Loading patent…
AssigneeYodlee.com, Inc.
InventorsRamakrishna Satyavolu, Joaquin Gamboa-Pani
Estimating the term…
A network-based software application for enabling remote authentication of a user during a network session has a server portion for serving session validation information and additional user information when queried, a client portion for configuring and submitting parameters constraining what and how data is to be shared with a querying entity or entities, and a distributed portion for distribution and application at various connected network nodes for enabling those nodes to recognize and interact with the server portion. The application is characterized in that the server portion generates a temporary session token after a first successful authentication by the user at a web site during a network session, the token cached at the host machine of the server portion and at the user's machine or proxy machine and wherein upon navigation by the user to a next web site or form requiring secure authentication, the token is used to identify the user and a remote call is used to validate the user session instead of requiring manual authentication procedures.
A network-based software application for enabling remote authentication of a user during a network session comprising:
A method for verifying an on-line user remotely comprising steps of:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Backward citations are indexed for grants only.
For authentication of entities: providing single-sign-on or federations
For controlling access to devices or network resources: when the policy decisions are valid for a limited amount of time
Network arrangements or protocols for supporting network services or applications: session management
Digital communication
Term end not estimated
The present invention is in the field of network browser navigation and authentication methods and pertains particularly to a method for site verification of a user.
Internet browser navigation, typically referred to as “Web surfing” in the art, is well known as a mechanism enabling user access to server-stored electronic information pages on a navigable network such as the Internet network. A typical user navigating the Internet for example may be subscribed to many password-protected Web sites that offer some form of service to the user. Examples of password-protected sites may include financial service sites such as investment, mortgage, and online banking sites, travel sites, certain entertainment and music sites, news service and information sites, and so on.
Typically, a user will have a variety of different passwords and/or personal identification numbers (PIN) that must be provided to successfully log in to many of the types of sites described above. As a result, a user is frequently required to enter login information as new password protected sites or pages are navigated to. A Web browsing session embarked to conduct a large chunk of Web business, for example, may involve several logins during one Internet session. Having to remember many passwords and PIN numbers can be problematic for a user.
FIG. 1 is a system overview of a navigable network where distributed verification services are practiced.
FIG. 2 is a process diagram illustrating a distributed user name service and verification resolution method according to an embodiment of the present invention.
FIG. 3 is a screen shot of a configuration window of the software of the present invention.
The inventor provides a novel method and apparatus for enabling remote site-verification of a user during Web surfing across multiple sites, avoiding any requirement for manual login procedures at password-protected web sites subscribed to by the user. The method and apparatus of the present invention is explained in enabling detail below.
FIG. 1 is a system overview illustrating a navigable network 100 wherein a user verification service according to an embodiment of the invention is practiced. Communications network 100 primarily consists of a data packet network (DPN) 102 labeled herein the Internet network. It may be assumed that sub-networks and COST networks are also part of network 100. In this example, a public-switched telephone network (PSTN) 114 is illustrated as a connecting sub-network to Internet 102. An Internet service provider (ISP) 110 is illustrated between an illustrated user 116, and Internet 102.
Internet 102 is represented in this example as a network cloud and also by an Internet backbone 101 extending through cloud 102. Backbone 101 represents all of the lines connection points and equipment making up the Internet network as a whole. Therefore, there are no geographic limits to the practice of the present invention. The inventor chooses the Internet network in this example because of availability of known standard protocols and high public accessibility. In alternate embodiments, the invention could be applied to other wide-area-networks (WAN).