# US 10,504,166 B2 · Method and system for website verification

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,504,166 B2
- Document ID: US10504166B2
- Status: Granted
- Kind: B2
- Application number: 15/200,401
- Filed: 2016-07-01
- Published: 2017-02-09
- Granted: 2019-12-10
- Earliest claimed: 2015-08-03
- Assignees: Mastercard Asia/Pacific Pte. Ltd.
- Applicants: MasterCard Asia/Pacific Pte. Ltd.
- Inventors: Suresh Satyanarayana; David Chan
- Web page: https://patentgrep.com/patent/US10504166B2

## CPC

- G06Q 30/0609: {Qualifying participants for shopping transactions (payment transaction verification G06Q20/401)}
- G06F 15/16: Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs {(coordinating program control therefor G06F9/52; in regulating and control system G05B)}
- G06F 21/565: {by checking file integrity}
- G06K 5/00: Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices
- G06Q 30/0185: {Product, service or business identity fraud}
- H04L 9/00: {Cryptographic mechanisms or cryptographic} arrangements for secret or secure communications; Network security protocols
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)}
- H04L 2463/102: applying security measure for e-commerce
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A computer-implemented method is proposed for website verification. The method comprises: storing registration records for legitimate websites in a verification register; receiving, from a website to be verified, a user-initiated verification request; responsive to the user-initiated verification request, checking that the website to be verified is in the verification register; generating and transmitting a dynamic code for display on the website if the website to be verified is in the verification register; and responsive to a user entering the dynamic code into a verification module, retrieving details of the website from the verification register and transmitting the details of the website to the user for checking against the website to be verified.

## Claims

### Claim 1

A computer-implemented method for web site verification wherein a server is configured to carry out method steps comprising:
(i) storing registration records for legitimate websites in a verification register;
(ii) receiving, from a website to be verified, a user-initiated verification request;
(iii) responsive to the user-initiated verification request, checking that the web site to be verified is in the verification register;
(iv) generating and transmitting a dynamic code for display on the website if the website to be verified is in the verification register; and
(i) responsive to a user entering the dynamic code into a verification module, retrieving details of the website from the verification register and transmitting the details of the website to the user for checking against the website to be verified.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the website is a merchant website and the user-initiated verification request is operable by the user prior to the user entering payment card details to perform an online transaction.

### Claim 3 (depends on 1)

The method according to claim 1, wherein, after registration, the website is issued with a unique registration code.

### Claim 4 (depends on 3)

The method according to claim 3, wherein the step of generating the dynamic code comprises use of the website's registration code.

### Claim 5 (depends on 3)

The method according to claim 3, wherein the step of generating the dynamic code comprises use of an acquirer code.

### Claim 6 (depends on 1)

The method according to claim 1, wherein the step of storing registration records for legitimate websites in a verification register may comprise obtaining details of legitimate web sites from a trusted server.

### Claim 7 (depends on 6)

The method according to claim 6, wherein the trusted server is operated by an Acquirer, responsible for vetting the websites prior to their registration.

### Claim 8 (depends on 3, 6)

The method according to claim 6, when dependent on claim 3, wherein the trusted server is responsible for providing the unique registration code to the website, after it has been issued by the verification register.

### Claim 9 (depends on 1)

The method according to claim 1, wherein a verification engine is provided to implement one or more of the method steps.

### Claim 10 (depends on 9)

The method according to claim 9, wherein the verification engine is configured to receive a registration code from a website and to check that the registration code matches the web site in the verification register before generating and transmitting the dynamic code for display on the website.

### Claim 11 (depends on 9)

The method according to claim 9, wherein the verification engine is configured to transmit details of the website, obtained from the verification register, for display on the website.

### Claim 12 (depends on 9)

The method according to claim 9, wherein the verification module communicates with the verification engine to retrieve and display details of the website from the register.

### Claim 13 (depends on 1)

The method according to claim 1, wherein the verification module comprises, or is a part of, a web application and/or mobile application.

### Claim 14 (depends on 1)

The method according to claim 1, wherein the details of the website that are stored on the register and/or presented to the user for verification purposes comprise one or more of the following: website address; IP address or IP address range; business/organisation name and/or contact details; logo; company number; tax registration number.

### Claim 15 (depends on 1)

The method according to claim 1, further comprising receiving user-provided content and transmitting the user provided content for display on the website.

### Claim 16 (depends on 15)

The method according to claim 15, wherein the step of transmitting the user-provided content for display on the website comprises operating a verification module to submit the user-provided content to a verification engine; and the website retrieving the user-provided content from the verification engine.

### Claim 17

A computer system for website verification comprising:
a database comprising a verification register storing registration records for legitimate websites; and
a verification engine configured to:
(i) receive verification instructions from a website when a user selects to verify the web site;
(ii) check that the website is in the verification register;
(iii) generate and transmit a dynamic code for display on the website;
(iv) receive a dynamic code entered by a user through a verification module; and
(v) retrieve and transmit details of the website obtained from the database, to the user via the verification module to enable checking of the details with the website being verified.

### Claim 18 (depends on 17)

The system according to claim 17, wherein the database further comprises registration codes for each website in the verification register.

### Claim 19 (depends on 17)

The system according to claim 17, wherein the verification engine communicates with one or more of the website, the verification register, and the verification module over a secure communication channel.

### Claim 20

A non-transitory computer-readable medium having stored thereon program instructions for causing at least one processor to perform a computer-implemented method for website verification wherein a server is configured to:
store registration records for legitimate websites in a verification register;
receive, from a website to be verified, a user-initiated verification request
responsive to the user-initiated verification request, check that the website to be verified is in the verification register;
generate and transmit a dynamic code for display on the website if the website to be verified is in the verification register; and
responsive to a user entering the dynamic code into a verification module, retrieve details of the website from the verification register and transmit the details of the website to the user for checking against the website to be verified.