Systems and Methods to Authenticate Users

• US 20110185406A1
• Filed: 01/24/2011
• Published: 07/28/2011
• Est. Priority Date: 01/26/2010
• Status: Abandoned Application

• Current Assignee: Boku Incorporated
• Original Assignee: Boku Incorporated
• Inventors: Hirson, Ron, Yoo, David
• Application Number:
  US13/012,589
• Publication Number:
  US 20110185406A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Systems and methods are provided to facilitate online transactions via mobile communications. In one aspect, a system includes a data storage facility to store account information with a phone number of the user and an interchange coupled with the data storage facility. The interchange includes a common format processor and a plurality of converters to interface with a plurality of different controllers of mobile communications. The converters are configured to communicate with the controllers in different formats; and the converters are configured to communicate with the common format processor in a common format to facilitate authentication of the user to sign in the account.

Claims

1. A computer-implemented method, comprising:

receiving, at a computer, a request from a host to authenticate a user to sign in an account on the host;

communicating, by the computer, with a mobile phone of the user at a phone number specified by the user to confirm an identity of the user; and

if the identity of the user is confirmed via the communicating with the mobile phone, providing, by the computer, information to the host to allow the user to sign in the account.

2. The method of claim 1, wherein the request comprises a web request from a browser of the user, redirected from the host to the computer.

3. The method of claim 2, further comprising:

providing, by the computer, a user interface on the browser of the user to receive the phone number specified by the user.

4. The method of claim 3, wherein the communicating comprises receiving a personal identification number (PIN) from the mobile phone of the user;

and the identity of the user is not confirmed by the computer if the PIN is not associated with the phone number prior to the receiving of the request.

5. The method of claim 4, wherein the providing of the information comprises redirecting the web browser from the computer to the host;

and the information comprises an identifier to uniquely represent the user among a plurality of users.

6. The method of claim 5, wherein the identifier is generated from hashing the mobile phone number and the PIN.

7. The method of claim 5, wherein the identifier is pre-associated with the phone number and the host.

8. The method of claim 1, wherein the account is a new account of the user created on the host;

and the information associates the account identifier with an identifier representing the user.

9. The method of claim 1, wherein the communicating comprises receiving a one-time password generated on the mobile phone of the user.

10. The method of claim 1, wherein the information is provided by the computer to the host without going through the user.

11. The method of claim 10, wherein the request includes an identification code to identify a session initiated on the host to sign in the user;

and the information comprises the identification code.

12. The method of claim 1, wherein the user has a plurality of accounts on the host;

and the information provided from the computer to the host allows the user to access the plurality of accounts.

13. The method of claim 1, further comprising:

determining, by the computer, an identifier of the account based on the communicating with the mobile phone, wherein the information comprises the identifier of the account of the user.

14. The method of claim 1, wherein the request comprises the phone number;

and the request is received by the computer from the host without going through the user.

15. The method of claim 1, wherein the account is funded by funds associated with the phone number and paid by the computer to the host on behalf of the user.

16. The method of claim 15, further comprising:

transmitting, by the computer, one or more premium messages to the mobile phone to collect the funds.

17. The method of claim 1, wherein the information allows the user to sign in the account, without the user paying the host using the computer.

18. The method of claim 1, wherein the account allows the user to access at least one of:

email, instant messaging, social networking, blogging, banking, online shopping, gaming, online communication, and content sharing.

19. A computer-readable storage media storing instructions, the instructions causing a computer to perform a method, the method comprising:

receiving, at the computer, a request from a host to authenticate a user to sign in an account on the host;

communicating, by the computer, with a mobile phone of the user at a phone number specified by the user to confirm an identity of the user; and

if the identity of the user is confirmed via the communicating with the mobile phone, providing, by the computer, information to the host to allow the user to sign in the account.

20. A system, comprising:

a data storage facility to store account information with a mobile phone number of a user; and

an interchange coupled with the data storage facility, the interchange including a common format processor and a plurality of converters to interface with a plurality of controllers, the converters configured to communicate with the controllers in different formats, the converters to communicate with the common format processor in a common format, the common format processor to receive a request from a host to authenticate the user to sign in an account on the host, the common format processor to instruct a first controller of the controllers, via a first converter of the converters, to communicate with a mobile phone of the user at the mobile phone number to confirm an identity of the user, and if the identity of the user is confirmed via communicating with the mobile phone, the common format processor to provide the host with the account information to allow the user to sign in the account.