Hallmarking verification process and system and corresponding method of and system for communication

• US 20040078564A1
• Filed: 02/20/2003
• Published: 04/22/2004
• Est. Priority Date: 03/20/2000
• Status: Active Grant

• Current Assignee: Comodo Research Lab Limited
• Original Assignee: Comodo Research Lab Limited
• Inventors: Abdulhayoglu, Melih
• Granted Patent: US 7,831,824 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

The present invention discloses a hallmark verification process for verifying a hallmark of a web site, the process comprising the step of a user activating a hallmark verification process on a device with access to the web site in which the web site does not have access to the activation of the verification request.

Claims

1. A hallmark verification process for verifying a hallmark of a web site, the process comprising the step of a user activating a hallmark verification process on a device with access to the web site in which the web site does not have access to the activation of the verification request.

2. A hallmark verification process according to claim 1, in which the activation step is the activation of an independent (i.e. independent of the web site) application for hallmark verification and/or of the activation of an operation within such an application.

3. A hallmark verification process according to claim 2, in which activation within an application is automatic.

4. A hallmark verification process according to any preceding claim, in which the web site comprises a digital certificate.

6. A hallmark verification process according to any preceding claim, in which the hallmark verification process comprises displaying in a window only verified hallmarks.

7. A hallmark verification process according to any preceding claim, in which the hallmark verification process comprises determining the location of a verified hallmark and distinctively displaying the verified hallmark.

8. A hallmark verification process according to any preceding claim, in which the hallmark verification process comprises the steps of verifying the digital certificates, displaying a hallmark from the digital certificate at a location and indicating the veracity of a certificate at the location to the user.

9. A hallmark verification process according to any preceding claim, in which as part of the verification process data (typically random data) is sent from the user to a remote hallmark verification source periodically.

10. A hallmark verification process according to any preceding claim, in which the hallmark verification process comprises the steps of:

(i) a user requesting a digital hallmark verification of a hallmark verification source and data being provided to the hallmark verification source data to identify the web site and/or service to be verified;

(ii) the hallmark verification source providing the user and the web site and/or service provider with an index signal and a corresponding verification signal;

(iii) the user providing the index signal to the web site and/or service provider;

(iv) the web site and/or service provider providing the user with the verification signal corresponding to the index signal; and

(v) the user comparing the verification signal provided by the provider with the verification signal provided by the hallmark verification source to verify the web site and/or service if the verification signals correspond.

11. A hallmark verification process according to claim 10, in which the executable program comprises a hyperlink to a web site of the hallmark verification source.

12. A hallmark verification process according to any one of claims 1 to 9, in which the hallmark verification process comprises the steps of:

(i) identifying at least one hallmark to verify on the web site;

(ii) comparing data from the hallmark on the web site with verification data; and

(iii) providing a signal to the user indicating the results of the comparison of step (ii) above.

13. A hallmark verification process according to claim 12, in which identification of the hallmark is by pattern recognition of a hallmark device.

116. A method of communication comprising a hallmark verification process according to any one of claims 1 to 57.

5. A hallmark verification process according to claim 5, in which the digital certificate comprises data for displaying the hallmark.

14. A hallmark verification process for verifying a hallmark of a web site, the process comprising the steps of:

(i) identifying at least one hallmark to verify on the web site;

(ii) comparing data from the hallmark on the web site with verification data; and

(iii) providing a signal to the user indicating the results of the comparison of step (ii) above.

15. A hallmark verification process according to claim 14, in which identification of the hallmark is by pattern recognition of a hallmark device.

16. A hallmark verification process according to claim 14 or claim 15, in which the step (ii) comprises the sub-step of:

obtaining verification data comprising attributes of the hallmark and comparing the verification data attributes with the attributes of the hallmark of the web site.

17. A hallmark verification process according to claim 14, in which a corresponding digital certificate is provided for the at least one hallmark to be verified and the step (ii) comprises the sub-steps of:

(ii) (a) obtaining verification data attributes from the digital certificate; and

(ii) (b) comparing the verification data attributes with attributes of the hallmark of the web site.

18. A hallmark verification process according to claim 17, in which the attributes of the hallmark comprises one or more of:

the URL of the web web site authorises to display the hallmark;

file name;

file format;

file size;

file dimensions;

a hash of one or more of the above characteristics;

expiry date; and

/or

location of revocation data.

19. A hallmark verification process according to claim 17 or claim 18, in which the at least one hallmark to be verified comprises a tag identifying it as such.

