US 7,444,672 B2Granted

System and method for single sign on process for websites with multiple applications and services

AssigneeJPMorgan Chase Bank, N.A.

InventorKimberly Ellmore

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method for integrating the Internet front end-sign on processes of the various systems of a financial institution which allows a customer to view and access its various financial accounts with the institution. During the initial sign up for the online access, to its accounts, a customer creates his/her User ID and password online during the same session. Once the customer has signed on (password) and verified ownership of at least one account, the system displays all of the customer's accounts that are available for access via the Internet website. The online ownership verification uses only a single account of the customer and the ownership verification criteria associated with the account. The account used for verifying a customer is first determined based on the accounts selected by the customer for accessing online. From the selected accounts, the system of the present invention creates a verification hierarchy with respect to the accounts. When determining the verification to use for the single ownership verification, the present invention selects the account from the hierarchy with the most stringent requirements.

Claims13

Dependent claims

A method for user-serviceable re-authentication for access to one or more financial accounts using a single sign on procedure, the method comprising:

establishing a user identification;
establishing a user password associated with the user identification;
presenting a user with pre-determined challenge questions;
prompting the user to create one or more original answers to one or more of the pre-determined challenge questions;
associating the one or more original answers with the respective one or more pre-determined challenge questions;
providing access to the one or more financial accounts by:
prompting the user to provide the user identification,
receiving the user identification from the user,
prompting the user to provide the user password,
providing a first mode of access to the one or more financial accounts in the event the user password from the user is received;
and
providing a second mode of access to the one or more financial accounts in the event the user password is not received, wherein the second mode provides access to the one or more financial accounts by:
selecting and presenting to the user at least one of the pre-determined challenge questions having an original answer associated therewith, and
receiving the original answer associated with each of the at least one selected pre-determined challenge questions from the user;
prompting the user to provide ownership verification information;
and
receiving the ownership verification information from the user;
wherein the one or more financial accounts comprise a plurality of financial accounts, and the method further comprises:
ranking the relative ownership verification information requirements for each of the plurality of financial accounts based on the stringency of the ownership verification requirements for each financial account;
providing the user with access to a first financial account having the most stringent ownership verification information requirements that are satisfied by the ownership verification information;
and
providing the user with access to the all of the plurality of financial accounts having less stringent ownership verification information requirements than the first financial account.

19 more elements

A system for user-serviceable re-authentication for access to one or more financial accounts using a single sign on procedure, the system comprising one or more processors adapted to:

establish a user identification;
establish a user password associated with the user identification;
interface with a user terminal to present a user with pre-determined challenge questions;
interface with the user terminal to prompt the user to create one or more original answers to one or more of the pre-determined challenge questions;
associate the one or more original answers with the respective one or more pre-determined challenge questions;
provide access to the one or more financial accounts in which the one or more processors are adapted to:
interface with the user terminal to prompt the user to provide the user identification,
interface with the user terminal to receive the user identification from the user,
interface with the user terminal to prompt the user to provide the user password,
interface with the user terminal to provide a first mode of access to the one or more financial accounts in the event the user password is received from the user, and
interface with the user terminal to provide a second mode of access to the one or more financial accounts in the event the user password is not received from the user, wherein the second mode provides access to the one or more financial accounts by:
selecting at least one of the pre-determined challenge questions having an original answer associated therewith,
interfacing with the user terminal to prompt the user to provide the original answer associated with the at least one of the pre-determined challenge questions, and
interfacing with the user terminal to receive the original answer associated with each of the at least one selected pre-determined challenge questions from the user;
prompting the user to provide ownership verification information;
and
receiving the ownership verification information from the user;
wherein the one or more financial accounts comprise a plurality of financial accounts, and the one or more processors are further adapted to:
rank the relative ownership verification information requirements for each of the plurality of financial accounts based on the stringency of the ownership verification requirements for each financial account;
interface with the user terminal to receive provide the user with access to a first financial account having the most stringent ownership verification information requirements that are satisfied by the ownership verification information;
and
interface with the user terminal to provide the user with access to the all of the plurality of financial accounts having less stringent ownership verification information requirements than the first financial account.

19 more elements

Dependencies are inferred from the claim text.

Facts

Application: 11/350,103Filed 9 Feb 2006
Published: US 2006/0129834 A115 Jun 2006
Granted: 28 Oct 2008
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/0815
For authentication of entities: providing single-sign-on or federations
G06Q 20/108
Specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems: remote banking, e.g. home banking
H04L 63/168
Implementing security features at a particular protocol layer: above the transport layer
H04L
Digital communication