# US 12,003,497 B2 · Website verification service

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,497 B2
- Document ID: US12003497B2
- Status: Granted
- Kind: B2
- Application number: 18/091,272
- Filed: 2022-12-29
- Published: 2023-05-11
- Granted: 2024-06-04
- Earliest claimed: 2019-12-11
- Assignees: AT&T Intellectual Property I, L.P.
- Applicants: AT&T Intellectual Property I, L.P.
- Inventors: Luis Albisu; Manuel Ortiz, Jr.; Daniel Solero; Michael Maglione; Katie Alvarez
- Web page: https://patentgrep.com/patent/US12003497B2

## CPC

- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- G06F 16/9536: Search customisation based on social or collaborative filtering
- G06F 16/9577: {Optimising the visualization of content, e.g. distillation of HTML documents}
- G06F 21/44: Program or device authentication
- G06K 7/1417: {2D bar codes}
- H04L 63/102: {Entity profiles}
- H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)}
- G06F 2221/2119: Authenticating web pages, e.g. with suspicious links
- H04L 63/1458: {Denial of Service}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04W 12/65: Environment-dependent, e.g. using captured environmental data
- H04W 12/77: Graphical identity
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

The concepts and technologies disclosed herein are directed to a website verification service. A system can receive, from a web server that hosts a website, a query for a set of authentication credentials (“credentials”) to be used to verify that the website is trustworthy. The system can generate and provide the credentials to the web server. The web server can, in turn, provide the credentials to a web browser device for presentation to a user via a web browser application executing on the web browser device. The system also can provide the credentials to a verifier device. The verifier device can present the credentials to the user via a verifier application executing on the verifier device. The user can compare the credentials presented via the web browser application to the credentials presented via the verifier application executing on the verifier device to determine whether the website can be trusted.

## Claims

### Claim 1

A method comprising:
receiving, by a web site verification system comprising a processor, from a web server that hosts a website, a request to register the website;
registering, by the web site verification system, the web site for a web site verification service;
receiving, by the web site verification system, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of web site authentication credentials to the web site verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device;
generating, by the website verification system, the set of web site authentication credentials, wherein the set of web site authentication credentials comprises a code and an image, wherein the set of web site authentication credentials are generated by a web site verification service credential generator using a random generator;
providing, by the web site verification system, the set of web site authentication credentials to the verifier device associated with the user;
receiving, by the web site verification system, from the web browser device, the code of the set of web site authentication credentials; and
in response to receiving the code of the set of web site authentication credentials from the web browser device, providing, by the web site verification system, the image of the set of web site authentication credentials to the web browser device, wherein the image of the set of website authentication credentials presented to the user via the web browser device and the image of the set of web site authentication credentials presented to the user by the verifier device are used to verify that the web site is trustworthy.

### Claim 2 (depends on 1)

The method of claim 1, further comprising in response to receiving the query for the set of web site authentication credentials from the verifier device, determining if the web site is registered for the website verification service.

### Claim 3 (depends on 2)

The method of claim 2, wherein determining if the web site is registered for the website verification service comprises querying a web site verification service web site registrar based on a web link associated with the website.

### Claim 4 (depends on 1)

The method of claim 1, wherein the prompt presented to the user via the web browser application executing on the web browser device notifies the user that the website is protected by the web site verification service.

### Claim 5 (depends on 1)

The method of claim 1, wherein the web browser device receives the code of the set of web site authentication credentials via input from the user based on the set of website authentication credentials presented to the user by the verifier device.

### Claim 6 (depends on 1)

The method of claim 1, wherein if the image of the set of website authentication credentials presented to the user via the web browser device matches the image of the set of website authentication credentials presented to the user by the verifier device, an authenticity of the website is verified.

### Claim 7

A non-transitory computer-readable storage medium having computer-executable instructions stored thereon that, when executed by a processor of a website verification system, cause the web site verification system to perform operations comprising:
receiving, from a web server that hosts a website, a request to register the web site;
registering the website for a web site verification service;
receiving, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of website authentication credentials to the website verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device;
generating the set of website authentication credentials, wherein the set of website authentication credentials comprises a code and an image, wherein the set of website authentication credentials are generated by a website verification service credential generator using a random generator;
providing the set of web site authentication credentials to the verifier device associated with the user;
receiving, from the web browser device, the code of the set of website authentication credentials; and
in response to receiving the code of the set of web site authentication credentials from the web browser device, providing the image of the set of website authentication credentials to the web browser device, wherein the image of the set of website authentication credentials presented to the user via the web browser device and the image of the set of web site authentication credentials presented to the user by the verifier device are used to verify that the website is trustworthy.

### Claim 8 (depends on 7)

The non-transitory computer-readable storage medium of claim 7, wherein the operations further comprise in response to receiving the query for the set of web site authentication credentials from the verifier device, determining if the website is registered for the web site verification service.

### Claim 9 (depends on 8)

The non-transitory computer-readable storage medium of claim 8, wherein determining if the website is registered for the website verification service comprises querying a website verification service website registrar based on a web link associated with the website.

### Claim 10 (depends on 7)

The non-transitory computer-readable storage medium of claim 7, wherein the prompt presented to the user via the web browser application executing on the web browser device notifies the user that the web site is protected by the web site verification service.

### Claim 11 (depends on 7)

The non-transitory computer-readable storage medium of claim 7, wherein the web browser device receives the code of the set of web site authentication credentials via input from the user based on the set of web site authentication credentials presented to the user by the verifier device.

### Claim 12 (depends on 7)

The non-transitory computer-readable storage medium of claim 7, wherein if the image of the set of web site authentication credentials presented to the user via the web browser device matches the image of the set of website authentication credentials presented to the user by the verifier device, an authenticity of the website is verified.

### Claim 13

A web site verification system comprising:
a processor; and
a memory having computer-executable instructions stored thereon that, when executed by the processor, cause the processor to perform operations comprising:
receiving, from a web server that hosts a website, a request to register the web site,
registering the website for a web site verification service,
receiving, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of website authentication credentials to the website verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device,
generating the set of web site authentication credentials, wherein the set of website authentication credentials comprises a code and an image, wherein the set of website authentication credentials are generated by a website verification service credential generator using a random generator,
providing the set of web site authentication credentials to the verifier device associated with the user,
receiving, from the web browser device, the code of the set of website authentication credentials, and
in response to receiving the code of the set of web site authentication credentials from the web browser device, providing the image of the set of website authentication credentials to the web browser device, wherein the image of the set of website authentication credentials presented to the user via the web browser device and the image of the set of web site authentication credentials presented to the user by the verifier device are used to verify that the website is trustworthy.

### Claim 14 (depends on 13)

The web site verification system of claim 13, wherein the operations further comprise in response to receiving the query for the set of website authentication credentials from the verifier device, determining if the web site is registered for the website verification service.

### Claim 15 (depends on 14)

The website verification system of claim 14, wherein determining if the website is registered for the website verification service comprises querying a web site verification service web site registrar based on a web link associated with the website.

### Claim 16 (depends on 13)

The website verification system of claim 13, wherein the prompt presented to the user via the web browser application executing on the web browser device notifies the user that the web site is protected by the website verification service.

### Claim 17 (depends on 13)

The website verification system of claim 13, wherein the web browser device receives the code of the set of web site authentication credentials via input from the user based on the set of website authentication credentials presented to the user by the verifier device.