20. A hallmark verification process according to claim 19, in which the tag comprises a predetermined sequence, typically an alphanumeric sequence.

21. A hallmark verification process according to claim 14, in which the step (ii) comprises the sub-steps of:

(ii )(c) identifying the Uniform Resource Locator (“

URL”

) of the browser in focus;

(ii) (d) obtaining for the identified URL attributes of the at least one hallmark valid for the identified URL;

(ii) (e) comparing the obtained attributes with the attributes of the hallmark of the web site.

22. A hallmark verification process according to any one of claims 14 to 21, in which the signal provided to the user is a visual signal.

23. A hallmark verification process according to claim 22, in which the visual signal comprises the step of blanking out the content of the web site in focus, except for the verified hallmark.

24. A hallmark verification process according to claim 22, in which the visual signal comprises the step of the user moving a pointer (typically the mouse pointer) over a hallmark to be verified which hallmark only remains in place if it is verified.

25. A hallmark verification process according to claim 22, in which the visual signal comprises altering the appearance of a verified hallmark.

26. A hallmark verification process according to claim 25, in which the altered appearance includes the step of flashing the verified hallmark.

27. A hallmark verification process according to claim 26, in which the verified hallmark is flashed in colours and/or shapes that change and correspond to colours and/or shapes displayed elsewhere to the user.

28. A hallmark verification process according to any one of claims 14 to 27, in which the hallmark verification process comprises the steps of:

(i) identifying the URL of the web site in focus;

(iv) obtaining identification data for at least one hallmark valid for the web site; and

(v) providing to the user an identifier for a verified hallmark.

29. A hallmark verification process for verifying a hallmark of a web site, the process comprising the steps of:

(i) identifying the URL of the web site in focus;

(iv) obtaining identification data for at least one hallmark valid for the web site; and

(v) providing to the user an indication of a verified hallmark.

30. A hallmark verification process according to claim 29, in which identification of the hallmark is by pattern recognition of a hallmark device.

31. A hallmark verification process according to claim 29 or claim 30, in which the identification data is obtained from a hallmark verification source separate from the user'"'"'s machine.

32. A hallmark verification process according to claim 29, in which the identification data comprises a visual representation of the verified hallmark.

33. A hallmark verification process according to claim 32, in which the identification data comprises a signal identifying the verified hallmark form a hallmark database.

34. A hallmark verification process according to claim 33, in which the hallmark database is on the user'"'"'s machine.

35. A hallmark verification process according to claim 29, in which the indication provided to the user comprises a visual display of the verified hallmark.

36. A hallmark verification process according to claim 29, in which the user, web-site and remote hallmark verification source are in communication with each other via the internet.

37. A hallmark verification process according to claim 29, in which the hallmark verification process comprises the steps of:

(i) maintaining a database of verified hallmarks;

(ii) periodically reading a web site having a URL;

(iii) determining the verified hallmarks of the web site;

(iv) updating the database according to the result of step (iii); and

(v) upon a request by a user communicating to the user the verified hallmark or hallmarks of a particular URL by comparing the user request with the database of verified hallmarks.

38. A hallmark verification process according to claim 37, in which the web sites read are those prior registered with the database.

39. A hallmark verification process for verifying a hallmark of a web site, the process comprising the steps of:

(i) maintaining a database of verified hallmarks;

(ii) periodically reading a web site having a URL;

(iii) determining the verified hallmarks of the web site;

(iv) updating the database according to the result of step (iii); and

(v) upon a request by a user communicating to the user the verified hallmark or hallmarks of a particular URL by comparing the user request with the database of verified hallmarks.

40. A hallmark verification process according to claim 39, in which the step (iii) comprises the sub-steps of:

(iii) (a) comparing at least one attribute of the hallmark of the web site with the corresponding attribute of the corresponding hallmark in the database; and

(iii) (b) verifying the hallmark of the web site if the attributes match.

41. A hallmark verification process according to claim 39, in which a corresponding digital certificate is provided for the hallmark to be verified and the step (iii) comprises the sub-steps of:

(iii) (c) obtaining verification data from the digital certificate; and

(iii) (d) comparing the verification data attributes with attributes of the hallmark of the web site.

42. A hallmark verification process according to claim 41, in which the attributes compared can be one or more of:

the URL of the web web site authorises to display the hallmark;

file name;

file format;

file size;

file dimensions;

a hash of one or more of the above characteristics;

expiry date; and

/or

location of revocation data.

