Dynamic content authentication for secure merchant-customer communications

• US 9,961,086 B2
• Filed: 12/18/2015
• Issued: 05/01/2018
• Est. Priority Date: 12/18/2015
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: eBay Inc.
• Inventors: Gonzales, Jr., Sergio Pinzon
• Primary Examiner(s): Do, Khang
• Application Number:
  US14/973,903
• Publication Number:
  US 20170180385A1
• Time in Patent Office: 865 Days
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/127 Shopping or accessing services according to a time-limitation
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

According to various embodiments, the Message Authentication Engine is given permission to access dynamically changing content provided by a buyer system. The Message Authentication Engine receives a purchase request from the buyer system for an item from a vendor system. Based on the purchase request, the Message Authentication Engine retrieves a portion of the dynamically changing content from a client device of the buyer system. The Message Authentication Engine provides to the vendor system the portion of the dynamically changing content provided by the buyer system. The vendor system sends a message to the buyer system with a copy of the portion of the dynamically changing content as a visual verification that the vendor system can be trusted.

Claims

1. A computer system comprising:

a processor;

a memory device holding an instruction set executable on the processor to cause the computer system to perform operations comprising;

receiving permission for the computer system to access dynamically-changing content available on a client device corresponding to a first account, the dynamically-changing content including an image stream;

receiving a request from the first account that corresponds to the client device for a transaction with a second account that corresponds to a transaction system distinct from the computer system and the client device, the transaction system lacking the permission received by the computer system;

based on the request and the received permission, retrieving a portion of the dynamically-changing content to the computer system from the client device corresponding to the first account, the retrieving of the portion including retrieval of an image selected from multiple images in the image stream; and

sending the portion of the dynamically-changing content to the transaction system that corresponds to the second account and that lacks the permission to access the dynamically-changing content, the portion of the dynamically-changing content including the retrieved image, the portion of the dynamically-changing content causing the transaction system to include the portion in a message related to the transaction sent from the second account addressed to the first account as verification of authenticity of the second account.

2. The computer system of claim 1, wherein the receiving of the permission comprises:

receiving the permission according to a recency criteria selected by the first account, the recency criteria specifying a threshold time range during which the dynamically-changing content was created.

3. The computer system of claim 2, wherein the retrieving of the portion of the dynamically-changing content from the client device corresponding to the first account comprises:

retrieving the portion of the dynamically-changing content based on the recency criteria.

4. The computer system of claim 1, wherein the retrieving of the portion of the dynamically-changing content from the client device corresponding to the first account comprises:

selecting the portion of the dynamically-changing content based on the portion being created after receipt of the permission to access the dynamically-changing content.

5. The computer system of claim 1, wherein the dynamically-changing content comprises:

an indication of a current location of the client device corresponding to the first account.

6. The computer system of claim 1 wherein the operations further comprise:

receiving the message from the second account; and

forwarding the message to the first account.

7. A computer-implemented method, comprising:

receiving permission for a computer system to access dynamically-changing content available on a client device corresponding to a first account, the dynamically-changing content including an image stream;

receiving a request from the first account that corresponds to the client device for a transaction with a second account that corresponds to a transaction system distinct from the computer system and the client device, the transaction system lacking the permission received by the computer system;

based on the request and the received permission, via one or more processors, retrieving a portion of the dynamically-changing content to the computer system from the client device corresponding to the first account, the retrieving of the portion including retrieval of an image selected from multiple images in the image stream; and

sending the portion of the dynamically-changing content to the transaction system that corresponds to the second account and that lacks the permission to access the dynamically-changing content, the portion of the dynamically-changing content including the retrieved image, the portion of the dynamically-changing content causing the transaction system to include the portion in a message related to the transaction sent from the second account addressed to the first account as verification of authenticity of the second account.

8. The computer-implemented method of claim 7, wherein the receiving of the permission comprises:

receiving the permission according to a recency criteria selected by the first account, the recency criteria specifying a threshold time range during which the dynamically-changing content was created.

9. The computer-implemented method of claim 8, wherein the retrieving of the portion of the dynamically-changing content comprises:

retrieving the portion of the dynamically-changing content based on the recency criteria.

10. The computer-implemented method of claim 7, wherein the retrieving of the portion of the dynamically-changing content comprises:

selecting the portion of the dynamically-changing content based on the portion being created after receipt of the permission to access the dynamically-changing content.

11. The computer-implemented method of claim 7, wherein the dynamically-changing content comprises:

an indication of a current location of the client device corresponding to the first account.

12. A non-transitory computer-readable medium storing executable instructions thereon, which, when executed by a processor, cause the processor to perform operations including:

receiving permission for a computer system to access dynamically-changing content available on a client device corresponding to a first account, the dynamically-changing content including an image stream;

receiving a request from the first account that corresponds to the client device for a transaction with a second account that corresponds to a transaction system distinct from the computer system and the client device, the transaction system lacking the permission received by the computer system;

based on the request and the received permission, retrieving a portion of the dynamically-changing content to the computer system from the client device corresponding to the first account, the retrieving of the portion including retrieval of an image selected from multiple images in the image stream; and

sending the portion of the dynamically-changing content to the transaction system that corresponds to the second account and that lacks the permission to access the dynamically-changing content, the portion of the dynamically-changing content including the retrieved image, the portion of the dynamically-changing content causing the transaction system to include the portion in a message related to the transaction sent from the second account addressed to the first account as verification of authenticity of the second account.

13. The non-transitory computer-readable medium of claim 12, wherein the receiving of the permission comprises:

receiving the permission according to a recency criteria selected by the first account, the recency criteria specifying a threshold time range during which the dynamically-changing content was created.

14. The non-transitory computer-readable medium of claim 13, wherein the retrieving of the portion of the dynamically-changing content comprises:

retrieving the portion of the dynamically-changing content based on the recency criteria.

15. The non-transitory computer-readable medium of claim 12, wherein the retrieving of the portion of the dynamically-changing content comprises:

selecting the portion of the dynamically-changing content created after receipt of the permission to access the dynamically-changing content.

16. The non-transitory computer-readable medium of claim 12, wherein the dynamically-changing content comprises:

an indication of a current location of the client device corresponding to the first account.

17. The non-transitory computer-readable medium of claim 12, wherein the operations further comprise:

receiving the message from the second account; and

forwarding the message to the first account.