# US 2008/0189763 A1 · Solicited authentication of a specific user > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2008/0189763 A1 - Document ID: US20080189763A1 - Status: Published application - Kind: A1 - Application number: 12/098,321 - Filed: 2008-04-04 - Published: 2008-08-07 - Earliest claimed: 1999-08-31 - Assignees: Tumbleweed Communications Corp. - Inventors: Jeffrey C. Smith; Jean-Christophe Bandini - Web page: https://patentgrep.com/patent/US20080189763A1 ## CPC - H04L 51/08: Annexed information, e.g. attachments - H04L 51/224: providing notification on incoming messages, e.g. pushed notifications of received messages - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Secure web-based messaging according to a “push” paradigm is augmented by specific, intended recipient authentication. In particular, a document can be sent to a specified, intended recipient through the Web using e-mail recipient notification, and the recipient is authenticated prior to delivering the document to the recipient. Such authentication prevents a cracker from snooping a delivery notification e-mail message and retrieving the document prior to retrieval by the true intended recipient. In addition, such authentication of the recipient is driven by the sender such that prior participation by the recipient in the messaging system according to the present invention is required. ## Claims ### Claim 1 A method of securely directing private information to a recipient via a messaging system, the method comprising: transmitting a first message to the recipient, the first message including a recipient-specific resource locator; and responsive to a retrieval using the recipient-specific resource locator, authenticating identity of the recipient and thereafter supplying the private information to the recipient. ### Claim 2 (depends on 1) The method of claim 1, wherein, prior to transmission of the first message, the recipient has not been enrolled for access to the private information. ### Claim 3 (depends on 1) The method of claim 1, further comprising: enrolling the recipient for subsequent access to private information after identity of the recipient has been authenticated. ### Claim 4 (depends on 1) The method of claim 1, wherein the supplying includes transmitting a second message that verifies enrollment of the recipient and includes a second resource locator by which the recipient may retrieve the private information. ### Claim 5 (depends on 1) The method of claim 1, wherein the supplying includes delivering the private information in response to a retrieval by the authenticated recipient. ### Claim 6 (depends on 1) The method of claim 1, further comprising: prior to the transmitting of the first message, receiving from a sender of the private information at least one criterion for authenticating identity of the recipient. ### Claim 7 (depends on 6) The method of claim 6, wherein the criterion specifies authentication information known, or separately communicated to, the intended recipient but generally unknown to others; and wherein the authenticating includes verifying information received from the recipient against the authentication information received from the sender. ### Claim 8 (depends on 1) The method of claim 1, wherein the first message is an e-mail message; wherein the private information includes a document encoding; and wherein the resource locator includes an URL and the authenticating is performed using a dialog that is at least initiated using content supplied to the recipient based on the URL. ### Claim 9 (depends on 6) The method of claim 6, further comprising: prior to the transmitting of the first message, receiving from a sender of the private information at least one criterion for authenticating identity of the recipient, wherein the received criterion identifies a type of authentication information for verification against a third-party information service, but does not specify the particular information with which identity of the recipient is to be authenticated. ### Claim 10 (depends on 6) The method of claim 6, further comprising: verifying information received from the recipient using a third-party information service. ### Claim 11 (depends on 9) The method of claim 9, wherein the third-party information service includes a credit card authorization server, and wherein the sender neither supplies, nor has access to, credit card information of the recipient. ### Claim 12 (depends on 9) The method of claim 9, further comprising: communicating at least some of the information received from the recipient to the third-party information service; and receiving verification from the third-party information service. ### Claim 13 A computer program product encoded in at least one computer readable medium and comprising: a first functional sequence executable in a secure messaging system to transmit a first message to a recipient not previously enrolled in the secure messaging system, wherein the first message includes a recipient-specific resource locator; a second functional sequence executable in the secure messaging system to service a session initiated by the recipient using the recipient-specific resource locator and to authenticate identity of the recipient; and a third functional sequence executable in the secure messaging system to supply the private information after successful authentication of the recipient. ### Claim 14 (depends on 13) The computer program product of claim 13, wherein the first, second and third functional sequences are executable in a networked computing environment as a delivery server. ### Claim 15 (depends on 13) The computer program product of claim 13, further comprising: a fourth functional sequence executable in the secure messaging system to receive from a sender both the private information for delivery to the recipient and at least one criterion for authenticating identity of the recipient. ### Claim 16 (depends on 13) The computer program product of claim 13, further comprising: a fifth functional sequence executable in the secure messaging system to communicate with a third-party information service capable of verifying information received from the recipient in support of the authenticating. ### Claim 17 (depends on 13) The computer program product of claim 13, wherein the computer readable medium is selected from the set of a disk, tape or other magnetic, optical or electronic storage medium. ### Claim 18 (depends on 13) The computer program product of claim 13, at least transiently encoded the computer readable medium in connection with transmission via a network, wire line, wireless or other communications medium. ### Claim 19 A method for authenticating a first user for a data transaction between the first user and a second user wherein the second user has identified the first user, the method comprising: responsive to identification of the first user by the second user and prior to creation of an account for the first user, sending a first message to the first user; in a session with the first user in response to the message, receiving user account information from the first user; and sending a second message to the first user wherein the second message informs the first user regarding creation of a user account in accordance with the received user account information. ### Claim 20 (depends on 19) The method of claim 19, wherein the first message includes a first resource locator by which the first user initiates the session. ### Claim 21 (depends on 19) The method of claim 19, further comprising: authenticating identity of the first user based at least in part on the received user account information and thereafter initiating the data transaction. ### Claim 22 (depends on 19) The method of claim 19, wherein the second message includes a second resource locator by which the first user may retrieve information of the data transaction. ### Claim 23 A method of securely conveying private information from a sender to a recipient using a push-oriented messaging system, the method comprising: receiving from the sender both the private information and at least one criterion for use in authenticating identity of the recipient if the recipient has not previously been enrolled in the messaging system; transmitting a first message to the recipient, the first message including a recipient-specific resource locator; and in a session initiated by the recipient using the recipient-specific resource locator, authenticating identity of the recipient and thereafter supplying the private information to the recipient. ### Claim 24 (depends on 23) The method of claim 23, further comprising: transmitting a second message that verifies enrollment of the recipient and includes a second resource locator by which the recipient may retrieve the private information. ### Claim 25 A system comprising: at least one processor; memory operatively coupled to the processor; and a delivery service for use in securely directing private information to recipients, including a recipient not previously enrolled therewith, the delivery service embodied as instructions instantiated in the memory and executable on the processor to receive from a sender both the private information for delivery to the recipient and at least one criterion for authenticating identity of the recipient, to transmit a first message to the recipient, wherein the first message includes a recipient-specific resource locator, to service a session initiated by the recipient using the recipient-specific resource locator and to authenticate identity of the recipient based on the criterion received from the sender. ### Claim 26 (depends on 25) The system of claim 25, wherein the criterion specifies authentication information known, or separately communicated to, the recipient but generally unknown to others; and wherein the authenticating includes verifying information received from the recipient against the authentication information received from the sender. ### Claim 27 (depends on 25) The system of claim 25, wherein the criterion identifies a type of authentication information for verification against a third-party information service, but does not specify the particular information with which identity of the recipient is to be authenticated.