43. A hallmark verification process according to claim 39, in which the periodic readings are irregular in time.

44. A hallmark verification process according to claim 43, in which multiple readings may be taken in a second.

45. A hallmark verification process according to claim 39, in which a potentially verifiable hallmark is identified by a visual signature.

46. A hallmark verification process according to claim 45, in which identification of the hallmark is by pattern recognition of a hallmark device.

47. A hallmark verification process according to claim 39, in which the database maintains, for each URL read, a record of which hallmarks are verified and which are not.

48. A hallmark verification process according to claim 39, in which hallmark verification (or otherwise) is communicated visually to the user.

49. A hallmark verification process according to claim 48, in which a first colour is displayed to indicate that all hallmarks of the site are verified, a second colour is displayed to indicate unauthorised hallmarks.

50. A hallmark verification process according to claim 49, in which a third colour is displayed while hallmark verification is underway.

51. A hallmark verification process according to claim 39, in which the database is maintained on a device separate from the user'"'"'s machine, which device can be connected to the user'"'"'s machine via the internet.

52. A hallmarking verification process comprising the steps of:

(i) requesting a digital hallmark verification of a hallmark verification source and providing to the hallmark verification source data to identify the web site and/or service to be verified;

(ii) the hallmark verification source providing the user and the web site and/or service provider with an index signal and a corresponding verification signal;

(iii) providing the index signal to the web site and/or service provider;

(iv) the web site and/or service provider providing the verification signal corresponding to the index signal; and

(v) comparing the verification signal provided by the provider with the verification signal provided by the hallmark verification source to verify the web site and/or service if the verification signals correspond.

53. A hallmark verification process according to claim 52, in which the user requests a digital hallmark verification on a device with access to the web site whereby the web site does not have access to the activation of the verification request.

55. A hallmark verification process according to claim 53 or claim 54, in which the executable program comprises a hyperlink to a web site of the hallmark verification source.

56. A hallmark verification process according to claim 53, in which the user, web-site and hallmark verification source are in communication with each other via the internet.

54. A hallmark verification process according to claim 54, in which the user requests a digital hallmark verification by activating an executable program external to the digital content of the web site to be verified (or which contains the service to be verified).

57. A hallmark verification process according to claim 54, in which the executable program provides to the hallmark verification source details of the web site/service to be verified.

58. A hallmark verification system for verifying a hallmark of a web site, the system comprising a user device, a merchant device and a hallmark verification device, the user device being configured to activate a hallmark verification process with access to the web site in which the web site does not have access to the activation of the verification request.

59. A hallmark verification system according to claim 58, in which the activation step is the activation of an independent application for hallmark verification and/or of the activation of an operation within such an application.

60. A hallmark verification system according to claim 59, in which activation within an application is automatic.

61. A hallmark verification system according to claim 58, in which the web site comprises a digital certificate.

62. A hallmark verification system according to claim 61, in which the digital certificate comprises data for displaying the hallmark.

63. A hallmark verification system according to claim 58, in which the hallmark verification process comprises displaying in a window only verified hallmarks.

64. A hallmark verification system according to claim 58, in which the hallmark verification process comprises determining the location of a verified hallmark and distinctively displaying the verified hallmark.

65. A hallmark verification system according to claim 58, in which the hallmark verification process comprises the steps of verifying the digital certificates, displaying a hallmark from the digital certificate at a location and indicating the veracity of a certificate at the location to the user.

66. A hallmark verification system according to claim 58, in which as part of the verification system data (typically random data) is sent from the user to a hallmark verification source periodically.

67. A hallmark verification system according to claim 58, in which the system is configured whereby:

(i) a user requests a digital hallmark verification of a hallmark verification source and data is provided to the hallmark verification source to identify the web site and/or service to be verified;

(ii) the hallmark verification source provides the user and the web site and/or service provider with an index signal and a corresponding verification signal;

(iii) the user provides the index signal to the web site and/or service provider;

(iv) the web site and/or service provider provides the user with the verification signal corresponding to the index signal; and

(v) the user compares the verification signal provided by the provider with the verification signal provided by the hallmark verification source to verify the web site and/or service if the verification signals correspond.

68. A hallmark verification system according to claim 67, in which identification of the hallmark is by pattern recognition of a hallmark device.

69. A hallmark verification system according to claim 58, in which the user requests a digital hallmark verification on a device with access to the web site whereby the web site does not have access to the activation of the verification request.

