Online Security Systems and Methods
AssigneeID Security, LLC
InventorNeil Judell
Life of this patent
Estimating the term…
Abstract
Described are a system and method for securing an online transaction. A request is output from an electronic device to a verification server to perform an online transaction. The verification server generates a challenge request. The challenge request is encrypted with a private key of a pair of cryptographic keys. The encrypted challenge request is decrypted with a public key of the pair of cryptographic keys. The decrypted challenge request and the challenge request generated by the verification server are compared. A verification result is generated in response to the comparison.
Claims20
A computer-implemented method for securing an online transaction, comprising:
- outputting a request from an electronic device to a verification server to perform an online transaction;
- generating from the verification server a challenge request;
- encrypting from the electronic device the challenge request with a private key of a pair of cryptographic keys;
- decrypting the encrypted challenge request with a public key of the pair of cryptographic keys;
- comparing the decrypted challenge request and the challenge request generated by the verification server;
- and
- generating a verification result by the verification server in response to the comparison.
A computer-implemented method for securing an online transaction between an electronic device and a verification server, comprising:
- generating a key pair that includes a private key and a public key;
- configuring an electronic device to include the private key;
- configuring a verification server to include the public key;
- initiating from the electronic device an online transaction, comprising:
- generating from the electronic device a transaction authorization request;
- generating from the verification server a challenge request in response to the transaction authorization request;
- encrypting the challenge request with the private key;
- decrypting the encrypted challenge request with the public key;
- comparing by the verification server the decrypted challenge request and the challenge request generated by the verification server to produce an verification result;
- and
- outputting the verification result from the verification server to the electronic device.
A computer-implemented method for securing an online transaction, comprising:
- generating from an electronic device a request to perform an online transaction;
- generating from an online security server a challenge request in response to the request;
- encrypting the challenge request with a user private key stored in the electronic device;
- outputting the encrypted challenge request to the online security server;
- decrypting the encrypted challenge request from the online security server with a user public key corresponding to the user private key;
- comparing by the online security server the decrypted challenge request and the challenge request generated by the online security server;
- encrypting user information with an authorizer public key in response to the comparison;
- decrypting the encrypted user information by an authorizing party with an authorizer private key corresponding to the authorizer public key;
- and
- outputting a result from the authorizing party.
Dependencies are inferred from the claim text.