Method and apparatus for the secure authentication of a web-site

• US 9,325,701 B2
• Filed: 06/16/2009
• Issued: 04/26/2016
• Est. Priority Date: 02/25/1999
• Status: Active Grant

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Bouyant Holdings Limited
• Inventors: Labaton, Isaac J.
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US12/485,716
• Publication Number:
  US 20090265768A1
• Time in Patent Office: 2,506 Days
• Field of Search: 713/171, 713182-185, 713178-179
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

Methods for the authentication of a web site. A dynamic identification string and a one-time password are calculated by a device. The dynamic identification string is sent to a service provider, such as a certification service server associated with the web site. In response, the server computes a one-time password. The device computed one-time password can then be compared to the server computed one-time password in order to authenticate the web site.

Claims

1. A method for authenticating a web site, comprising the steps of:

computing, by a software implemented algorithm, a time-dependent dynamic code;

computing a first one-time password corresponding to the computed time-dependent dynamic code;

transmitting the time-dependent dynamic code to the web site;

computing, by the web site, a web site computed one-time password corresponding to the time-dependent dynamic code; and

comparing, using a user interface, the first computed one-time password to the web site computed one-time password, in order to authenticate the web site.

2. The authentication method of claim 1, further comprising the step of configuring a software module to compute a time-dependent dynamic code and to compute a first one-time password.

3. The authentication method of claim 1, further comprising the step of configuring a server software module to compute a one-time password corresponding to the time-dependent dynamic code.

4. The authentication method of claim 1, wherein the web site is authenticated for by a plurality of visitors.

5. A method for authenticating a web site, comprising the steps of:

computing, by a software implemented algorithm, a displayable and human readable time-dependent dynamic code;

computing a first one-time password corresponding to the computed time-dependent dynamic code;

transmitting the time-dependent dynamic code to the web site;

computing, by the web site, a web site computed one-time password corresponding to the time-dependent dynamic code; and

comparing, using a user interface, the first computed one-time password to the web site computed one-time password, in order to authenticate the web site.

6. The authentication method of claim 5, wherein the web site is authenticated for by a plurality of visitors.

7. A method for authenticating a web site, comprising the steps of:

computing, by a software implemented algorithm, a displayable and human readable time-dependent dynamic code;

computing a first one-time password corresponding to the computed time-dependent dynamic code;

transmitting the first computed one-time password to the web site;

transmitting the time-dependent dynamic code to a third party entity server;

computing a server computed one-time password that corresponds to the time-dependent dynamic code received by the third party entity server;

receiving by the web site the server computed one-time password corresponding to the time-dependent dynamic code; and

comparing, using a user interface, the first computed one-time password to the server computed one-time password received by the web site, in order to authenticate the web site.

8. The authentication method of claim 7, wherein the step of transmitting the time-dependent dynamic code to a third party entity server comprises:

transmitting the time-dependent dynamic code, by the web site, to a third party entity server.