Systems and methods for user interface control

• US 7,797,734 B2
• Filed: 10/27/2006
• Issued: 09/14/2010
• Est. Priority Date: 10/27/2005
• Status: Active Grant

• Current Assignee: Aurora Financial Systems Holdings, Inc. (MasterCard Incorporated)
• Original Assignee: Aurora Financial Systems Incorporated (MasterCard Incorporated)
• Inventors: Babi, Rene Pierre, Silbernagel, Mark Mathias
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Le; David
• Application Number:
  US11/588,371
• Publication Number:
  US 20070101411A1
• Time in Patent Office: 1,418 Days
• Field of Search: 713/155, 713/168
• US Class Current: 726/4
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Enabling and disabling login access to a web-based application by examining automatic number identification (ANI) information from a received telephone call, associating the ANI information with a user account, determining a current state of login access to a web-based application for the user account, the state of login access being one of enabled and disabled, and notifying the web-based application to change the state of login access to the other of enabled and disabled depending on the then-current state of login access. The methodology may further include examining dialed number identification service (DNIS) information of the received call to determine which of the enabling or disabling actions to take, and/or to determine which of a plurality of accounts is to be effected by the desired change in state of login access.

Claims

1. A method of controlling access to a web-based application, comprising:

receiving a telephone call from a user at an access system, the telephone call having associated therewith call setup information;

identifying a web-based user account associated with the user based on the call setup information;

determining from said call setup information whether there is a desire of the user to grant or deny future access to a web-based application associated with the web-based user account;

sending an on/off message to a login authorization system for the user account based on the user'"'"'s desire to grant or deny future access to the web-based application;

acknowledging receipt of the on/off message;

dispatching a confirmation message back to the user to confirm receipt of the on/off message; and

granting or denying access, depending on the user'"'"'s desire, to the web-based application, wherein access to the web-based application is controlled using an out-of-band link.

2. The method of claim 1, wherein the call setup information comprises automatic number identification (ANI).

3. The method of claim 2, further comprising correlating the ANI information with the user'"'"'s account associated with the web-based application.

4. The method of claim 1, wherein the call setup information comprises dialed number identification service (DNIS).

5. The method of claim 4, wherein the DNIS information includes predetermined coding to indicate the desire to grant or to deny access to the web-based application.

6. The method of claim 5, wherein the DNIS information includes an indication of a selected account among a plurality of accounts associated with a given user.

7. The method of claim 1, further comprising receiving a password or PIN during the telephone call.

8. The method of claim 1, wherein the web-based application is an email application.

9. The method of claim 1, wherein the web-based application is an on-line banking application.

10. The method of claim 1, wherein the web-based application is an on-line bill payment application.

11. The method of claim 1, wherein the web-based application is a on-line commerce application.

12. The method of claim 1, wherein the web-based application is one of a document presentation application and secure application allowing only selected access to a predetermined group of people.

13. The method of claim 1, wherein the access system is operated by a same entity as the web-based application.

14. The method of claim 1, further comprising confirming a current state of access to the web-based application by operating an interactive voice response (IVR) system to which a user gains access upon placing the telephone call.

15. The method of claim 1, wherein the confirmation message back to the user is in the form of a signal or an electronic message.

16. The method of claim 1, wherein the telephone call is initiated from a wired telephone.

17. The method of claim 1, wherein the telephone call is initiated from a mobile device.

18. The method of claim 17, wherein the telephone call is initiated from a mobile telephone.

19. The method of claim 1, further comprising receiving a login request by the web-based application and one of granting and denying login based on the desire of the user to grant or deny future access as previously detected.

36. The method of claim 1, wherein upon identification of the user account, sending an audible message back to the user to prompt the user to enter a password or personal identification number (PIN) on the user'"'"'s telephone for use by the access system and after the sending of an audible message step, performing the sending of an on/off message step.

20. A method of controlling access to a feature of a web-based application from a non-web-based system, comprising:

capturing automatic number identification (ANI) and dialed number information service (DNIS) from a telephone call placed to an access system, the telephone call having been initiated by a user;

identifying a web-based account of the user that is associated with the web-based application based on the ANI information;

receiving a password or PIN associated with the web-based account;

determining from the DNIS information whether to grant or deny future access to at least a feature of the web-based application;

notifying the web-based application with a notification message, from the access system, of one of to grant and to deny future access to at least a feature of the web-based application;

receiving an acknowledgment, at the access system, from the web-based application of receipt of the notification message; and

sending a response message from the access system to the user indicative of the acknowledgement.

21. The method of claim 20, wherein the web-based application is an email application.

22. The method of claim 20, wherein the web-based application is an on-line banking application.

23. The method of claim 20, wherein the web-based application is an on-line bill payment application.

24. The method of claim 20, wherein the web-based application is a on-line commerce application.

25. The method of claim 20, wherein the web-based application is a document presentation application.

26. The method of claim 20, wherein the web-based application is a secure application allowing only selected access to a predetermined group of people.

27. The method of claim 20, wherein the at least one feature of the web-based application is a login process.

28. The method of claim 20, wherein the access system is operated by a same entity as the web-based application.

29. The method of claim 20, wherein the response message is delivered using an interactive voice response (IVR) system to which the user gains access upon placing the telephone call.

30. The method of claim 20, wherein the response message is delivered via email.

31. The method of claim 20, wherein the response message is delivered by a short text message.

32. The method of claim 20, wherein the response message is delivered via instant message.

33. The method of claim 20, wherein the telephone call is initiated from a wired telephone.

34. The method of claim 20, wherein the telephone call is initiated from a mobile device.

35. The method of claim 34, wherein the telephone call is initiated from a mobile telephone.