70. A hallmark verification system according to claim 58, in which the system is configured whereby the user requests a digital hallmark verification by activating an executable program external to the digital content of the web site to be verified (or which contains the service to be verified).

71. A hallmark verification system according to claim 70, in which the executable program comprises a hyperlink to a web site of the hallmark verification centre.

72. A hallmark verification system according to claim 58, in which the user, web-site and hallmark verification source are in communication with each other via the internet.

73. A hallmark verification system according to claim 58, in which the executable program provides to the hallmark verification source details of the web site/service to be verified.

74. A hallmark verification system according to claim 58, in which the system is configured whereby:

(i) at least one hallmark to verify is identified on the web site;

(iv) data from the hallmark on the web site is compared with verification data; and

(v) a signal to the user is provided indicating the results of the comparison of step (ii) above.

75. A hallmark verification system for verifying a hallmark of a web site, the system being configured whereby:

(i) at least one hallmark to verify is identified on the web site;

(iv) data from the hallmark on the web site is compared with verification data; and

(v) a signal to the user is provided indicating the results of the comparison of step (ii) above.

76. A hallmark verification system according to claim 75, in which identification of the hallmark is by pattern recognition of a hallmark device.

77. A hallmark verification system according to claim 75, in which the feature (ii) comprises the sub-feature of:

verification data being obtained comprising attributes of the hallmark and the verification data attributes being compared with the attributes of the hallmark of the web site.

78. A hallmark verification system according to claim 75, in which a corresponding digital certificate is provided for the at least one hallmark to be verified and the feature (ii) comprises the sub-features of:

(ii) (a) verification data attributes from the digital certificate being obtained; and

(ii) (b) the verification data attributes being compared with attributes of the hallmark of the web site.

79. A hallmark verification system according to claim 78, in which the attributes of the hallmark comprises one or more of:

the URL of the web site authorises to display the hallmark;

.

file name;

file format;

file size;

file dimensions;

a hash of one or more of the above characteristics;

expiry date; and

/or

location of revocation data.

80. A hallmark verification system according to claim 75, in which the at least one hallmark to be verified comprises a tag identifying it as such.

81. A hallmark verification system according to claim 80, in which the tag comprises a predetermined sequence, typically an alphanumeric sequence.

82. A hallmark verification system according to claim 75, in which the feature (ii) comprises the sub-features of:

(ii) (c) the Uniform Resource Locator (“

URL”

) of the browser in focus being identified;

(ii) (d) for the identified URL obtaining attributes of the at least one hallmark valid for the identified URL;

(ii) (e) the obtained attributes being compared with the attributes of the hallmark of the web site.

83. A hallmark verification system according to claim 75, in which the signal provided to the user is a visual signal.

84. A hallmark verification system according to claim 82, in which the visual signal is provided by blanking out the content of the web site in focus, except for the verified hallmark.

85. A hallmark verification system according to claim 83, in which the visual signal is provided by the user moving a pointer (typically the mouse pointer) over a hallmark to be verified, which hallmark only remains in place if it is verified.

86. A hallmark verification system according to claim 83, in which the visual signal is provided by altering the appearance of a verified hallmark.

87. A hallmark verification system according to claim 86, in which the appearance is altered by flashing the verified hallmark.

88. A hallmark verification system according to claim 87, in which the verified hallmark is flashed in colours and/or shapes that change and correspond to colours and/or shapes displayed elsewhere to the user.

89. A hallmark verification system according to claim 75, in which the hallmark verification system comprises:

(i) the URL of the web site in focus being identified;

(ii) identification data for at least one hallmark valid for the web site being obtained; and

(iii) the user being provided with an identifier for a verified hallmark.

90. A hallmark verification system for verifying a hallmark of a web site, the system comprising:

(i) the URL of the web site in focus being identified;

(ii) identification data for at least one hallmark valid for the web site being obtained; and

(iii) the user being provided with an identifier for a verified hallmark.

91. A hallmark verification system according to claim 90, in which identification of the hallmark is by pattern recognition of a hallmark device.

92. A hallmark verification system according to claim 90, in which the identification data is obtained from a hallmark verification source separate from the user'"'"'s machine.

93. A hallmark verification system according to claim 90, in which the identification data comprises a visual representation of the verified hallmark.

94. A hallmark verification system according to claim 93, in which the identification data comprises a signal identifying the verified hallmark form a hallmark database.

