Method and apparatus for authenticating on-line transaction data

• US 6,018,724 A
• Filed: 06/30/1997
• Issued: 01/25/2000
• Est. Priority Date: 06/30/1997
• Status: Expired due to Term

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Arent, Michael A.
• Primary Examiner(s): MacDonald, Allen R.
• Assistant Examiner(s): CAUDLE, PENNY L
• Application Number:
  US08/885,055
• Time in Patent Office: 939 Days
• Field of Search: 705/44, 705/39, 395/186, 380/23
• US Class Current: 705/44
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

The present invention comprises a method and apparatus for authenticating data related to on-line transactions. The invention utilizes a user-customized certification indicator that informs a user as to the success or failure of one or more authentication and/or security protocols implemented on a user communications access device such as a personal computer, a personal digital assistant ("PDA"), an enhanced function telephone, etc. In one or more embodiments, one of the components of the indicator is user defined, and locally stored, reducing the likelihood of interception and counterfeiting. In one or more embodiments, the indicator components include a centrally provided graphic element and a user defined text overlay. When a user initiates an electronic transaction, a background validation process is initiated that implements procedures for determining the authenticity of data related to the transaction, such as the identity of a transaction party. If the validation process determines that the data is authentic, the validation process displays a certification indicator comprising the graphic overlaid with the user defined text-string. In another embodiment, the certification indicator includes one or more multi-media components, such as, for example, an audio component.

Claims

1. A method for authenticating data relating to an on-line transaction engaged in by a user using a communications access device, comprising the steps of:

determining the authenticity of said data;

outputting a certification indicator comprising a plurality of media components via said communications access device in an order defined by said user if said data is determined to be authentic.

2. A method for authenticating data relating to an on-line transaction engaged in by a user using a communications access device, comprising the steps of:

determining the authenticity of said data;

outputting a certification indicator via said communications access device when said data is determined to be authentic where said certification indicator is in the form of an audio output of said communications access device.

3. A article of manufacture comprising:

a computer processor usable medium having computer processor readable program code embodied therein for authenticating data related to an on-line transaction engaged in by a user using a communications access device, said communications access device comprising said computer processor, said computer processor readable program code in said article of manufacture comprising;

computer processor readable program code configured to cause said communications access device to determine the authenticity of said data;

computer processor readable program code configured to cause said communications access device to output a certification indicator comprising at least one user defined component, said user defined component comprising an order of outputting a plurality of media components when said data is determined to be authentic.

4. An article of manufacture comprising:

a computer processor usable medium having computer processor readable program code embodied therein for authenticating data related to an on-line transaction engaged in by a user using a communications access device, said communications access device comprising said computer processor, said computer processor readable program code in said article of manufacture comprising;

computer processor readable program code configured to cause said communications access device to determine the authenticity of said data;

computer processor readable program code configured to cause said communications access device to output a certification indicator to said user via an audio output of said communications access device when said data is determined to be authentic.

5. A communications access device for electronically engaging in an on-line transaction comprising:

a computer processor;

an output device;

a computer processor usable medium having computer processor readable program code embodied therein for authenticating data related to an on-line transaction engaged in by a user using said communications access device, said computer processor readable program code comprising;

computer processor readable program code configured to cause said communications access device to determine the authenticity of said data;

computer processor readable program code configured to cause said communications access device to output a certification indicator comprising a plurality of media components using said output device in an order defined by said user when said data is determined to be authentic.

6. A communications access device for electronically engaging in an on-line transaction comprising:

a computer processor;

an output device;

a computer processor usable medium having computer processor readable program code embodied therein for authenticating data related to an on-line transaction engaged in by a user using said communications access device, said computer processor readable program code comprising;

computer processor readable program code configured to cause said communications access device to determine the authenticity of said data;

computer processor readable program code configured to cause said communications access device to output a certification indicator comprising at least one user defined component to said user via an audio output device when said data is determined to be authentic.

7. A computer data signal embodied in a carrier wave and representing sequences of instructions which, when executed by a processor of a communications access device, cause said processor to authenticate data related to an on-line transaction engaged in by a user, by performing the steps of:

determining the authenticity of said data;

outputting a certification indicator, via said communications access device, to said user in an order defined by said user when said data is determined to be authentic.

8. A computer data signal embodied in a carrier wave and representing sequences of instructions which, when executed by a processor of a communications access device, cause said processor to authenticate data related to an on-line transaction engaged in by a user, by performing the steps of:

determining the authenticity of said data;

outputting a certification indicator to said user via an audio output of said communications access device when said data is determined to be authentic.