Network-based verification and fraud-prevention system

• US 7,930,411 B1
• Filed: 09/14/2000
• Issued: 04/19/2011
• Est. Priority Date: 12/08/1998
• Status: Expired due to Term

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Yodlee.com, Inc. (Envestnet Incorporated)
• Inventors: Hayward, Blake Earl
• Primary Examiner(s): Bruckart; Benjamin R
• Application Number:
  US09/661,589
• Time in Patent Office: 3,869 Days
• Field of Search: 709227-229, 709/243, 709/217, 709/223, 709/250, 709/225, 709/224, 709/203, 709/238, 705/50, 705/67, 713/201
• US Class Current: 709/229
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A networked-based system for providing online verification of users applying for third-party services available through the network is provided. The system employs a first server node connected to the network for offering application to third-party services through the network, a user node connected the network for accessing the first server node and applying for third-party services, a second server node connected to the network and accessible from the first server node, the second server node for processing verification requests communicated from the first server node, a third server node connected the network and accessible from the second server node, the third server node for navigating on the network by proxy according to navigation requests communicated from the second server node and a data repository accessible at least to the second server node for storing data about users being verified. A user operating the user node accesses the first server node and applies for a service or services offered through the first server node and submits data for verification, the first server node sending the data in the form of a verification request to the second server node, the second server node creating a navigation request containing a portion of the submitted data and sending the navigation request to third server, the third server performing the navigation according to the request and reporting navigation results back to the second server, the second server reporting the results back to the first server for verification purposes.

Claims

1. A system for fraud prevention by authenticating a user at a first Internet site, comprising:

an Internet-connected verification server for performing the authentication; and

an Internet-connected appliance operable by the user for sending a request for authentication to the first Internet site;

wherein the user specifies a second and third Internet site not associated with the first Internet site and known to the user as capable of accepting the user'"'"'s username-password pair included in the request for authentication and a username-password pair for the user, and the server, in response to the request, causes automatic navigation to the second and third sites and attempts a login on behalf of the user with the username-password pair, successful login at the second and third sites allowing authentication of the user at the first Internet site.

2. The system of claim 1 wherein the verification server is a first server, and the request is sent from the appliance to a second server on the Internet which forwards at least a portion of the request to the first server, and the first server returns an indication of verification after causing the navigation and log-in attempt to the second and third sites provided by the user.

3. The system of claim 1 wherein all or a portion of the request is compared against stored user profile data for verification purposes.

4. The system of claim 1 wherein the request comprises at least three or more user specified network destination sites and user-name-password pairs for the sites, and authentication is a number based on log-in results.

5. A method for fraud prevention by authenticating a user at a first Internet site, comprising steps of:

(a) accepting by a server an authentication request from the user comprising at least a second and third Internet site not associated with the first Internet site and known to the user as capable of accepting the user'"'"'s username-password pair for each site and the username-password pairs are included in the authentication request from the user;

(b) causing, by the server, automatic navigation to the second and third sites and an automatic login attempt on behalf of the user with the username-password pairs; and

(c) reporting an indication of authenticity of the user according to success or failure of the login attempts.

6. The method of claim 5 wherein the server is a first server, and the request is sent from the appliance to a second server on the network, which forwards at least a portion of the request to the first server, and the first server returns the indication of authenticity after causing the navigation and log-in attempt at the sites provided by the user.

7. The method of claim 5 wherein all or a portion of the request is compared against stored user profile data for verification purposes.

8. The method of claim 5 wherein the request comprises three or more user specified Internet sites and username-password pairs for the sites, and authentication is a number based on log-in results.