the group;

determining whether the selected one or more items are included in the transaction history; and

authenticating, using the computer, the user when the selected one or more items are included in the transaction history.

22. The method of claim 21, wherein the transaction history is a purchase history.

23. The method of claim 21, wherein the items are products offered for sale.

24. The method of claim 21, wherein selecting comprises:

excluding, using the computer, one or more items that are included in the transaction history of the user from the group based on a sales ranking.

25. The method of claim 21, wherein the items are shipping addresses.

26. The method of claim 21, wherein the items are payment methods.

27. The method of claim 21, wherein presenting comprises:

displaying, using the computer, a selectable option to the user that indicates none of the items in the group are included in the transaction history.

28. The method of claim 21, further comprising:

playing, using the computer, a sound clip for at least one of the items in the group.

29. The method of claim 21, further comprising:

displaying, using the computer, a video clip for at least one of the items in the group.

30. A computer-implemented method for authenticating a user, the method comprising:

selecting, using a computer, for each of a predefined plurality of categories of products, a product, wherein so that at least one of the selected products was purchased by the user;

detecting, using the computer, a trigger associated with an operation performed by the user, the operation comprising a user selection of at least a portion of a web page;

presenting, using the computer, identifiers of the selected products to the user in response to the detected trigger;

receiving, using the computer, from the user, a selection of one of the identifiers; and

authenticating, using the computer, the user based on the selection.

31. The method of claim 30, wherein authenticating comprises:

authenticating, using the computer, the user when the item corresponding to the selected identifier was purchased by the user.

32. The method of claim 30, wherein authenticating comprises:

authenticating, using the computer, the user when the item corresponding to the selected identifier was not purchased by the user.

33. The method of claim 30, wherein the trigger comprises a user selection of a new item for purchase.

34. The method of claim 30, wherein the trigger comprises initiation of a new transaction by the user.

35. The method of claim 30, further comprising detecting, using the computer, a user selection of wherein the trigger comprises a user selection of a user profile and presenting, using the computer, the plurality of identifiers associated with the plurality of items to the user in response to the detected user selection.

36. A system for authenticating a user, the system comprising:

a catalog server including a data store storing identifiers of items; and

a retail server in communication with the catalog server, the retail server operable to;

retrieve a plurality of items from the catalog server, the plurality of items including at least one item included in a transaction history of the user;

detect a trigger associated with an operation performed by the user, the operation comprising a user selection of at least a portion of a web page;

transmit, in response to the detected trigger, a plurality of identifiers of the items retrieved from the catalog server to the user;

receive, from the user, a selection of at least one of the identifiers; and

authenticate the user based on the received selection.

37. The system of claim 36, wherein the retail server is further operable to:

authenticate the user when the selected identifier is for an item included in the transaction history of the user.

38. The system of claim 36, wherein the retail server is further operable to:

authenticate the user when the selected identifier is for an item not included in the transaction history of the user.