Means and Method of Using Cryptographic Device to Combat Online Institution Identity Theft
OwnerStephen Wilsoninventor
Life of this patent
Estimating the term…
Loading patent…
OwnerStephen Wilsoninventor
Estimating the term…
Whereas smartcards and similar cryptographic devices may customarily be used to protect against personal identity theft, this invention stores Public Keys of an institution in cryptographic devices issued by the institution to its customers, in order to protect the institution's identity from being stolen. The invention improves the security of electronic business applications using Secure Sockets Layer, Secure E-mail, Object Signing and similar low level electronic business security functions by storing various Public Keys of the institution within the cryptographic device. The invention thereby helps to reduce the likelihood of “ghosting” an institution's web site (where an illegitimate web site seeks to mimic a genuine web site in order to defraud customers), and provides a means to overcome the problem of “phishing” (where illegitimate e-mails purporting to be from the institution are sent to customers in order to elicit personal information).
1-79. (canceled)
A method for a first party to verify an identity of a second party in an electronic communication environment, the method comprising:
A system for a first party to verify an identity of a second party in an electronic communication environment, the system comprising:
A client software application for verifying an identity of a second party in an electronic communication environment, the client software application comprising:
A tamper resistant storage device storing at least one cryptographic Public Key associated with at least one electronic security protocol of a second party, the tamper resistant storage device to be held by a first party for use in verifying the identity of the second party by using the at least one cryptographic Public Key stored on the tamper resistant storage device in accordance with the at least one electronic security protocol.
Dependencies are inferred from the claim text.