Method and apparatus for improving security of a computer network utilizing simple mail transfer protocol (SMTP)

Patent metadata

Field	Value
Publication number	US-11727410-B2
Application number	US-201916506848-A
Country	US
Kind code	B2
Filing date	Jul 9, 2019
Priority date	Apr 24, 2014
Publication date	Aug 15, 2023
Grant date	Aug 15, 2023

Abstract

An email-based e-commerce system is disclosed with additional features for added security. The system may include security features for email based e-commerce providing added assurance to customers of a higher level of protection than generally required. These security features enhance the password reset function without requiring a password, generate confirmations on outside messaging systems and implement an oversight management tool for authorizing transactions. The methods and apparatus described herein may enhance security by designing a system that can confirm payments through a separate non-email based media. The e-commerce system may send alerts or requests for confirmation in a variety of media to ensure a secure payment process. The methods and apparatus described herein may expand the list of individuals that may request or approve payments based on a single account registered by a single credit card holder. A single user may receive requests from registered sub-customers for payments by email.

First claim

What is claimed is:

1. A method improving security of a computer network by restricting access to a secure webpage utilizing Simple Mail Transfer Protocol (SMTP), the method comprising:
receiving an authentication request, wherein the authentication request includes a request to access an authentication Uniform Resource Location (URL) that is associated with the secure webpage;
generating a link to the authentication URL, wherein the link contains a new authentication token;
transmitting, using SMTP, an authentication message to a registered user, wherein the authentication message includes the link to the authentication URL;
receiving a request to access the authentication URL in response to activation of the link, wherein the request to access the authentication URL includes the new authentication token;
granting access to the secure webpage associated with the authentication URL based on the new authentication token received, wherein access to the secure webpage requires a valid authentication token; and
invalidating any authentication tokens associated with the registered user other than the new authentication token in response to the granting access to the secure webpage associated with the authentication URL thereby restricting the access to the secure webpage to only the new authentication token.

2. The method of claim 1 , wherein the authentication request is generated upon customer submitting an email address on a website.

3. The method of claim 1 , wherein the authentication request is received as an email message, Short Message Service (SMS) message or social media message.

4. The method of claim 1 , further comprising:
registering a user as the registered user via a web page.

5. The method of claim 1 , further comprising:
invalidating the new authentication token after a predetermined period of time has elapsed since the secure webpage associated with the authentication URL was accessed.

6. The method of claim 1 , further comprising:
on a condition that access to the secure webpage associated with the authentication URL is not granted:
transmitting, using SMTP, the authentication message to the registered user.

7. The method of claim 1 , wherein the secure webpage associated with the authentication URL enables payment of an e-commerce transaction.

8. An apparatus for improving security of a computer network by restricting access to a secure webpage utilizing Simple Mail Transfer Protocol (SMTP), the apparatus comprising:
a network interface that is communicatively coupled to a server and a client device via network;
a memory;
a processor that is communicatively coupled to the network interface and the memory; wherein the processor is configured to:
receive, using the network interface, an authentication request, wherein the authentication request includes a request to access an authentication Uniform Resource Location (URL) that is associated with the secure webpage;
generate a link to the authentication URL, wherein the link contains a new authentication token;
transmit, using the network interface, an authentication message to a registered user via SMTP, wherein the authentication message includes the link to the authentication URL;
receive a request to access the authentication URL in response to activation of the link, wherein the request to access the authentication URL includes the new authentication token,
grant access to the secure webpage associated with the authentication URL that is hosted by the server based on the new authentication token received, wherein access to the secure webpage requires a valid authentication token; and
on a condition that access to the secure webpage associated with the authentication URL is granted:
invalidate any authentication tokens associated with the registered user other than the new authentication token thereby restricting the access to the secure webpage to only the new authentication token.

9. The apparatus of claim 8 , wherein the authentication request is generated upon customer submitting an email address on a website.

10. The apparatus of claim 8 , further comprising:
wherein the authentication request is received as an email message, Short Message Service (SMS) message or social media message.

11. The apparatus of claim 8 , wherein the processor is further configured to:
receive, using the network interface, a registration of a user, wherein the registration is performed a web page, and
identify the user as the registered user.

12. The apparatus of claim 8 , wherein the processor is further configured to:
invalidate the new authentication token after a predetermined period of time has elapsed since the secure webpage associated with the authentication URL was accessed.

13. The apparatus of claim 8 , wherein the processor is further configured to:
on a condition that access to the secure webpage associated with the authentication URL is not granted:
transmit, using the network interface, the authentication message to the registered user utilizing SMTP.

14. The apparatus of claim 8 , wherein the secure webpage associated with the authentication URL enables payment of an e-commerce transaction.

15. A non-transitory computer readable storage medium that stores instructions for improving security of a computer network by restricting access to a secure webpage utilizing Simple Mail Transfer Protocol (SMTP), the instructions when executed by a processor cause the processor to execute a method, the method comprising:
receiving, using a network interface, an authentication request, wherein the authentication request includes a request to access an authentication Uniform Resource Location (URL) that is associated with the secure webpage;
generating a link to the authentication URL, wherein the link contains a new authentication token;
transmitting, using the network interface, an authentication message to a registered user utilizing SMTP, wherein the authentication message the link to the authentication URL;
receiving a request to access the authentication URL in response to activation of the link, wherein the request to access the authentication URL includes the new authentication token;
granting access to the secure webpage associated with the authentication URL based on the new authentication token received, wherein access to the secure webpage requires a valid authentication token; and
invalidating any authentication tokens associated with the registered user other than the new authentication token in response to the granting access to the secure webpage associated with the authentication URL thereby restricting the access to the secure webpage to only the new authentication token.

16. The non-transitory computer readable storage medium of claim 15 , wherein the authentication request is received as an email message, Short Message Service (SMS) message or social media message.

17. The non-transitory computer readable storage medium of claim 15 , wherein the method further comprises: o:
invalidating the new authentication token after a predetermined period of time has elapsed since the secure webpage associated with the authentication URL was accessed.

18. The non-transitory computer readable storage medium of claim 15 , wherein the method further comprising:
on a condition that access to the secure webpage associated with the authentication URL is not granted:
transmit, using the network interface, the authentication message to the registered user utilizing SMTP.

19. The method of claim 1 , further comprising:
transmitting, us

Assignees

• Swoop Ip Holdings Llc

Inventors

• Kassemi James
• Holcomb Lawrence Glen
• Killoran Jr John P
• Killoran Patrick

Classifications

• G06Q20/405 Primary

  Establishing or using transaction specific rules · CPC title

• G06Q10/107

  Computer-aided management of electronic mailing [e-mailing] · CPC title

• G06Q20/3255

  using mobile network messaging services for payment, e.g. SMS · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/384

  using social networks · CPC title