95. A hallmark verification system according to claim 90, in which the identifier provided to the user comprises a visual display of the verified hallmark.

96. A hallmark verification system according to claim 90, in which the user, web-site and remote hallmark verification source are in communication with each other via the internet.

97. A hallmark verification system according to claim 90, in which the hallmark verification system is configured whereby:

(i) a database of verified hallmarks is maintained;

(ii) periodically reading a web site having a URL;

(iii) the verified hallmarks of the web site being determined;

(iv) the database being updated according to the result of step (iii); and

(v) upon a request by a user communicating to the user the verified hallmark or hallmarks of a particular URL by comparing the user request with the database of verified hallmarks.

98. A hallmark verification system according to claim 97, in which the web sites read are those prior registered with the database.

99. A hallmark verification system for verifying a hallmark of a web site, the process being configured whereby:

(i) a database of verified hallmarks is maintained;

(ii) periodically reading a web site having a URL;

(iii) the verified hallmarks of the web site being determined;

(iv) the database being updated according to the result of step (iii); and

(v) upon a request by a user communicating to the user the verified hallmark or hallmarks of a particular URL by comparing the user request with the database of verified hallmarks.

100. A hallmark verification system according to claim 99, in which the feature (iii) comprises the sub-features of:

(iii) (a) at least one attribute of the hallmark of the web site being compared with the corresponding attribute of the corresponding hallmark in the database; and

(iii) (b) the hallmark of the web site being verified if the attributes match.

101. A hallmark verification system according to claim 99, in which a corresponding digital certificate is provided for the hallmark to be verified and the step (iii) comprises the sub-features of:

(iii) (c) verification data being obtained from the digital certificate; and

(iii) (d) the verification data attributes being compared with attributes of the hallmark of the web site.

102. A hallmark verification system according to claim 101, in which the attributes compared can be one or more of:

the URL of the web site authorises to display the hallmark;

file name;

file format;

file size;

file dimensions;

a hash of one or more of the above characteristics;

expiry date; and

/or

location of revocation data.

103. A hallmark verification system according to claim 99, in which the periodic readings are irregular in time.

104. A hallmark verification system according to claim 103, in which multiple readings may be taken in a second.

105. A hallmark verification system according to claim 99, in which a potentially verifiable hallmark is identified by a visual signature.

106. A hallmark verification system according to claim 105, in which identification of the hallmark is by pattern recognition of a hallmark device.

107. A hallmark verification system according to claim 99, in which the database maintains, for each URL read, a record of which hallmarks are verified and which are not.

108. A hallmark verification system according to claim 99, in which hallmark verification (or otherwise) is communicated visually to the user.

109. A hallmark verification system according to claim 108, in which a first colour is displayed to indicate that all hallmarks of the site are verified, a second colour is displayed to indicate unauthorised hallmarks.

110. A hallmark verification system according to claim 108, in which a third colour is displayed while hallmark verification is underway.

111. A hallmark verification system according to claim 99, in which the database is maintained on a device separate from the user'"'"'s machine, which device can be connected to the user'"'"'s machine via the internet.

117. A communication system comprising a hallmark verification system according to any one of claims 58 to 115.

112. A digital hallmarking verification system configured whereby:

(i) upon a digital hallmark verification of a hallmark verification source being requested by a user the hallmark verification source being provided with data to identify the web site and/or service to be verified;

(ii) the hallmark verification source providing the user and the web site and/or service provider with an index signal and a corresponding verification signal;

(iii) the index signal being provided to the web site and/or service provider;

(iv) the web site and/or service provider providing the verification signal corresponding to the index signal; and

(v) comparing the verification signal provided by the provider with the verification signal provided by the hallmark verification source to verify the web site and/or service if the verification signals correspond.

113. A digital hallmarking verification system according to claim 112, in which the user requests a digital hallmark verification on a device with access to the web site whereby the web site does not have access to the activation of the verification request.

114. A digital hallmarking verification system according to claim 112, in which the user requests a digital hallmark verification by activating an executable program external to the digital content of the web site to be verified (or which contains the service to be verified).

115. A digital hallmarking verification system according to claim 114, in which the executable program provides to the hallmark verification source details of the web site/service to be verified.

118. A digital certificate comprising attributes of a hallmark.

119. A digital certificate according to claim 118, in which the certificate comprises data for displaying a hallmark.

120. A digital certificate according to claim 118, in which the certificate comprises an identifier of the web site.