Authentication method and system

• US 20110173017A1
• Filed: 03/29/2011
• Published: 07/14/2011
• Est. Priority Date: 08/21/2001
• Status: Active Grant

• Current Assignee: Smartcom Labs OY
• Original Assignee: Bookit Oy Ajanvarauspalvelu
• Inventors: Salonen, Jukka
• Granted Patent: US 9,406,062 B2
• Time in Patent Office: Days
• US Class Current: 705/1.1
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G08G 1/207 with respect to certain areas, e.g. forbidden or allowed areas with possible alerting when inside or outside boundaries
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/062 Pre-authentication

Abstract

Provide herein is a method and system capable of authenticating transactions involving at least one service provider and one or more users who are each in electronic communication. This electronic communication can be, for example, SMS, MMS, e-mail, or online account messaging. It is an aspect of certain embodiments where the transaction is an authentication and/or verification of an entity. Examples of such entities are products, actions and users.

Claims

1. A method of authorizing a transaction via a mediator, said transaction involving a user having a mobile device with a known address, said method comprising the steps of;

receiving a request from an entity by the mediator to authorize a transaction involving a user having a mobile device,

accessing said mobile device'"'"'s address,

causing a message to be sent to the mobile device address from a first reply address,

determining if a response to the first reply address authorizes the transaction, and

sending a response to the entity indicating if the transaction is authorized.

2. A method in accordance with claim 1, wherein the first reply address is selected from a plurality of possible reply addresses.

3. A method in accordance with claim 2, wherein determining if a response to the first reply address authorizes the transaction includes determining if the response to the first reply address is sent to the first reply address from the mobile device address.

4. A method in accordance with claim 2 further comprising, causing one or more additional messages to be sent to the mobile device from a second reply address, said second reply address being selected from the same plurality of possible reply addresses as the first reply address.

5. A method in accordance with claim 4 further comprising, determining if the response to the second reply address authorizes the transaction.

6. A method in accordance with claim 5 further comprising, determining an assurance level for the authorization based on the replies to the first and one or more second messages.

7. A method in accordance with claim 6, wherein the request to authorize a transaction includes a desired assurance level of authorization and the response to the entity includes the determined assurance level.

8. A method in accordance with claim 4, wherein the second reply address is selected from the same plurality of possible reply addresses as the first reply address with the exception of the first reply address.

9. A method in accordance with claim 4, wherein the content of the one or more messages is chosen based off of the reply, or lack of reply, from the mobile device to the first message.

10. A method in accordance with claim 1, wherein determining if the response to the first reply address authorizes the transaction includes determining if the response is a suitable response for the sent message.

11. A method in accordance with claim 1, wherein accessing the mobile device'"'"'s address includes sending a request to a third-party to retrieve said mobile device address.

12. A method in accordance with claim 1, wherein accessing the mobile device'"'"'s address includes retrieving said mobile device address from a database accessible by said mediator.

13. A method in accordance with claim 1, wherein said the to authorize a transaction includes the mobile device'"'"'s address and accessing said mobile device'"'"'s address includes retrieving said mobile device address from said request.

14. A method in accordance with claim 1, wherein said message is an SMS, MMS or e-mail message.

15. A mediator comprising;

a means for receiving a request from an entity to authorize a transaction involving a user having a mobile device,

a processor configured to;

access said mobile device'"'"'s address,

cause a message to be sent to the mobile device address from a first reply address, and

determine if a response to the first reply address authorizes the transaction, and

a means for sending a response to the entity indicating if the transaction is authorized.

16. A mediator in accordance with claim 15, wherein said mediator is capable of being integrated with a telecommunications network, said means for receiving a request from an entity and said means for sending a response to the entity are capable of receiving and sending over a telecommunications network.

17. A method of authorizing a transaction via a mediator, said transaction involving a user having a known electronic address, said method comprising the steps of;

receiving a request from an entity by the mediator to authorize a transaction involving a user having said address,

accessing said address,

causing a message to be sent to the address from a first reply address,

determining if a response to the first reply address authorizes the transaction, and

sending a response to the entity indicating if the transaction is authorized.

18. A method in accordance with claim 17, wherein the user'"'"'s known electronic address is an e-mail address, mobile phone address or online account name having a messaging function.