Website verification with proof of origin
AssigneeToppan Security SAS
InventorFabrice Jogand-Coulomb
Life of this patent
Estimating the term…
Abstract
Various systems and methods for securely transacting over the Internet are described herein. The systems and methods receive, at a credential application executing on a mobile device, a disambiguation payload based on an interaction with a web service. The systems and methods receive, by the credential application, information representing the web service. The systems and methods verify, by the credential application, that an identity of the web service matches the web service represented by the information. The systems and methods, in response to successfully verifying that the identity of the web service matches the web service represented by the information, connecting to the confirmed web service for providing one or more credentials from the credential application.
Claims21
A method comprising:
- receiving, at a credential application executing on a mobile device, a disambiguation payload based on an interaction with a web service;
- receiving, by the credential application, information representing the web service by:
- generating a list of web service names comprising a name of the web service specified in the disambiguation payload and one or more names of web services that are unrelated to the web service associated with the disambiguation payload;
- and
- receiving, as the information, input from a user that selects an individual web service name from the list of web service names;
- verifying, by the credential application, that an identity of the web service matches the web service represented by the information;
- and
- in response to successfully verifying that the identity of the web service matches the web service represented by the information, connecting to the web service for providing one or more credentials from the credential application.
A system comprising:
- one or more processors configured to perform operations comprising:
- receiving, at a credential application executing on a mobile device, a disambiguation payload based on an interaction with a web service;
- receiving, by the credential application, information representing the web service by:
- generating a list of web service names comprising a name of the web service specified in the disambiguation payload and one or more names of web services that are unrelated to the web service associated with the disambiguation payload;
- and
- receiving, as the information, input from a user that selects an individual web service name from the list of web service names;
- verifying, by the credential application, that an identity of the web service matches the web service represented by the information;
- and
- in response to successfully verifying that the identity of the web service matches the web service represented by the information, connecting to the confirmed web service for providing one or more credentials from the credential application.
An apparatus comprising:
- means for receiving, at a credential application executing on a mobile device, a disambiguation payload based on an interaction with a web service;
- means for receiving, by the credential application, information representing the web service by:
- generating a list of web service names comprising a name of the web service specified in the disambiguation payload and one or more names of web services that are unrelated to the web service associated with the disambiguation payload;
- and
- receiving, as the information, input from a user that selects an individual web service name from the list of web service names;
- means for verifying, by the credential application, that an identity of the web service matches the web service represented by the information;
- and
- means for, in response to successfully verifying that the identity of the web service matches the web service represented by the information, connecting to the confirmed web service for providing one or more credentials from the credential application.
Dependencies are inferred from the claim text.