Network-based verification and fraud-prevention system

• US 8,769,133 B2
• Filed: 03/11/2011
• Issued: 07/01/2014
• Est. Priority Date: 12/08/1998
• Status: Expired due to Fees

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Yodlee.com, Inc. (Envestnet Incorporated)
• Inventors: Hayward, Blake Earl
• Primary Examiner(s): BILGRAMI, ASGHAR H
• Application Number:
  US13/046,010
• Publication Number:
  US 20110162052A1
• Time in Patent Office: 1,208 Days
• Field of Search: 709/229
• US Class Current: 709/229
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A system for authentication has an Internet-connected server providing services and software executing on the server from a non-transitory physical medium. The software provides a function for receiving a request for authentication from a person seeking service at the server, a function for requesting by the server one or more username/password pairs used for log-in for the person at one or more Internet sites remote from the server, a function for logging in by the server at the remote site or sites on behalf of the person, using the username/password pair or pairs provided by the person, and a function for authenticating the person at the server for interaction with the server.

Claims

1. A system for authentication, comprising:

an Internet-connected server providing services; and

software executing on the server from a non-transitory physical medium, the software providing;

a function for receiving a request for authentication from a person seeking service at the server;

a function for requesting by the server a plurality of unique username/password pairs used for log-in for the person at a separate Internet site for each username/password pair, each separate Internet site remote from the server;

a function for logging in by the server at the remote sites on behalf of the person, using the username/password pairs provided by the person; and

a function for returning a score based on success or failure of the logins and authenticating the person at the server for interaction with the server based on the score.

3. The system of claim 1 wherein a profile is created and stored for the person seeking service including the username/pas swords and Internet sites, and deleted after authentication, failure of authentication, or saved for future authentications.

2. A method for authentication, comprising steps of:

(a) accepting by a server an authentication request from a person;

(b) requesting by the server a plurality of separate, unique username/password pairs for login at separate URLs for one or more sites, each of the sites remote from the server;

(c) attempting to log-in by the server as the person at the one or more remote sites;

(d) returning a score based on success or failure of the logins; and

(e) authenticating the person by the server based on the score.

4. The method of claim 2 wherein a step is provided for creating and storing a profile for the person seeking service including the username/passwords and URLs, and deleted after authentication, failure of authentication, or saved for future authentications.