System, method and program for network user access

• US 20020065772A1
• Filed: 11/26/2001
• Published: 05/30/2002
• Est. Priority Date: 06/08/1998
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Saliba, Bassam A., Webb, George, Campbell, Howard, Speelpenning, Bert, Waterston, Michael L., Young, Kyle S.
• Application Number:
  US09/995,278
• Publication Number:
  US 20020065772A1
• Time in Patent Office: Days
• US Class Current: 705/40
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 30/04 Billing or invoicing

Abstract

An electronic financial system for providing financial services over the Internet has multiple billers, a service center, multiple financial institutions. The service center is responsible for distributing electronic bills on behalf of billers. The service center has a Web site that customers can directly access to examine their bills. The financial institutions also offer their own Web sites for their customers. Each financial institution'"'"'s Web site presents a home page that allows its customers to select different services, such as examining a checking or savings account balance, or conducting a funds transfer. These services are supported locally at the financial institution'"'"'s Web site. The home page also offers an option to view personal billing statements from the billers, which are stored at the service center. When the customer activates the option to view billing statements, the financial institution'"'"'s Web server links to the third party'"'"'s server to access the billing statements without exposing this link to the customer. The customer may actually be handed off to the third party'"'"'s Web site, or the financial institution'"'"'s Web server might connect to the service center'"'"'s server and use an OFX (Open Financial Exchange) protocol, and extensions to this protocol, to retrieve information from the third party'"'"'s server. The billing statements are branded with the financial institution'"'"'s name and logo to lead the customer to believe that the financial institution is providing the billing statements rather than the service center.

Claims

1. In a network-based system, a computer-implemented method comprising:

presenting a page on a network site sponsored by a hosting entity;

offering as part of the page an option to view user-specific data, wherein the user-specific data is located at a network site owned by a third party that is independent from the hosting entity;

registering the particular user with the hosting entity;

whereupon activation of the option on the hosting entity'"'"'s page by a particular user of the hosting entity, linking to the third party'"'"'s network site;

enabling access to the third party'"'"'s network site without registering the particular user with the third party; and

presenting, to the particular user, a new page at the third party'"'"'s network site that incorporates the user-specific data.

2. A computer-implemented method as recited in claim 1, wherein the linking comprises addressing a universal resource locator (URL) for the third party'"'"'s network site.

3. A computer-implemented method as recited in claim 1, wherein the linking comprises establishing a secure data connection between the hosting entity and the third party.

4. A computer-implemented method as recited in claim 1, further comprising supplying a return universal resource locator (URL) to the third party'"'"'s network site for use in returning to the hosting entity'"'"'s network site.

5. A computer-implemented method as defined in claim 1, wherein:

the page on the network site sponsored by the hosting entity identifies the hosting entity;

the linking to the third party'"'"'s network site does not expose this transfer to the particular user; and

the presenting, to the particular user, the new page at the third party'"'"'s network site also identifies the hosting entity without identifying a network address of the third party'"'"'s network site.

6. A computer-implemented method as recited in claim 1, further comprising displaying a logo of the hosting entity on the new page at the third party'"'"'s network site.

7. A computer-implemented method as recited in claim 1, wherein the linking comprises addressing a universal resource locator (URL) associated with the third party'"'"'s network site and sending an identity of the hosting entity to the third party so that the third party may identify the hosting entity in the new page.

8. A computer-implemented method as recited in claim 1, wherein the linking comprises supplying, to the third party network site, page formatting information that is used by the third party network site to present the new page, the page formatting information enabling an appearance of the new page that resembles the page presented by the hosting entity'"'"'s network site.

9. A computer-implemented method as recited in claim 1, wherein the linking comprises:

connecting to the third party'"'"'s network site; and

uploading navigation information from the third party network site to the hosting entity network site that may be used by the particular user to navigate the user-specific data resident at the third party network site.

10. A computer-implemented method as recited in claim 1, wherein:

the linking comprises addressing a universal resource locator (URL) associated with the third party'"'"'s network site and sending a token identifying the particular user; and

using the token to locate the user-specific data for the particular user.

11. A computer-implemented method as recited in claim 1, wherein presenting, to the particular user, the new page at the third party'"'"'s network site that incorporates the user-specific data further comprises:

offering as part of the new page an option to activate an additional function selected from the group consisting of an embedded hyperlink, an executable code segment, and a pop-up dialog box; and

activating the additional function upon the activation of the option to activate the additional function.

12. A computer-readable media comprising computer-executable instructions for performing the method as recited in claim 1.

14. A computer-implemented method as defined in claim 13, wherein:

the page on the network site sponsored by the hosting entity identifies the hosting entity;

the linking to the third party'"'"'s network site does not expose this transfer to the particular user; and

the presenting, to the particular user, the new page at the third party'"'"'s network site also identifies the hosting entity without identifying a network address of the third party'"'"'s network site.

