Method for secure user and transaction authentication and risk management
First Claim
Patent Images
1. A method of providing a user signature on a network transaction, comprising:
- receiving, by a security server directly from a network site, transaction information representing a transaction between a network user and a network site;
calculating, by the security server, a one-time-password based on (i) the received transaction information and (ii) a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret and the transaction information; and
transmitting, by the security server, the calculated one-time-password for application as the user'"'"'s signature on the transaction and verification by the network site;
wherein the calculated one-time-password is transmitted, by the security server to one user network device, for presentation on a window displayed by that user network device and entry by the user onto a network page associated with the network site and displayed on another user network device.
11 Assignments
0 Petitions
Accused Products
Abstract
To provide a user signature on a network transaction, a security server receives transaction information representing a transaction between a network user and a network site, such as a website, directly from the network site. The security server calculates a one-time-password based on the received transaction information and a secret shared by the security server and the network site, but not by the user. The security server transmits the calculated one-time-password for application as the user'"'"'s signature on the transaction. The one-time-password is independently calculable by the network site based on the shared secret.
242 Citations
14 Claims
-
1. A method of providing a user signature on a network transaction, comprising:
-
receiving, by a security server directly from a network site, transaction information representing a transaction between a network user and a network site; calculating, by the security server, a one-time-password based on (i) the received transaction information and (ii) a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret and the transaction information; and transmitting, by the security server, the calculated one-time-password for application as the user'"'"'s signature on the transaction and verification by the network site; wherein the calculated one-time-password is transmitted, by the security server to one user network device, for presentation on a window displayed by that user network device and entry by the user onto a network page associated with the network site and displayed on another user network device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A method of authenticating a user on a network, comprising:
-
receiving, by a security server directly from a network site, a request of the network site to have a user authenticated; calculating, by the security server, a one-time-password based on a secret shared by the security server and the network site, but not by the user, wherein the one-time-password is independently calculable by the network site based on the shared secret; and transmitting, by the security server to a window displayed on a network device of the user, the calculated one-time-password for entry by the user onto a network page associated with the network site and displayed on another network device of the user, and for subsequent verification by the network site to thereby authenticate the user. - View Dependent Claims (11, 12, 13, 14)
-
Specification