End-of-Session Authentication

• US 20110047602A1
• Filed: 08/21/2009
• Published: 02/24/2011
• Est. Priority Date: 08/21/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Waidner, Michael P.
• Granted Patent: US 8,713,647 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication

Abstract

Techniques for facilitating an online transaction session with an end-of-session authentication are provided. The techniques include performing a start-of-session authentication to enable an online transaction session, and performing an end-of-session authentication to end the online transaction session, wherein the end-of-session authentication comprises a scope comprising each pre-defined critical transaction from the transaction session.

Claims

1. A method for facilitating an online transaction session with an end-of-session authentication, comprising the steps of:

performing a start-of-session authentication to enable an online transaction session; and

performing an end-of-session authentication to end the online transaction session, wherein the end-of-session authentication comprises a scope comprising each pre-defined critical transaction from the transaction session.

2. The method of claim 1, wherein performing an end-of-session authentication comprises providing a user with at least one of a synopsis and a summary of all session activities.

3. The method of claim 1, wherein performing an end-of-session authentication comprises providing an interactive dialog that enables user-selection of one or more of the transactions from the transaction session to be used in the end-of-session authentication.

4. The method of claim 1, wherein performing an end-of-session authentication to end the online transaction session further comprises querying a user to at least one of confirm each pre-defined critical transaction from the transaction session and cancel the session.

5. The method of claim 1, wherein performing an end-of-session authentication comprises querying a user to enter an end-of-session credential, wherein the end-of-session credential is different from any credential used earlier in the session.

6. The method of claim 5, wherein the end-of-session credential comprises at least one of a password, a transaction authentication numbers, a personal identification number, a form of biometrics, and a challenge-response authentication protocol.

7. The method of claim 1, wherein performing an end-of-session authentication comprises using an independent channel from any channel used earlier in the session.

8. The method of claim 1, further comprising raising an alarm if the end-of-session authentication fails.

9. The method of claim 1, further comprising performing a roll-back of one or more actions from the online transaction session if the end-of-session authentication fails.

10. The method of claim 1, further comprising providing a system, wherein the system comprises one or more distinct software modules, each of the one or more distinct software modules being embodied on a tangible computer-readable recordable storage medium, and wherein the one or more distinct software modules comprise a start-of-session (SoS) authentication module, an end-of-session (EoS) authentication module, and a list of actions (LA) module executing on a hardware processor.

11. A computer program product comprising a tangible computer readable recordable storage medium including computer useable program code for facilitating an online transaction session with an end-of-session authentication, the computer program product including:

computer useable program code for performing a start-of-session authentication to enable an online transaction session; and

computer useable program code for performing an end-of-session authentication to end the online transaction session, wherein the end-of-session authentication comprises a scope comprising each pre-defined critical transaction from the transaction session.

12. The computer program product of claim 11, wherein the computer useable program code for performing an end-of-session authentication comprises computer useable program code for providing a user with at least one of a synopsis and a summary of all session activities.

13. The computer program product of claim 11, wherein the computer useable program code for performing an end-of-session authentication comprises computer useable program code for providing an interactive dialog that enables user-selection of one or more of the transactions from the transaction session to be used in the end-of-session authentication.

14. The computer program product of claim 11, wherein the computer useable program code for performing an end-of-session authentication to end the online transaction session comprises computer useable program code for querying a user to at least one of confirm each pre-defined critical transaction from the transaction session and cancel the session.

15. The computer program product of claim 11, wherein the computer useable program code for performing an end-of-session authentication comprises computer useable program code for querying a user to enter an end-of-session credential, wherein the end-of-session credential is different from any credential used earlier in the session.

16. The computer program product of claim 11, further comprising computer useable program code for raising an alarm if the end-of-session authentication fails.

17. The computer program product of claim 11, wherein the computer useable program code comprises one or more distinct software modules, and wherein the one or more distinct software modules comprise a start-of-session (SoS) authentication module, an end-of-session (EoS) authentication module, and a list of actions (LA) module executing on a hardware processor.

18. A system for facilitating an online transaction session with an end-of-session authentication, comprising:

a memory; and

at least one processor coupled to the memory and operative to;

perform a start-of-session authentication to enable an online transaction session; and

perform an end-of-session authentication to end the online transaction session, wherein the end-of-session authentication comprises a scope comprising each pre-defined critical transaction from the transaction session.

19. The system of claim 18, wherein the at least one processor coupled to the memory operative to perform an end-of-session authentication is further operative to provide a user with at least one of a synopsis and a summary of all session activities.

20. The system of claim 18, wherein the at least one processor coupled to the memory operative to perform an end-of-session authentication is further operative to provide an interactive dialog that enables user-selection of one or more of the transactions from the transaction session to be used in the end-of-session authentication.

21. The system of claim 18, wherein the at least one processor coupled to the memory operative to perform an end-of-session authentication to end the online transaction session is further operative to query a user to at least one of confirm each pre-defined critical transaction from the transaction session and cancel the session.

22. The system of claim 18, wherein the at least one processor coupled to the memory operative to perform an end-of-session authentication is further operative to query a user to enter an end-of-session credential, wherein the end-of-session credential is different from any credential used earlier in the session.

23. The system of claim 18, wherein the at least one processor coupled to the memory is further operative to raise an alarm if the end-of-session authentication fails.

24. The system of claim 18, further comprising a tangible computer-readable recordable storage medium having one or more distinct software modules embodied thereon, the one or more distinct software modules comprising a start-of-session (SoS) authentication module, an end-of-session (EoS) authentication module, and a list of actions (LA) module executing on a hardware processor.

25. An apparatus for facilitating an online transaction session with an end-of-session authentication, the apparatus comprising:

means for performing a start-of-session authentication to enable an online transaction session; and

means for performing an end-of-session authentication to end the online transaction session, wherein the end-of-session authentication comprises a scope comprising each pre-defined critical transaction from the transaction session.