15. A computer-implemented method as recited in claim 13, further comprising displaying a logo of the hosting entity on the new page at the third party'"'"'s network site.

16. A computer-implemented method as recited in claim 13, wherein the linking comprises addressing a universal resource locator (URL) associated with the third party'"'"'s network site and sending an identity of the hosting entity to the third party so that the third party may identify the hosting entity in the new page.

17. A computer-implemented method as recited in claim 13, wherein the linking comprises supplying, to the third party network site, page formatting information that is used by the third party network site to present the new page, the page formatting information enabling an appearance of the new page that resembles the page presented by the hosting entity'"'"'s network site.

18. A computer-implemented method as recited in claim 13, wherein the linking comprises:

connecting to the third party'"'"'s network site; and

uploading navigation information from the third party network site to the hosting entity network site that may be used by the particular user to navigate the user-specific data resident at the third party network site.

19. A computer-implemented method as recited in claim 13, wherein:

the linking comprises addressing a universal resource locator (URL) associated with the third party'"'"'s network site and sending a token identifying the particular user; and

using the token to locate the user-specific data for the particular user.

20. A computer-implemented method as recited in claim 13, wherein presenting, to the particular user, the new page at the third party'"'"'s network site that incorporates the user-specific data further comprises:

offering as part of the new page an option to activate an additional function selected from the group consisting of an embedded hyperlink, an executable code segment, and a pop-up dialog box; and

activating the additional function upon the activation of the option to activate the additional function.

21. A computer-readable media comprising computer-executable instructions for performing the method as recited in claim 13.

13. In a network-based system, a computer-implemented method comprising:

presenting a page on a network site sponsored by a hosting entity to a particular user;

requiring the particular user to logon with the hosting entity'"'"'s network site;

offering as part of the page an option to view user-specific data, wherein the user-specific data is located at a network site owned by a third party that is independent from the hosting entity;

whereupon activation of the option on the hosting entity'"'"'s page by the particular user of the hosting entity, linking to the third party'"'"'s network site;

enabling access to the third party'"'"'s network site without logging on the particular user with the third party'"'"'s network site; and

presenting, to the particular user, a new page at the third party'"'"'s network site that incorporates the user-specific data.

22. In a network-based system, a computer-implemented method comprising:

presenting a page on a network site sponsored by a hosting entity;

enabling users to register with the hosting entity in order to access information on the network site;

offering as part of the page an option to view user-specific data wherein the user-specific data is located at a network site owned by a third party that is independent from the hosting entity; and

whereupon activation of the option on the hosting entity'"'"'s page by a particular user of the hosting entity, linking to the third party'"'"'s network site without requiring the particular user to first register with the third party and presenting a new page at the third party'"'"'s network site.

23. A computer-implemented method as recited in claim 22, wherein the new page does not identify a network address associated with the third party'"'"'s network site.

24. A computer-implemented method as recited in claim 22, wherein the presenting a new page at the third party'"'"'s network site further comprises:

offering as part of the new page an option to activate an additional function selected from the group consisting of an embedded hyperlink, an executable code segment, and a pop-up dialog box; and

activating the additional function upon the activation of the option to activate the additional function.

26. A computer-implemented method as recited in claim 25, wherein the new page does not identify a network address associated with the third party'"'"'s network site.

27. A computer-implemented method as recited in claim 25, further comprising sending a token identifying the particular user to the third party.

28. A computer-implemented method as recited in claim 25, further comprising:

forming a token identifying the particular user;

encrypting the token using a public key of the third party; and

sending the token to the third party.

29. A computer-implemented method as recited in claim 25, wherein the linking to the third party'"'"'s network site without requiring the particular user to log on to the third party'"'"'s network site further comprises:

the hosting network site and the third party'"'"'s network site performing a security exchange to authenticate one another; and

employing encryption/decryption processes to protect against eavesdroppers and tampering third parties.

30. A computer-implemented method as recited in claim 29, wherein the security exchange is a cryptographic key exchange or a certificate exchange.

31. A computer-implemented method as recited in claim 25, wherein the linking to the third party'"'"'s network site further comprises:

offering on the new page at the third party'"'"'s network site an option to activate an additional function selected from the group consisting of an embedded hyperlink, an executable code segment, and a pop-up dialog box; and

activating the additional function upon the activation of the option to activate the additional function.

32. A computer-readable media comprising computer-executable instructions for performing the method as recited in claim 25.

