Authentication of transactions in a network

Patent metadata

Field	Value
Publication number	US-10535044-B2
Application number	US-68463410-A
Country	US
Kind code	B2
Filing date	Jan 8, 2010
Priority date	Jan 8, 2010
Publication date	Jan 14, 2020
Grant date	Jan 14, 2020

Abstract

A technique for conducting a transaction via a network is described. In this technique, in response to receiving transaction information associated with the transaction via the network from a network browser in a computer, a computer system provides an encrypted version of the received transaction information via the network to an application that executes in the computer, which facilitates a comparison of the received transaction information with original transaction information provided by a user to the computer. Note that this application is separate from the network browser, and the communication with the application via the network is independent of the network browser. Moreover, if the received transaction information matches the original transaction information, the computer system receives approval for the transaction from the computer via the network.

First claim

What is claimed is:

1. A computer-implemented method for conducting a transaction via a network, comprising:
a server computer receiving transaction information associated with the transaction via the network from a network browser executing on a client computer via a first communication session;
in response to receiving the transaction information, the server computer causing an application executing on the client computer to display, at the client computer, a copy of the received transaction information by sending back the copy of the received transaction information via the network to the application via a second communication session, wherein the first communication session and the second communication session are different, wherein communications between the network browser and the server computer are independent of communications between the application and the server computer, and wherein the application is separate from the network browser;
the server computer receiving a response from the network browser via the network using the first communication session; and
the server computer conditionally performing the transaction based on the response.

2. The method of claim 1 , wherein the network includes the Internet or an intranet.

3. The method of claim 1 , wherein the transaction includes a financial transaction.

4. The method of claim 3 , wherein the financial transaction includes clearing of a negotiable instrument by a clearing house.

5. The method of claim 3 , wherein the financial transaction includes a wire transfer.

6. The method of claim 3 , wherein the financial transaction includes a credit-card transaction.

7. The method of claim 1 , wherein the transaction includes a non-financial transaction.

8. The method of claim 7 , wherein the non-financial transaction includes changing contact information of the user.

9. A non-transitory computer-readable storage medium storing instructions that, when executed by a server computer, cause the server computer to perform a method for conducting a transaction via a network, the method comprising:
receiving transaction information associated with the transaction via the network from a network browser executing on a client computer via a first communication session;
in response to receiving the transaction information, causing an application executing on the client computer to display, at the client computer, a copy of the received transaction information by sending back the copy of the received transaction information via the network to the application via a second communication session, wherein the first communication session and the second communication session are different, wherein communications between the network browser and the server computer are independent of communications between the application and the server computer, and wherein the application is separate from the network browser;
receiving a response from the network browser via the network using the first communication session; and
conditionally performing the transaction based on the response.

10. The non-transitory computer-readable storage medium of claim 9 , wherein the network includes the Internet or an intranet.

11. The non-transitory computer-readable storage medium of claim 9 , wherein the transaction includes a financial transaction.

12. The non-transitory computer-readable storage medium of claim 9 , wherein the transaction includes a non-financial transaction.

13. A server computer, comprising:
a processor; and
a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the server computer to perform a method for conducting a transaction via a network, the method comprising:
receiving transaction information associated with the transaction via the network from a network browser in a client computer via a first communication session;
in response to receiving the transaction information, causing an application executing on the client computer to display, at the client computer, a copy of the received transaction information by sending back the copy of the transaction information via the network to the application via a second communication session, wherein the first communication session and the second communication session are different, wherein communications between the network browser and the server computer are independent of communications between the application and the server computer, and
wherein the application is separate from the network browser;
receiving a response from the network browser via the network using the first communication session; and
conditionally performing the transaction based on the response.

14. The method of claim 1 , wherein the communications between the application and the server computer are performed over a secure communication channel.

15. The non-transitory computer-readable storage medium of claim 9 , wherein the communications between the application and the server computer are performed over a secure communication channel.

16. The server computer of claim 13 , wherein the communications between the application and the server computer are performed over a secure communication channel.

17. The method of claim 1 , wherein prior to receiving the transaction information, the server sends an association code to the application via the network to the client computer, and wherein the association code facilitates an association between the first and second communication sessions.

18. The method of claim 1 , wherein the response comprises an approval code entered by a user at the network browser,
wherein, responsive to receiving the approval code from the network browser via the network, the server computer performs the transaction, and
wherein the transaction information does not include the approval code.

19. The method of claim 1 , wherein, while displaying the copy of the received transaction information at the client computer, the application prompts a user at the client computer to confirm that the copy of the received transaction information matches user-provided information for the transaction entered by the user at the network browser.

20. The method of claim 1 , further comprising:
the server computer providing to the client computer executable code for the application, wherein the executable code includes a decryption key at a given location in the executable code; and
separately from the copy of the received transaction information, the server computer providing to a user of the client computer information that identifies the given location,
wherein, prior to sending back the copy of the received transaction information to the application, the server computer encrypts the received transaction information with an encryption key corresponding to the decryption key, and
wherein the application uses the information that identifies the given location to retrieve the decryption key and uses the decryption key to decrypt the encrypted received transaction information.

Assignees

• Feldman Marc
• Intuit Inc

Inventors

• Feldman Marc

Classifications

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F2221/032

  Protect output to user by software means · CPC title