Authenticating users and on-line sites
AssigneeeBay Inc.
InventorsUpendra Mardikar, Mark A. Biggar
Life of this patent
Estimating the term…
Abstract
A method and system enables a user and/or an on-line site to be authenticated by comparing a received password with an expected password, transmitting a new password if the received and expected passwords match, and authenticating a communication if the new password matches what is expected by the on-line site. The initially received password may be distorted, such as with CAPTCHA.
Claims17
A system of authenticating an on-line communication between a user and an online site, comprising:
- a memory storing information about user accounts, wherein the information comprises log-in information;
- and
- a processor configured for
- receiving information from the user;
- transmitting an image comprising a first password based on the information;
- receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
- comparing the second password with a second expected password for the user;
- and
- authenticating the communication if the second password matches the second expected password.
The system of 1, wherein the transmitting, comparing, and authenticating is by an on-line site.
A system for authenticating a user for an on-line communication between the user and an online site, comprising:
- means for receiving information from the user;
- means for transmitting an image comprising a first password based on the information;
- means for receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
- means for comparing the second password with a second expected password for the user;
- and
- means for authenticating the communication if the second password matches the second expected password.
A non-transitory computer-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method of authenticating a communication between a user and an online site comprising:
- receiving log in information from the user;
- generating a first password based on the log in information;
- transmitting an image comprising the first password;
- receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
- comparing the second password with a second expected password for the user;
- and
- authenticating the communication if the second password matches the second expected password.
Dependencies are inferred from the claim text.