25. In a network-based system, a computer-implemented method comprising:

presenting a page on a network site sponsored by a hosting entity;

prompting users to log on to the network site prior to permitting access to information on the network site;

offering as part of the page an option to view user-specific data wherein the user-specific data is located at a network site owned by a third party that is independent from the hosting entity; and

whereupon activation of the option on the hosting entity'"'"'s page by a particular user of the hosting entity, linking to the third party'"'"'s network site without requiring the particular user to log on to the third party'"'"'s network site and presenting a new page at the third party'"'"'s network site that incorporates the user-specific data.

33. An electronic system for a network, comprising:

a network server to support a network site sponsored by a hosting entity, the server presenting a page for the hosting entity'"'"'s network site that offers an option to view user-specific data, wherein the user-specific data is located at a third party that is independent from the hosting entity;

a server located at the third party to store the user-specific data; and

whereupon activation of the option on the hosting entity'"'"'s page by a particular user of the hosting entity, the network server being configured to link to the third party'"'"'s server by establishing a secure data connection between the hosting entity and the third party.

34. An electronic system as recited in claim 33, wherein the link to the third party'"'"'s server does not expose this transfer to the particular user.

35. An electronic system as recited in claim 33, wherein the third party'"'"'s server is a network server that supports pages, the third party'"'"'s server being configured to present, to the particular user, a new page that incorporates the user-specific data, the new page identifying the hosting entity and veiling the third party'"'"'s identity to lead the particular user to believe that the user-specific data is provided by the hosting entity rather than the third party.

36. An electronic system as recited in claim 33, wherein the third party'"'"'s server supplies navigation data to the hosting entity network server that may be used by the particular user to navigate the user-specific data resident on the third party'"'"'s server

37. An electronic system as recited in claim 33, wherein the hosting entity'"'"'s network server links to the third party server by addressing a universal resource locator (URL) for the third party'"'"'s network site.

38. An electronic system as recited in claim 33, wherein the hosting entity'"'"'s network server sends a token identifying the particular user to the third party'"'"'s server for use in locating the user-specific data for the particular user.

40. A program as recited in claim 39, wherein:

the remote server is a network server; and

the program further comprises a code segment that, upon execution, activates a universal resource locator (URL) of the remote network server to transfer control to the remote network server.

41. A program as recited in claim 39, wherein the code segment that, upon execution, enables the remote server to present the data specific to the particular user enables the remote server to:

present an option to activate an additional function selected from the group consisting of an embedded hyperlink, an executable code segment, and a pop-up dialog box; and

activate the additional function upon the activation of the option to activate the additional function.

42. A program as recited in claim 39, wherein the code that, upon execution, transfers control to the remote server does not expose the transfer to the particular user.

39. A program for an electronic system, the program being embodied on a computer-readable medium and executed on a server at a hosting entity, the program comprising:

a code segment that, upon execution, renders a page sponsored by the hosting entity, the page containing an option to view data specific to a particular user that is located at a remote server owned by a third party that is independent from the hosting entity;

a code segment that, upon execution, formulates a token comprising at least one of the identity of the particular user, a data, an expiration date, and an identity of the hosting entity;

a code segment that, upon execution, encrypts the token;

a code segment that, upon execution, passes the encrypted token to the remote server; and

a code segment, responsive to activation of the option by the particular user, that, upon execution, transfers control to the remote server without exposing the transfer to the particular user and to pass an identity of the particular user to the remote server to enable the remote server to present the data specific to the particular user.

43. A program for an electronic system, the program being embodied on a computer-readable medium and executed on a server at a hosting entity, the program comprising:

a code segment that, upon execution, renders a first page sponsored by the hosting entity, the first page containing an option to view data specific to a particular user that is submitted to a third party by a fourth party, the data specific to the particular user electronic being located at a remote server owned by the third party that is independent from the hosting entity;

a code segment, responsive to activation of the option by the particular user, that, upon execution, establishes a secure data connection between the hosting entity and the third party at the remote server and to obtain the data specific to the particular user; and

a code segment that, upon execution, renders a second page that presents the data specific to the particular user.

44. The program as defined in claim 43, wherein the second page does not present a network address associated with the remote server and thereby appears as if the hosting entity provided the data specific to the particular user.

46. The program as defined in claim 45, wherein the code segment that, upon execution, presents the electronic user specific data does so without presenting a network address so as to lead the particular user to believe that the user interface is sponsored by the hosting entity.

45. A program for an electronic system, the program being embodied on a computer-readable medium and executed on a server that has access to electronic user specific data, comprising:

a code segment that, upon execution, receives a request from a hosting entity to review the electronic user specific data belonging to a particular user of the hosting entity, the request containing indicia that identifies the hosting entity and an identity of the particular user;

a code segment that, upon execution, establishes a secure connection with both the particular user and a hosting entity from which to retrieve the electronic user specific data belonging to the particular user; and

a code segment that, upon execution, presents the electronic user specific data.