System and method for secure message reply

• US 7,827,603 B1
• Filed: 02/13/2004
• Issued: 11/02/2010
• Est. Priority Date: 02/13/2004
• Status: Active Grant

• Current Assignee: Citicorp Credit Services Incorporated (Citigroup Incorporated)
• Original Assignee: Citicorp Development Center Incorporated (Citigroup Incorporated)
• Inventors: Huang, Yong K., Sykes, Roy, Zusman, Joseph, Frazier, Kent, Lan, Sikun
• Primary Examiner(s): Cervetti; David Garcia
• Application Number:
  US10/777,129
• Time in Patent Office: 2,454 Days
• Field of Search: 726/14, 726/27, 726/28, 713/155
• US Class Current: 726/14
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A system and method whereby an unregistered, anonymous user at an organization'"'"'s website makes a submission/inquiry and is able to access a secure response containing private information without pre-registering or establishing an account with the organization. A response to the user is made via an unsecured e-mail notification that provides the user with an HTTPS link to an authentication page. The user then enters his/her user identification, for example, the user email address and password which was associated with the original submission/inquiry. Once the email address and password is authenticated, the secure response message is displayed on the user'"'"'s web browser in SSL. Each response is provided on a per-submission basis.

Claims

1. A method for providing a secure response to a first party, comprising the steps of:

receiving, by a server, a first submission from the first party over a communications network, wherein the first submission is directed to a second party and includes an identifier associated with the first submission, and wherein the first party is not authenticated or registered with the second party;

receiving, by a server, a response to the first submission from the second party;

storing, by a server, the response for later retrieval by the first party or the second party;

sending, by a server, a notification to the first party, wherein the notification provides information for securely accessing the response;

receiving, by a server, a second submission from the first party wherein the second submission comprises information for correlation to the identifier provided in the first submission;

authenticating, by a server, the first party; and

permitting, by a server, the first party to securely access the response from the second party, wherein the first party cannot access the stored response until the first party is authenticated via the notification to the first party.

2. The method of claim 1 wherein the communications network is the Internet.

3. The method of claim 1 wherein the identifier is a password.

4. The method of claim 3 wherein the identifier further comprises a user name.

5. The method of claim 4 wherein the user name is an email address.

6. The method of claim 1 wherein the first party is a user at a client system.

7. The method of claim 6 wherein the user is a prospect.

8. The method of claim 1 wherein the first party pre-registered with the second party prior to the submission by the first party.

9. The method of claim 1 wherein the submission from the first party is forms-based.

10. The method of claim 1 wherein the submission from the first party contains private information about the first party.

11. The method of claim 1 wherein the submission from the first party is received through a secure system.

12. The method of claim 1 wherein the second party includes a customer service representative.

13. The method of claim 1 wherein the response to the submission contains private information about the first party.

14. The method of claim 1 wherein the notification is an unsecured email notification.

15. The method of claim 14 wherein if the notification is bounced, the first submission is located and marked to indicate that the notification was bounced.

16. The method of claim 1 wherein the information for securely accessing the response comprises a secure Hypertext Transfer Protocol link to an authentication page.

17. The method of claim 1 further comprising the step of:

recording the attempts to access the response.

18. The method of claim 1 further comprising the step of:

preventing access to the response after a predetermined time period.

19. The method of claim 1 further comprising the step of:

preventing access to the response after a predetermined number of failed attempts.